Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: KYBu7CVy9C2T7/RF5h4bK54RU79eaHEAy93T84vUeA8=
Subject key identifier: 7C:8B:64:F6:1B:B1:EF:F8:6A:09:DC:E0:E6:60:CF:6B:A7:09:AB:31
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 019879ACEC35E86CC9D63FAD2A1F3E71E642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1615
Signing time: Tue 05 Aug 2025 10:00:32 +0000
Manifest this update: Tue 05 Aug 2025 10:00:32 +0000
Manifest next update: Wed 06 Aug 2025 10:00:32 +0000
Files and hashes: 1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: OrYmKXg8SpwtYPnB/vH/Vo9pDmFr5nPXRQlxEWMh1hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ac:ec:35:e8:6c:c9:d6:3f:ad:2a:1f:3e:71:e6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Aug 5 10:00:32 2025 GMT
Not After : Aug 6 10:00:32 2025 GMT
Subject: CN=7c8b64f61bb1eff86a09dce0e660cf6ba709ab31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:ca:50:69:9d:08:6d:af:78:39:31:d7:77:
c4:ce:33:1e:48:a7:21:9f:61:ed:86:62:75:3c:21:
58:86:f9:30:8d:d6:73:65:af:f6:bf:3a:a7:f0:50:
f8:e5:43:b6:5a:95:c3:5d:7c:30:a2:cc:01:70:91:
a3:f2:43:04:f2:3c:98:e2:77:96:2d:ff:1f:45:c3:
f8:58:c2:e4:bb:a8:be:ed:33:7b:56:a3:44:a7:70:
0f:69:96:1c:10:59:0a:00:9a:75:bf:6d:a2:de:ed:
59:9d:b3:fa:9f:b5:fe:91:2b:f1:48:75:d6:68:1d:
71:0d:a0:4b:4f:4a:20:24:5e:b0:46:33:ab:49:e7:
6a:50:b5:a3:ca:6a:35:5a:2e:dc:4c:44:88:73:83:
0b:8d:f5:1a:44:b7:04:18:e6:d8:8d:43:66:ba:50:
71:b2:a1:62:0c:04:91:c8:6a:c5:e1:95:ab:f3:65:
fa:67:b2:cc:ce:db:2a:0d:20:8b:3b:29:fd:da:33:
59:e1:f2:a8:64:b8:b1:f4:c1:ad:ca:b6:aa:51:4e:
32:35:77:2e:b9:ca:b9:1d:d0:ea:c0:06:e3:76:ae:
50:62:75:ca:fb:73:a5:d9:af:cd:c8:16:f4:e3:6e:
ce:a0:ce:ac:41:03:a8:f9:03:35:f0:20:f6:c5:d7:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:64:F6:1B:B1:EF:F8:6A:09:DC:E0:E6:60:CF:6B:A7:09:AB:31
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:01:f1:c5:1f:20:57:4a:86:b4:f7:7c:2f:8f:61:6d:b5:16:
7d:90:30:02:25:7e:e2:a5:5a:5d:c7:3d:60:09:a5:a8:88:ad:
07:25:ed:c1:52:4a:b5:50:7e:e5:00:62:63:1d:a8:2f:df:c5:
2a:78:cb:29:2d:6e:7f:96:d6:fd:64:a6:6e:30:cb:c7:15:0a:
b5:9a:4d:9d:74:f2:03:2f:01:82:78:7b:ec:f7:00:33:33:75:
b1:33:df:d1:6a:61:e6:2b:8d:b8:6c:f8:95:45:f7:37:5a:9a:
4a:b3:03:d7:24:92:0f:55:6c:a9:e9:33:20:ae:0b:6b:72:5c:
0a:83:f7:f2:64:b8:5f:ce:db:09:8b:fc:b9:dd:56:8d:f2:84:
83:8e:2e:90:fc:69:59:17:b8:30:7e:54:ea:ed:9b:f3:a8:47:
40:0d:0c:4f:c5:4b:44:9b:bd:f2:18:e5:50:3c:d4:2e:88:dc:
67:e9:4c:cf:c3:70:e7:c8:02:07:c8:86:ca:e2:e0:a0:92:dc:
30:9c:1e:6c:54:ad:cd:9f:a1:3e:66:00:bb:93:99:8c:d5:bb:
21:c5:95:1f:8f:f2:ab:6d:1d:82:ea:1b:6e:61:b4:a0:17:89:
73:41:78:13:01:a2:17:2f:2d:09:78:11:23:d0:29:d7:d9:c4:
c0:07:b3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:17 2025 by rpki-client