Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
File: r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json)
Hash identifier: D9Th3e6dVN2e1TSrx1MNy1Fjvmv0hpqAfMJ9zHvh6V8=
Subject key identifier: B6:18:92:7F:FA:B8:5B:6A:2D:29:1C:8F:50:C0:2A:1D:DA:22:15:ED
Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
Certificate issuer: /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Certificate serial: 01976960BE7D74104802E5A5249F085D24E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
Manifest number: 08BF
Signing time: Fri 13 Jun 2025 13:00:37 +0000
Manifest this update: Fri 13 Jun 2025 13:00:37 +0000
Manifest next update: Sat 14 Jun 2025 13:00:37 +0000
Files and hashes: 1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: pMyKen0CIEkTm6gzicQwBD2VjTEheM+4CyqoBrk++dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:be:7d:74:10:48:02:e5:a5:24:9f:08:5d:24:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Validity
Not Before: Jun 13 13:00:37 2025 GMT
Not After : Jun 14 13:00:37 2025 GMT
Subject: CN=b618927ffab85b6a2d291c8f50c02a1dda2215ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:f3:51:16:cf:96:03:6a:f9:ee:3c:51:29:
af:bb:7b:7a:f9:5c:cf:9d:bb:ba:f1:32:4a:77:43:
e2:8b:c3:d3:64:38:cd:9b:15:18:57:41:d0:f6:1d:
55:9b:ea:76:05:dc:78:5c:c9:21:7e:1e:28:33:4e:
8e:14:89:cd:4e:e5:47:44:36:92:50:14:33:ab:9d:
ce:9b:df:6b:8b:41:88:cb:47:75:84:18:ec:2e:62:
f7:e2:bf:93:10:d4:b8:d3:96:cf:92:f0:be:50:60:
5c:d0:fa:de:5f:4a:c2:d2:7a:51:e9:5d:88:a3:d0:
8f:5f:26:e3:79:f1:d9:ad:ff:83:2e:4e:6a:50:f5:
09:14:7f:59:90:4e:37:94:1b:b8:a7:69:98:ee:2b:
3e:a7:a5:80:fd:0d:6f:85:bf:a5:f6:0e:84:07:3b:
67:b0:5c:f2:4a:78:9b:3c:0e:d7:e6:4c:8f:3d:43:
0e:b3:15:e8:a8:a8:87:98:22:09:02:27:63:f9:57:
a4:51:38:47:d6:10:8b:f6:5b:97:e5:74:ab:94:e6:
df:cd:57:5b:29:7e:75:93:f4:8f:29:17:78:5e:f5:
6a:47:6a:19:83:37:cb:46:dd:9f:2e:0a:17:a1:e9:
31:a7:d7:c1:c4:4a:50:9c:ab:5e:fb:2a:4c:86:25:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:18:92:7F:FA:B8:5B:6A:2D:29:1C:8F:50:C0:2A:1D:DA:22:15:ED
X509v3 Authority Key Identifier:
keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:45:81:b9:ac:4a:fb:be:3d:35:bf:c7:c7:33:d9:c1:16:81:
e9:d5:04:73:0a:94:37:ca:d3:39:d9:c2:00:2d:af:6d:65:a9:
d5:6d:81:93:5d:3e:e7:af:fd:96:52:e2:d2:51:72:7e:aa:56:
d1:15:4e:bc:47:bd:fb:2d:f2:22:9b:ee:b6:85:80:1c:89:88:
79:cc:e3:15:07:56:8c:09:5c:c5:61:19:70:35:df:14:d6:63:
12:31:12:97:22:56:d6:b8:34:6c:dd:29:be:86:31:80:47:1e:
df:75:5d:c5:07:64:6e:50:39:d3:63:b0:49:4e:9d:df:61:f8:
0b:df:f2:d4:67:ea:6d:b6:d3:a4:e7:bc:82:07:5d:28:24:c4:
5a:fa:94:ab:c2:44:d7:aa:e2:75:2e:00:ac:d8:86:b4:a7:90:
ef:25:68:f3:1c:89:e8:01:a2:26:cc:b6:2d:04:b2:2c:c2:f4:
d2:c4:bc:fa:9a:a6:37:db:50:ac:ef:82:cf:9c:86:b9:25:aa:
be:65:f4:d5:65:6e:8e:d2:07:67:4b:f9:d6:7f:d4:16:f5:06:
32:1d:6a:e2:01:86:cd:a3:0e:33:16:e1:b6:a4:3d:2c:ca:17:
89:a2:49:de:d4:ff:fe:bc:0d:08:a4:34:b8:06:22:3a:e7:2d:
51:88:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:00 2025 by rpki-client