Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
File: ur8nIaXXgzW3uX22OuxDXJyji8c.mft (raw, json)
Hash identifier: cZjkIzuFh0NzfW7s2f8qMxrwHxa+mxgi70BMt6ONB2c=
Subject key identifier: 4B:B5:70:BE:26:BB:02:2B:D4:6F:E5:5F:ED:CA:C0:79:82:AB:16:11
Authority key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
Certificate issuer: /CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Certificate serial: 01974A7B0B9053B27D69454619E627179A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
Manifest number: 0777
Signing time: Sat 07 Jun 2025 13:01:07 +0000
Manifest this update: Sat 07 Jun 2025 13:01:07 +0000
Manifest next update: Sun 08 Jun 2025 13:01:07 +0000
Files and hashes: 1: ur8nIaXXgzW3uX22OuxDXJyji8c.crl (hash: IcxUV3mFVVhC2vogT2iwGa2GQzcDNhsOwrJVLgAzMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:0b:90:53:b2:7d:69:45:46:19:e6:27:17:9a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Validity
Not Before: Jun 7 13:01:07 2025 GMT
Not After : Jun 8 13:01:07 2025 GMT
Subject: CN=4bb570be26bb022bd46fe55fedcac07982ab1611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:2f:00:ff:af:18:08:2c:9d:c9:40:c3:f3:
9b:21:49:ba:61:60:0d:61:ad:e7:d4:a8:0b:9f:f2:
25:95:2c:45:d8:30:e3:ba:25:0b:ce:ea:3e:ba:88:
b8:5a:e7:9d:90:50:09:6a:b2:96:17:4e:ca:4b:24:
9f:30:5d:b7:02:5f:c6:73:05:ee:91:d0:2d:b7:1c:
3f:92:29:1e:3b:55:5e:e8:da:13:f5:74:e5:b8:44:
0f:a4:62:f1:f3:15:b2:d3:e0:7f:7a:d9:52:4a:86:
de:a0:2c:14:e2:07:d2:27:d8:f9:ee:f6:c7:db:08:
c7:b2:f9:10:0b:46:dd:3a:b7:29:10:4c:7c:cf:b0:
da:be:17:7a:da:61:dd:5e:3a:cd:9d:c2:6a:50:9e:
be:ad:9a:24:de:df:c3:0a:53:eb:f5:93:d1:37:8f:
9f:98:b7:f9:97:4c:c6:3e:d3:c0:f0:bf:a2:25:e5:
6c:14:a3:4f:2d:aa:17:9d:97:3d:24:39:ae:3d:20:
6c:2b:7e:b9:41:c4:26:21:c1:62:ff:dc:39:2e:ee:
c0:9a:79:cf:8c:13:d5:13:39:5b:a2:4b:4e:ef:24:
e1:3b:57:08:d5:89:15:a4:8f:7b:bc:8c:f7:bb:0d:
f6:0d:f9:e5:55:3f:80:95:43:48:9e:b4:19:a7:28:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B5:70:BE:26:BB:02:2B:D4:6F:E5:5F:ED:CA:C0:79:82:AB:16:11
X509v3 Authority Key Identifier:
keyid:BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:24:80:2e:ed:fd:0b:a2:72:d2:93:6e:cb:a4:98:ae:a0:6c:
15:59:ba:b4:12:12:50:3d:95:a4:5f:2d:af:26:da:cd:3c:db:
e3:2e:e2:2e:df:0f:cf:f9:5e:8b:18:af:c9:07:37:b0:82:63:
d1:72:34:cc:1d:48:49:cd:0b:ff:1f:20:26:b7:f7:62:ee:93:
d1:5a:5a:d6:9e:5b:92:d4:7c:fe:c5:e6:58:b3:7b:c3:61:87:
ab:65:62:be:98:29:34:5e:e6:3f:a8:32:b4:6f:0c:d1:05:4f:
0b:ae:d1:1e:4e:a3:74:38:31:ef:82:13:7c:6f:dd:89:7d:25:
e9:b5:20:0f:6e:b5:de:59:9b:b0:72:72:f5:6b:80:05:4f:10:
3d:d9:70:05:5a:b1:b7:92:4d:70:cf:32:e8:fc:4f:e6:29:64:
23:91:54:4b:61:c5:ee:a2:8d:ff:81:88:b7:83:87:18:2c:72:
9d:a1:0e:6e:dc:2b:0a:a0:98:37:a3:59:1d:de:9d:04:12:fd:
45:48:c5:f1:86:a4:26:29:ef:ff:e8:fe:0a:2d:a3:b6:9f:d5:
8c:18:43:5b:28:e7:fa:25:d8:2f:d0:73:ea:74:25:1c:a6:77:
74:d8:f4:91:d9:6d:01:0a:e6:a0:be:33:59:13:46:40:3d:2c:
fe:5c:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:14 2025 by rpki-client