Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json)
Hash identifier: TB46WIwCj8ZCu9Mwox5WGAZika/DNZXlLi7GSdDl2uo=
Subject key identifier: 1B:3A:FB:10:7D:5C:45:4D:A1:10:32:AC:FD:C1:55:2A:37:E2:EF:66
Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Certificate serial: 01992255A07B50AB683D3FD359598CF297AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
Manifest number: 03C1
Signing time: Sun 07 Sep 2025 04:01:00 +0000
Manifest this update: Sun 07 Sep 2025 04:01:00 +0000
Manifest next update: Mon 08 Sep 2025 04:01:00 +0000
Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: wChlWE3nIv42dESQwC0dM0yk1pR+gJ8rGV1qZFwWl9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:a0:7b:50:ab:68:3d:3f:d3:59:59:8c:f2:97:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Validity
Not Before: Sep 7 04:01:00 2025 GMT
Not After : Sep 8 04:01:00 2025 GMT
Subject: CN=1b3afb107d5c454da11032acfdc1552a37e2ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:9c:10:af:4c:8d:5f:0a:03:3b:7a:53:ee:
ec:68:b2:89:2f:77:49:e5:09:b0:9a:f9:f7:a9:5c:
c2:e7:d7:89:68:d3:ef:1f:fd:20:9a:af:00:d2:5e:
fe:b0:bb:21:58:15:8a:31:b9:f6:12:61:1f:fa:b3:
99:61:87:8a:e9:40:87:f6:96:b2:b5:32:35:28:60:
6d:51:4b:2f:8f:9d:e3:60:e9:a9:5b:6e:14:4d:fd:
2b:45:80:29:30:8a:66:81:52:10:e4:fc:13:34:09:
bb:09:3f:07:eb:8b:dd:75:db:6a:d2:61:55:96:a6:
68:11:3a:34:9a:1a:86:8d:ae:44:b2:3a:3e:e9:c5:
f7:b4:ec:c0:0e:49:31:aa:57:36:1b:7b:77:63:d5:
1a:1a:c5:13:c7:29:b4:f1:0e:d1:09:d0:89:9f:0d:
c5:6e:5f:cb:b7:cf:e8:12:7a:ab:82:92:88:1f:01:
44:11:99:c2:01:eb:80:38:49:9b:47:12:a8:e1:d5:
97:3a:ac:fd:6b:47:5a:61:02:69:54:0a:78:94:90:
54:51:1f:d4:bc:b6:ad:e4:55:7c:68:bf:e2:80:05:
ca:e8:11:c8:52:7a:e7:1c:66:be:c3:26:d7:09:10:
27:0b:09:23:00:95:9e:7b:6b:2c:1c:73:a1:a5:e5:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3A:FB:10:7D:5C:45:4D:A1:10:32:AC:FD:C1:55:2A:37:E2:EF:66
X509v3 Authority Key Identifier:
keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:35:04:5b:81:c9:22:8b:ed:b5:ef:c9:6e:01:93:e7:fd:78:
66:e4:cf:4f:69:10:45:d0:54:8a:c1:8e:3d:3e:b3:70:6b:16:
ca:03:1c:30:77:22:34:42:2a:a1:aa:04:46:8b:8e:5f:ec:64:
85:c5:41:2b:45:41:b4:6d:b4:81:fd:89:4d:bf:1b:d6:ca:18:
99:49:00:b7:36:2f:64:01:91:49:6a:87:e6:dc:a8:17:1c:5b:
1f:56:3e:6b:3e:b4:7a:61:47:03:40:24:6d:6b:60:79:ff:96:
be:f0:a8:71:cd:31:84:6c:2c:4a:c0:94:dd:88:de:1a:58:11:
af:a3:1b:5b:50:c5:a1:81:85:3b:84:00:ff:71:f8:22:6c:08:
2f:96:de:22:16:f8:be:e5:17:d8:12:14:ef:66:ec:0f:7b:c0:
f5:3b:25:c3:40:fd:7c:42:5f:02:f0:c1:62:29:8f:ea:7b:ba:
13:bc:1d:e9:8b:12:b7:9f:88:b0:a4:e3:c8:21:27:50:ea:c2:
a4:50:42:a8:47:c0:8c:27:a6:3d:51:47:a8:7d:bf:ea:4c:a7:
76:da:ba:90:1d:ee:5a:5a:51:28:c8:4b:66:85:8a:60:5b:66:
3a:0d:11:bf:52:3e:d2:fe:b0:3a:86:49:ec:cf:8c:db:8f:0a:
1c:6c:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:43 2025 by rpki-client