Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: a1ib6xSxMEq4RIu5Ec6FfivR9rFInkUwJk/G7pj1fMY=
Subject key identifier: A2:1F:8A:B3:E5:33:8D:66:E8:CA:36:17:CB:97:A5:74:8A:72:BF:DC
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 01974C68C17DC59B5520B4AEB1314E7A1EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 22:00:23 +0000
Manifest this update: Sat 07 Jun 2025 22:00:23 +0000
Manifest next update: Sun 08 Jun 2025 22:00:23 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: 6kPhraEZwVLzPVV9cRpMOfh2o/NUSq2lQtu4y2D9Oc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:c1:7d:c5:9b:55:20:b4:ae:b1:31:4e:7a:1e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Jun 7 22:00:23 2025 GMT
Not After : Jun 8 22:00:23 2025 GMT
Subject: CN=a21f8ab3e5338d66e8ca3617cb97a5748a72bfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:d0:fc:60:fd:08:d1:20:3f:53:85:c6:a9:
4f:25:76:48:36:08:fe:3b:b0:1c:67:30:85:17:fd:
85:41:48:48:75:47:27:9f:86:07:b7:9f:51:a4:f9:
01:dd:5b:04:de:2b:74:1a:dc:5f:d5:79:53:18:bc:
3b:10:d2:f5:30:02:15:44:32:59:b5:08:48:33:61:
ac:3b:d3:96:03:08:6b:b6:ff:d0:3d:56:16:89:93:
5e:5b:2e:1b:b0:74:a9:d8:d9:fc:c8:65:c0:6f:1e:
e4:7f:f2:2d:b6:21:7d:0c:8e:3a:73:8d:50:c4:3e:
59:ec:05:36:1d:a7:ab:89:41:02:ab:57:30:c4:1f:
27:5a:b9:d0:3f:4a:c4:5d:c6:c3:f8:3d:a7:83:20:
44:79:9a:6b:d8:08:fa:76:cb:42:23:c2:de:ff:c0:
4d:6a:e9:1d:34:e1:d4:22:dd:1c:ec:c2:33:00:c9:
a1:7d:b7:cc:e2:99:bc:3c:8c:fc:10:a0:ed:68:d8:
68:08:0f:7a:71:7d:5b:2c:c8:48:64:e0:14:de:1d:
76:6a:e3:98:27:f9:6c:f8:2f:83:34:96:b9:fa:fc:
99:7b:66:b3:c6:2e:ab:ee:91:c7:54:cc:59:08:5b:
58:f5:25:75:fb:2b:3f:32:c1:ab:9f:1f:8a:d8:06:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1F:8A:B3:E5:33:8D:66:E8:CA:36:17:CB:97:A5:74:8A:72:BF:DC
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a4:ef:4e:5e:cf:44:01:9c:1d:ed:4d:7a:dc:f2:df:2c:ec:
34:81:16:b1:92:cf:cf:d9:03:c4:41:78:41:6c:6f:b1:61:da:
de:5f:e4:55:0d:44:11:6b:7b:c9:21:92:25:c7:87:8f:d4:cd:
dd:8d:1a:bf:59:2d:75:a8:56:43:79:55:6c:1b:75:d8:d4:63:
4d:1c:3b:48:10:4b:93:e4:9b:62:d1:36:04:95:b7:3d:f4:44:
62:25:1f:94:d5:1e:e1:0f:1b:63:47:e6:61:02:cc:3b:9b:40:
a7:14:22:f0:1d:9f:35:70:fe:41:aa:13:b0:54:7c:1b:ad:74:
a7:aa:d8:78:4d:97:fa:bd:69:b6:c8:d5:28:4f:ea:31:6d:d2:
f8:4b:4b:4d:b6:cb:d5:ac:47:b0:7e:14:8f:4b:de:0c:97:c3:
ca:5e:a4:20:a0:a0:cc:50:24:80:33:42:33:dd:c8:77:8b:b1:
9a:c2:ba:d6:46:ac:e1:0d:05:39:d4:68:1e:b1:b3:ba:ba:c7:
40:b6:0a:f7:df:8a:33:c9:b2:4f:8c:a0:ed:e6:cb:73:49:40:
7d:71:25:34:35:d4:41:4a:28:f3:85:07:1d:78:9b:be:6a:a9:
0c:d1:ba:7c:95:a0:14:0e:e5:1f:48:23:df:a7:0f:df:8c:30:
17:b6:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:36:23 2025 by rpki-client