Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: fD3JzGUH5IZSZvDUkH/8dAp69JymEW2jrxxMSNV2MBk=
Subject key identifier: F3:1D:62:45:B1:E6:57:69:1C:C2:20:39:6E:B8:30:97:41:1B:12:4B
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 01991809948C9ADC0E80DDF97A64D688948D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 1669
Signing time: Fri 05 Sep 2025 04:01:44 +0000
Manifest this update: Fri 05 Sep 2025 04:01:44 +0000
Manifest next update: Sat 06 Sep 2025 04:01:44 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: XwrVxjjeNzcfXGuFKWjW9Fs2BULZiGUNwFRyvsvYlzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:94:8c:9a:dc:0e:80:dd:f9:7a:64:d6:88:94:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Sep 5 04:01:44 2025 GMT
Not After : Sep 6 04:01:44 2025 GMT
Subject: CN=f31d6245b1e657691cc220396eb83097411b124b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:ef:a3:d8:3d:82:2d:e7:71:e0:54:7e:7d:
51:0e:e1:3f:80:2b:92:55:84:24:ee:f8:c9:86:c2:
b5:e1:5c:6f:73:f2:da:9e:7a:01:02:8e:89:fb:19:
35:02:bd:0c:69:73:02:4e:70:7d:27:7d:a8:74:92:
dc:c3:65:a8:5e:63:9b:66:bf:df:09:13:f3:fb:15:
cf:85:5d:f4:21:9f:f6:c7:21:9f:ce:e9:b8:f3:de:
cf:73:93:f3:69:5a:65:f1:c5:0a:18:fc:e4:61:68:
85:80:d9:8b:4f:b8:c1:b2:de:85:b6:b1:a9:18:22:
5c:31:f3:30:e9:4c:b1:c5:ac:87:14:36:28:73:1e:
b2:fe:da:4b:eb:45:49:da:79:49:93:12:b0:77:44:
f3:a7:75:b8:ec:66:7e:5d:64:bf:26:6a:8e:8d:99:
ee:a5:10:c3:b7:23:c0:ba:20:6b:e4:a0:5c:22:9e:
fd:3f:1f:2b:db:4b:19:ae:80:0f:de:73:d2:3f:ed:
6e:b5:93:28:05:11:e8:d3:98:37:3f:c4:08:d9:55:
39:e3:23:cf:b0:8d:30:99:ca:f2:3d:cf:8d:be:ea:
b6:d3:a6:b2:27:4e:bf:0e:fc:a6:51:b2:e1:9c:b2:
dc:28:a4:f5:d8:9d:f4:de:2c:a5:63:74:68:1e:cf:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:62:45:B1:E6:57:69:1C:C2:20:39:6E:B8:30:97:41:1B:12:4B
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8e:e0:ca:ea:96:aa:60:a8:ba:89:fa:89:25:5f:81:ff:a0:
cd:60:36:33:e5:1f:f8:81:3b:47:a4:28:f0:f1:a4:7b:27:a4:
36:ca:23:3b:14:5a:f9:25:53:a2:11:4a:6b:64:d7:35:77:61:
d6:62:96:4b:33:5e:35:dd:fb:d1:88:cc:77:84:f2:7c:65:26:
bd:d8:f0:1b:1c:ca:dd:ae:4d:55:75:b9:68:1f:22:ff:ec:5c:
c0:a7:2d:03:58:4e:cc:a9:48:ef:bc:88:dd:72:66:48:62:e7:
ff:01:9e:b8:30:d7:9e:15:3c:68:82:03:59:fe:b6:3b:81:0d:
3b:b7:b6:a7:10:e6:70:28:89:5f:f8:17:e2:67:a2:87:c6:4f:
a4:1b:be:6c:d8:7b:50:c3:fb:9a:5c:97:a5:4b:00:c0:62:0e:
f4:43:a1:94:df:fc:05:1f:5b:e2:5a:5c:5f:c6:b0:7f:dc:2f:
cf:a4:ce:72:5c:40:f2:f3:0c:44:96:93:4d:ee:69:27:7e:26:
9b:26:83:ac:d5:f2:7e:27:64:1b:95:0d:f4:f2:ec:f6:db:9b:
26:c0:49:db:3f:13:da:06:c6:85:a7:80:3c:3e:6f:2c:34:ef:
fd:b7:00:1e:be:fe:dd:04:34:c6:5b:5d:07:3f:eb:7c:24:97:
40:41:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:31 2025 by rpki-client