Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File: r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier: 3emABMjRbra/eJoFi4fhnkvi/5U9Cr5b5ZDcxjqZCtc=
Subject key identifier: B3:B2:AE:4C:0F:46:60:C1:97:B1:3C:EB:5F:37:B8:BA:4A:23:C0:3F
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer: /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial: 0199221E622F37C4FE6AD6087213CDBC3111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number: 0483
Signing time: Sun 07 Sep 2025 03:00:40 +0000
Manifest this update: Sun 07 Sep 2025 03:00:40 +0000
Manifest next update: Mon 08 Sep 2025 03:00:40 +0000
Files and hashes: 1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: qHxakv1kJuV/0WsnApcDwuFf1+NHmEUqxq/E6lKqhnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:62:2f:37:c4:fe:6a:d6:08:72:13:cd:bc:31:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Validity
Not Before: Sep 7 03:00:40 2025 GMT
Not After : Sep 8 03:00:40 2025 GMT
Subject: CN=b3b2ae4c0f4660c197b13ceb5f37b8ba4a23c03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:fb:52:05:9a:70:95:04:11:40:c4:95:6f:
1e:ac:8c:29:80:4f:08:09:4d:1e:80:1c:92:cd:92:
8c:01:b6:e4:66:1d:45:13:de:ae:4d:2a:3b:c5:56:
bf:e7:eb:bb:82:c8:a2:59:fb:57:39:b0:bf:7a:8b:
4c:95:98:0e:1b:b3:e3:02:c8:f5:cf:27:30:74:da:
02:c9:2f:0c:ea:3d:56:6e:c9:7e:1f:a6:c9:d0:3c:
05:0f:b8:b9:f6:20:ac:98:0c:89:56:b0:ef:8f:55:
67:75:3f:e6:e0:a5:cd:da:b3:51:ae:db:68:69:7a:
d0:96:4e:eb:12:4b:62:23:0b:ca:97:12:71:bd:ae:
0f:3c:96:a1:87:06:2d:4b:1d:3c:81:4a:4c:ac:29:
c4:42:d9:74:32:0e:84:dd:21:0e:c0:b9:a3:94:8a:
d1:a6:d8:c4:54:d3:97:70:4a:c9:6f:f3:96:e7:ca:
7d:eb:d0:3d:e2:26:55:1f:d0:62:4a:11:c2:2a:cf:
37:6c:03:df:a5:0a:15:de:47:a2:4f:86:aa:f9:19:
03:99:29:4f:24:41:63:b3:be:9b:75:2b:e4:b7:36:
30:9a:55:e7:90:d1:89:cd:38:0b:e0:16:35:34:41:
3b:ab:28:22:25:d6:ca:e7:30:59:8f:da:67:34:7e:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B2:AE:4C:0F:46:60:C1:97:B1:3C:EB:5F:37:B8:BA:4A:23:C0:3F
X509v3 Authority Key Identifier:
keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ef:1c:4a:1b:17:b1:0a:62:2d:47:88:10:af:2e:44:ac:f3:
88:9c:9e:ec:22:68:33:19:ac:29:46:f9:14:b8:04:53:cf:10:
77:87:3d:a7:d5:51:5f:2b:63:e8:5f:cc:3d:60:8c:2b:15:ce:
29:0e:fe:46:76:e0:08:a9:87:42:71:95:e6:30:8e:5c:5d:86:
5a:da:84:19:45:45:0f:2f:b5:fc:2b:2e:0a:69:a9:2a:3b:54:
67:2a:cb:a2:72:92:13:84:52:c2:ea:f2:3e:51:eb:05:fc:8a:
c7:e8:be:2f:bb:b2:49:da:12:b4:ed:b6:7d:4e:4d:f2:24:93:
9f:7c:de:fa:72:39:df:1a:14:e4:62:2c:59:12:0d:dc:2e:22:
d5:96:f8:a3:f6:8d:58:d5:f6:88:f1:90:99:10:bb:35:70:5e:
65:7d:8b:80:3e:48:0a:e4:57:8c:99:41:d1:83:73:d3:9f:6d:
58:46:30:ca:03:12:1c:e9:73:25:69:e8:02:92:da:4a:72:80:
bf:47:89:6d:d4:83:07:1a:42:dd:94:f8:e8:e1:46:e9:df:a0:
32:a7:ce:f2:db:64:6d:48:2e:50:8a:7e:45:7f:a3:57:d0:3e:
42:eb:42:88:ed:62:0d:5c:3a:a6:75:9a:09:2c:f8:50:25:37:
4a:a7:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:10 2025 by rpki-client