Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
File: b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json)
Hash identifier: xk0z+rBegkTRRO5chTHa8QC8dtvINUy57YM1wW7aqtA=
Subject key identifier: A8:F9:9E:FB:B3:A8:7F:57:55:54:C3:E0:0D:70:FB:31:E1:B1:77:EF
Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
Certificate issuer: /CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Certificate serial: 01976E86D494EEE29E99FF5C4A0F852BA834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
Manifest number: 1221
Signing time: Sat 14 Jun 2025 13:00:19 +0000
Manifest this update: Sat 14 Jun 2025 13:00:19 +0000
Manifest next update: Sun 15 Jun 2025 13:00:19 +0000
Files and hashes: 1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: RyeV8ePQdh47km2H+fua7UFTPtrin/Xtwv9DWiXwL6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:d4:94:ee:e2:9e:99:ff:5c:4a:0f:85:2b:a8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d
Validity
Not Before: Jun 14 13:00:19 2025 GMT
Not After : Jun 15 13:00:19 2025 GMT
Subject: CN=a8f99efbb3a87f575554c3e00d70fb31e1b177ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:12:e8:2b:f0:a6:f0:87:bd:10:95:57:77:
24:8c:95:93:85:82:37:11:11:01:3e:5f:c2:c0:2a:
df:88:d9:5b:c6:be:d3:0f:70:50:b8:1d:88:2a:55:
4c:47:fc:a4:90:f4:ef:d8:df:a2:03:20:f1:c7:29:
14:f9:50:84:68:8b:34:b9:3e:20:19:d9:ed:20:b3:
f9:19:51:26:f7:ae:bd:a4:d7:0f:53:d9:0f:22:51:
87:d9:b3:39:25:fb:c7:72:15:a8:7b:dd:b8:d9:93:
db:66:11:85:0f:8d:33:05:78:e8:d2:16:ee:6b:bc:
f9:13:7d:b9:80:ab:07:6e:bb:19:37:4c:66:ce:63:
10:2a:f3:69:01:23:83:ec:eb:9d:8c:52:d5:41:0d:
4b:9b:ea:5a:b5:61:de:5f:7b:ef:c5:85:bc:f8:b8:
7e:ab:8b:01:82:09:6c:2f:8a:f5:6a:f3:ab:af:93:
28:d1:a6:cb:bd:28:d5:4a:4e:a2:37:14:72:93:d6:
94:e7:b2:14:bf:f4:42:9d:64:43:a9:88:40:98:11:
ff:1f:b9:44:39:e8:c2:a2:67:3f:9c:a7:83:38:28:
91:83:60:25:71:75:ba:8c:a6:96:3c:cc:af:73:22:
61:02:d6:1a:73:38:81:44:fd:13:82:c9:e8:45:f0:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F9:9E:FB:B3:A8:7F:57:55:54:C3:E0:0D:70:FB:31:E1:B1:77:EF
X509v3 Authority Key Identifier:
keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:85:62:3e:d9:73:c8:91:9d:90:b0:b6:7d:e0:11:ea:8c:24:
8f:ca:fe:61:77:2a:89:9f:bd:19:ab:37:2a:23:1e:1d:e0:fe:
b6:8c:0c:49:b1:26:07:a8:2f:98:7f:ca:8b:f7:47:cb:71:3f:
67:01:fe:82:66:3e:b2:ef:fb:0f:e6:c9:b4:ff:43:6d:42:9d:
64:0b:ee:c4:62:a0:fa:b1:c2:0b:d6:65:3a:1b:08:06:e3:8d:
39:e8:78:54:f8:44:b3:ba:23:c3:41:3f:ae:b7:5a:b4:cd:dc:
51:e0:f1:6d:d3:2e:66:59:b5:b4:39:f8:22:2b:4d:9c:6c:f0:
db:1f:d2:1c:ad:b5:5d:77:9a:39:63:87:4a:91:42:63:5f:d9:
f4:09:a2:b3:e5:69:23:5d:f0:b3:0e:4c:a2:c3:ce:ce:ac:a6:
01:b3:c4:77:52:47:74:8d:ad:1e:09:1f:e1:74:69:ad:b1:23:
87:18:8e:0f:01:c1:81:27:f5:1d:cc:19:ac:26:a4:a5:9a:a5:
43:71:25:b8:06:fd:45:9e:18:9e:9d:fa:7e:bd:5e:5a:56:b7:
e2:94:e4:17:96:30:39:eb:1b:fd:73:e6:f3:bf:ab:d0:ae:e5:
9c:89:63:a1:4a:db:3f:f7:51:58:51:cc:9e:32:aa:6e:f5:cf:
aa:ea:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:20 2025 by rpki-client