Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json)
Hash identifier: pJ36X4QpPSPzO1/xnqOrfDJjv+E7Lm+8HzNoKuIIuVg=
Subject key identifier: 8B:85:3F:99:C8:FB:A7:D1:76:A6:95:78:52:2B:13:77:BB:F4:67:EF
Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Certificate serial: 01987C40BD97B2A3BB5B6C077C1A7F4F8D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
Manifest number: 036B
Signing time: Tue 05 Aug 2025 22:01:14 +0000
Manifest this update: Tue 05 Aug 2025 22:01:14 +0000
Manifest next update: Wed 06 Aug 2025 22:01:14 +0000
Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: 4DtAeQyBG5WcWnk2JOnI35WLZziYJbMcKu8qw8FP1+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:bd:97:b2:a3:bb:5b:6c:07:7c:1a:7f:4f:8d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Validity
Not Before: Aug 5 22:01:14 2025 GMT
Not After : Aug 6 22:01:14 2025 GMT
Subject: CN=8b853f99c8fba7d176a69578522b1377bbf467ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:f1:ea:47:8d:a6:e4:5c:fe:1f:fe:0d:21:
e9:89:8b:10:d9:04:4a:78:d0:07:8c:be:c0:c5:47:
40:34:f2:f8:8a:62:8b:32:61:93:82:96:ab:e6:11:
43:02:59:fe:f3:67:76:ad:3c:61:dc:ab:a0:45:39:
16:6a:cc:33:44:71:73:a8:60:55:3d:83:27:fd:46:
c9:ce:c8:60:5e:51:5f:52:ba:0a:54:2d:7b:d2:c8:
c2:44:bb:af:9a:85:dc:76:19:e2:4f:07:70:85:6d:
b2:51:de:07:3b:01:f8:18:cf:e7:35:4f:2d:18:93:
e1:c4:da:fb:7c:19:b7:65:75:ce:a0:3c:29:99:08:
15:2b:59:7e:91:99:62:7d:30:0e:7c:5a:59:6f:af:
a5:95:1c:98:43:1c:d4:fb:b1:2b:7f:cf:5f:6c:56:
89:c5:db:83:05:55:d3:6f:b7:b9:07:81:79:29:bd:
84:e2:48:ee:b5:0a:97:06:0a:51:86:2b:81:71:65:
6c:9f:c9:11:2e:d0:44:e3:16:9f:a8:94:7d:35:cb:
dc:38:92:dd:21:92:3d:dd:a5:60:e7:53:e8:f4:e8:
6a:4e:4d:0e:22:8b:9e:da:06:db:bd:24:7b:78:f5:
7b:a9:dc:fb:35:87:65:dc:a6:2d:15:bb:e2:0d:75:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:3F:99:C8:FB:A7:D1:76:A6:95:78:52:2B:13:77:BB:F4:67:EF
X509v3 Authority Key Identifier:
keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:29:05:91:0e:57:7d:87:fc:32:ca:dc:80:29:cd:58:46:20:
12:2a:87:73:34:23:e6:1f:a1:28:b7:fb:e3:b6:40:a2:dc:37:
c7:d2:dd:ec:1a:9d:a2:dd:99:e1:55:a8:85:2e:33:b0:58:02:
2b:a8:5d:2c:6b:16:0b:1c:e5:d8:37:6a:48:19:ea:04:47:9b:
48:b3:dd:c0:f7:69:72:1e:5b:d0:20:69:1c:b7:16:b2:65:0b:
76:4d:f3:06:c9:d0:2a:32:48:76:d9:d0:0d:21:cb:e0:45:45:
c2:9f:e8:08:08:e4:a4:ee:2e:ce:a5:e2:04:8d:59:b6:95:03:
2e:df:d9:c3:b8:df:cb:38:56:2c:3c:29:d3:f5:1b:d7:68:72:
f8:31:31:cc:ef:e2:65:6e:45:fb:00:df:21:9a:56:ac:18:1a:
2f:58:37:43:f1:88:2a:89:bb:b4:5e:3e:21:b4:2f:8a:91:e2:
1e:17:49:46:b4:d3:19:0b:0b:c5:54:8b:3f:d0:a8:ac:94:69:
fc:c6:3b:c2:38:86:f8:78:2b:cb:69:7d:e0:e7:2c:46:44:a1:
3e:42:67:7f:12:c3:64:84:10:ed:98:12:d9:03:79:3a:9c:69:
2a:31:c5:60:68:c9:5e:52:7b:7d:2d:c2:10:30:10:29:4d:16:
20:c6:cb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:06:51 2025 by rpki-client