Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: JqjBglPXhVe81pdVpdohQoGO4BtS62EP6h5iaEGsNcQ=
Subject key identifier: 53:16:F0:81:4D:B0:84:80:CC:86:5B:F1:B1:DE:07:EF:D5:B5:E3:8B
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 019771BF49AECF961F580831DF564637C3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 04:00:50 +0000
Manifest this update: Sun 15 Jun 2025 04:00:50 +0000
Manifest next update: Mon 16 Jun 2025 04:00:50 +0000
Files and hashes: 1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: 9ffbajzcYUa47RrD3M0nLWD9vcY57IqSZw2cB5c/wLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:49:ae:cf:96:1f:58:08:31:df:56:46:37:c3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Jun 15 04:00:50 2025 GMT
Not After : Jun 16 04:00:50 2025 GMT
Subject: CN=5316f0814db08480cc865bf1b1de07efd5b5e38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:1b:12:85:49:de:e3:2c:db:65:7b:f2:93:
79:29:1d:83:40:1e:3e:c3:b6:1e:60:24:69:98:7a:
07:45:25:39:45:e2:a1:a7:29:a7:62:8b:d2:9b:71:
e1:d1:64:bd:c5:1a:09:8f:55:ae:c4:11:96:b8:99:
b2:ae:3e:8f:2f:45:b6:aa:22:68:59:e6:d7:94:ae:
2b:21:22:cb:da:f0:15:d0:f5:a6:be:82:2a:f1:05:
4b:dd:bb:74:2b:63:f5:27:04:52:9c:15:fe:26:ce:
d3:fe:49:ed:f7:52:9b:33:98:52:9b:9f:5f:3f:e6:
01:fc:b6:2a:72:83:5b:f4:e9:6e:79:20:bb:61:ee:
74:8d:68:29:e1:e9:34:5f:5b:ba:08:a6:68:2d:48:
2f:cc:41:5c:75:6b:90:e0:a1:de:53:9f:4c:c6:70:
42:1f:8b:ca:5a:76:29:3b:6f:5d:a3:17:ed:e5:25:
ef:a6:85:d4:21:3c:f5:b2:ff:83:d3:24:52:75:a3:
58:be:df:81:28:4e:c9:76:0a:b6:f3:e9:ab:ed:9e:
75:16:32:0e:f5:54:12:07:e5:63:96:05:0f:94:6b:
b1:80:e7:2b:af:7e:b3:19:ec:f6:6f:70:26:e9:c5:
4f:45:c6:d8:a0:6a:4c:7d:57:16:b3:95:8e:5f:03:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:16:F0:81:4D:B0:84:80:CC:86:5B:F1:B1:DE:07:EF:D5:B5:E3:8B
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:71:c1:0b:d9:3e:b8:22:a6:a1:4d:20:8f:57:b3:be:95:76:
56:7e:db:cd:b0:99:7f:22:d2:34:db:1e:35:e6:b2:a6:30:b2:
8a:13:cf:55:13:4d:ac:9c:ad:42:7c:75:fa:59:8d:16:71:64:
ba:58:f3:7b:4c:4d:f8:9a:fd:c1:3a:b8:59:e9:57:22:20:44:
f6:d3:97:29:45:ef:81:d6:4e:66:88:48:bb:ae:e5:5a:ab:3d:
9d:1d:52:15:4a:41:28:2c:c0:2e:e9:b3:e3:67:c8:c3:62:25:
d1:d8:e2:c4:29:ad:80:f1:a5:b1:57:91:51:37:7e:55:fb:b0:
4a:19:56:a7:e3:9c:e0:9c:4c:2a:87:76:fe:d9:44:85:b2:a6:
b7:96:b0:43:d6:5e:e3:3f:e3:29:20:de:ea:be:46:79:e2:28:
15:56:ed:ed:2f:ab:23:5d:66:0a:67:2d:f4:fd:0a:25:01:c1:
87:85:bb:7d:2a:60:cd:29:69:9f:8a:15:98:34:c4:f2:7b:3b:
a4:ca:33:52:17:06:5c:36:da:1e:b1:6a:bf:25:8a:db:11:e5:
5c:a7:94:eb:04:71:63:23:f7:89:4d:89:76:8f:6f:66:4c:b8:
00:48:04:16:71:fa:5f:5d:db:f0:ff:8a:c0:d7:fa:ac:8b:bc:
bc:4c:55:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:20:30 2025 by rpki-client