Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: KyepgG9dAYRukE3Xj3LXUu/NA/9j4XU9DrMTl0VlOUg=
Subject key identifier: 12:D7:AA:40:46:04:67:73:39:E5:F8:86:9E:3D:62:4C:DA:74:F0:2B
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 01987E65F9E824028D32D9A6E0E72E0A0FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 1619
Signing time: Wed 06 Aug 2025 08:01:08 +0000
Manifest this update: Wed 06 Aug 2025 08:01:08 +0000
Manifest next update: Thu 07 Aug 2025 08:01:08 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: 8jPbmxCkL8ASmlR+lwnSJOQu4kOi5IG+1fceJCxqT90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:f9:e8:24:02:8d:32:d9:a6:e0:e7:2e:0a:0f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Aug 6 08:01:08 2025 GMT
Not After : Aug 7 08:01:08 2025 GMT
Subject: CN=12d7aa404604677339e5f8869e3d624cda74f02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:bf:31:78:ab:51:94:b5:97:52:9d:2d:13:
54:64:2c:e3:2a:ab:03:df:7f:48:5a:09:ad:4c:64:
83:dc:9c:ef:f8:8c:76:25:c4:f5:82:76:e4:4c:5b:
2b:82:86:df:6a:1d:ac:bb:8f:dd:ed:14:08:3e:f4:
3b:6c:d6:9a:86:b9:27:85:8e:32:3e:2c:cd:10:8c:
8c:26:a3:32:fc:22:33:70:be:cd:b2:91:33:93:8f:
fc:2b:a2:6a:fb:f5:8d:93:36:68:00:98:7b:c5:60:
10:cb:9c:7a:1b:0d:93:25:f1:32:5c:49:3b:3a:bf:
7c:ed:dc:18:06:54:a9:5a:1b:ec:9e:91:05:f0:38:
a7:30:be:e7:2b:9f:53:59:44:64:ee:23:c6:43:e5:
10:d8:2f:1c:a1:30:f7:06:33:c9:6b:3c:90:0c:f8:
be:3c:8f:8e:b3:94:03:fa:6a:3c:84:c7:d4:11:b9:
5a:fb:61:d4:6e:4c:6c:b5:15:ae:07:b0:c1:50:07:
04:9f:b6:57:04:3b:07:1c:e4:2e:09:cc:d8:7f:93:
14:33:bb:b5:89:f6:39:bb:7a:7a:3c:c8:4e:ca:a7:
58:73:f7:81:0e:84:77:0e:93:cd:f5:1a:32:e2:8c:
2b:c4:60:42:2b:cf:20:d9:1f:bd:0f:d4:0e:62:62:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:AA:40:46:04:67:73:39:E5:F8:86:9E:3D:62:4C:DA:74:F0:2B
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b1:60:17:6c:ca:9b:33:ea:77:66:e7:ec:93:f3:e7:3f:43:
4f:53:1e:55:61:00:cd:ae:61:39:12:36:ba:9f:34:9b:79:bd:
c1:e2:2d:fd:dd:93:c1:f6:c2:d1:40:34:9a:fd:71:7e:d5:ff:
e4:5d:02:ee:54:94:95:0f:e5:e6:b8:ab:1b:19:64:85:9f:00:
b6:f4:72:a7:0d:0d:2d:c7:b2:49:80:43:62:6c:c4:0a:00:fd:
c0:7e:14:f9:01:48:f0:00:8f:c8:7a:39:5f:52:31:68:e7:7f:
8e:d8:b8:d0:c0:f9:92:d9:cf:e4:5a:d5:a5:fa:69:42:66:f2:
3d:c7:08:af:a2:bf:bb:e8:f7:c1:be:09:e7:bc:28:ad:30:b5:
e5:f7:72:66:27:68:67:47:f4:cb:22:31:d3:d5:1e:4b:7f:33:
d7:77:85:44:9f:4e:c8:82:9a:d8:85:e6:5f:32:a2:8d:64:94:
0e:af:71:8b:1e:9c:7d:f7:a3:45:e3:3c:05:1a:62:15:9d:7c:
d2:20:a0:99:16:18:db:75:27:41:0c:31:76:2b:e0:84:34:95:
70:0d:4d:17:9d:48:2d:c1:1b:ea:0a:b4:1b:1e:7b:b1:13:47:
95:45:64:ea:93:b1:6f:b7:59:97:d0:6c:0c:5d:30:40:3b:1c:
b2:df:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:01 2025 by rpki-client