Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: mDT/EBn2s1SrLcjtJ/tqlktLIwbzrG0e3ihyDwwXcgw=
Subject key identifier: DE:0E:08:C7:A6:7D:83:6D:9D:25:22:B3:A6:7A:70:6A:D8:10:B5:38
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 0199240D1047D96546C688724D5BDB2EA343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 12:00:59 +0000
Manifest this update: Sun 07 Sep 2025 12:00:59 +0000
Manifest next update: Mon 08 Sep 2025 12:00:59 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: 2pUsI+Vl3I+43/c8+esGu0w/BNRSDqJ801R6C1Ka5CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:10:47:d9:65:46:c6:88:72:4d:5b:db:2e:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Sep 7 12:00:59 2025 GMT
Not After : Sep 8 12:00:59 2025 GMT
Subject: CN=de0e08c7a67d836d9d2522b3a67a706ad810b538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9f:f8:83:1a:bf:75:1a:77:b0:2a:f0:89:e3:
0d:10:95:db:63:f6:b1:f6:3b:cf:58:88:b2:cb:db:
74:7d:62:1b:bd:56:74:2b:fc:e6:15:d2:92:42:d6:
88:12:2e:89:42:92:ac:c3:ec:20:28:86:cd:6d:61:
58:18:75:25:a0:7d:7e:94:18:ea:a2:d3:d7:b1:c1:
ef:ad:5b:12:6e:43:19:e1:17:7e:9d:6a:3f:20:40:
11:b2:74:c0:b8:d0:18:21:2d:3c:61:16:10:29:96:
d3:bb:b5:8a:1c:e1:0f:0f:ab:8f:a7:6e:f8:5c:17:
47:a6:e1:eb:9b:f8:16:7e:57:00:0f:60:84:fe:f0:
ff:b0:3f:7f:20:61:5d:99:a1:c2:6e:db:e4:9a:d7:
fd:14:d3:4a:0d:5a:63:aa:d3:40:a9:12:61:e4:f8:
9e:f4:61:d5:5c:7d:99:0a:03:ae:d6:f8:90:91:c0:
19:80:95:e7:7e:a3:a2:6e:8a:fd:6f:6a:89:d0:24:
09:03:23:1a:6f:5f:86:a0:f9:ef:09:6a:80:43:79:
e7:50:7e:0c:32:62:a5:8b:08:1e:eb:d6:d9:6d:a4:
bc:51:6d:cb:a8:bb:17:f9:7b:50:81:5c:c6:9f:05:
60:da:59:78:eb:ef:26:0b:46:5b:e5:7c:f6:24:8a:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0E:08:C7:A6:7D:83:6D:9D:25:22:B3:A6:7A:70:6A:D8:10:B5:38
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6c:ea:bf:fe:84:7c:ab:4e:67:85:ed:a8:cb:cf:b9:16:bc:
4f:61:8a:53:2a:35:8f:60:53:0d:ae:84:63:91:7f:27:6c:2f:
ec:bd:ba:65:b9:13:d2:10:11:b5:75:7f:51:70:07:4f:6f:c1:
2d:15:31:13:51:c1:7e:6f:b4:6c:e8:ef:47:cf:44:53:a3:6f:
4f:3b:3e:cd:bd:dc:7d:5e:08:7b:a5:08:36:32:1d:5c:f8:ac:
0d:78:b5:7b:bf:4b:a2:cc:ad:10:6e:2a:d6:b5:4c:f9:6d:1a:
39:23:1a:e6:42:b3:a1:a3:54:6c:a0:37:bb:69:66:61:29:8c:
91:d1:65:25:92:0c:50:df:6f:db:a8:a2:27:7e:4f:73:98:81:
c9:7f:a3:59:2a:93:97:88:49:dc:96:eb:35:5e:17:bf:14:42:
40:93:00:e7:db:32:ca:16:a5:f0:53:e5:8d:77:0d:d2:56:6d:
a8:ab:46:71:d7:72:d6:0b:3b:b6:80:87:87:5f:1c:9d:70:28:
21:7d:6a:2d:af:2b:8c:b7:1a:b3:e1:db:b3:0d:c5:31:ab:51:
1c:e8:cf:ed:c7:5d:74:3d:a1:58:30:66:f7:2f:a8:6e:45:9c:
f8:e0:be:23:88:80:36:ea:66:72:58:b2:1f:28:f4:62:c2:5d:
8b:fe:e9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:24 2025 by rpki-client