Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
File: RrLFRAI1IgBtccF5VhxL0wW6030.mft (raw, json)
Hash identifier: ybf6UZ3iZggo4IVwCPt7LrFhzSnHk871g60LyssyH/I=
Subject key identifier: B8:FD:79:96:0F:60:92:4E:25:B7:90:F3:E1:3F:42:3E:8B:5F:11:96
Authority key identifier: 46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
Certificate issuer: /CN=46b2c544023522006d71c179561c4bd305bad37d
Certificate serial: 019789907F823DF42CFA58B9A9E9DD9C423F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
Manifest number: 0720
Signing time: Thu 19 Jun 2025 19:00:37 +0000
Manifest this update: Thu 19 Jun 2025 19:00:37 +0000
Manifest next update: Fri 20 Jun 2025 19:00:37 +0000
Files and hashes: 1: RrLFRAI1IgBtccF5VhxL0wW6030.crl (hash: NfgYFY+8hj0KpvMTyt1xu1YOQ6raIvJNjgl4FKEA1pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:90:7f:82:3d:f4:2c:fa:58:b9:a9:e9:dd:9c:42:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46b2c544023522006d71c179561c4bd305bad37d
Validity
Not Before: Jun 19 19:00:37 2025 GMT
Not After : Jun 20 19:00:37 2025 GMT
Subject: CN=b8fd79960f60924e25b790f3e13f423e8b5f1196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:f9:72:bc:0e:c6:ea:ac:02:21:03:8d:d2:
90:96:b1:d7:6a:32:ac:cc:3d:b8:c8:b7:cb:5e:eb:
bb:59:ca:ba:8e:5d:df:9a:17:33:ef:d8:32:29:40:
10:0f:93:ab:36:e6:60:c4:60:26:2b:cd:0e:6e:08:
eb:00:fa:3c:fa:80:52:f2:7a:ee:8f:03:54:16:50:
a5:21:1d:1a:c0:d7:14:08:a4:c3:e7:5a:2c:f0:57:
f7:15:9a:4b:13:7d:e7:d4:d5:10:dd:5e:06:bc:ab:
88:7d:13:ca:5b:4b:67:b1:0e:f0:f7:19:be:dd:3b:
4c:82:62:c8:2f:ad:a3:e7:36:a5:21:c5:a2:26:07:
05:b4:73:59:b9:0f:5d:11:67:f0:a7:0c:c7:6b:c9:
02:ef:e6:93:f7:e8:07:3f:33:53:8b:f4:05:f8:f1:
10:c5:9d:c1:6f:76:e8:27:50:2e:d8:21:0d:72:82:
7f:98:b9:db:7c:89:b9:e8:e7:dd:38:79:f0:02:a5:
69:8d:eb:18:65:b0:ca:b4:dd:80:e1:02:0d:16:ec:
60:ac:db:c8:67:34:eb:a5:a1:d8:9e:aa:1d:27:44:
67:66:ed:53:cf:e5:ef:c2:a7:c1:fd:2b:1d:97:59:
19:37:a0:8d:4b:0b:b9:da:7a:f8:de:8d:fc:83:0c:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:79:96:0F:60:92:4E:25:B7:90:F3:E1:3F:42:3E:8B:5F:11:96
X509v3 Authority Key Identifier:
keyid:46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:56:ac:dd:c9:45:11:43:a1:e0:78:7d:e4:dc:09:0a:48:30:
39:3a:5d:4c:76:e1:50:b5:31:4e:1a:a1:7d:43:82:a7:15:3a:
3b:52:cc:66:5b:74:30:8c:f8:ec:51:a0:44:c9:c7:0e:7e:88:
e6:75:b5:41:b4:fc:7c:9a:32:83:df:d5:13:96:bf:74:27:7f:
a0:db:75:32:76:f1:1b:64:f1:68:f7:b2:d4:c6:3e:46:f0:46:
7c:27:9a:b3:ff:20:88:51:0a:fc:22:63:92:5a:78:0e:68:a2:
a2:2e:22:a4:40:9f:a9:9e:8d:6c:06:43:cc:9e:b2:e2:4b:0b:
eb:54:5f:5d:67:5a:74:98:7d:d1:cc:74:0f:07:a3:2e:6f:de:
8d:78:a1:9c:ca:39:47:f1:d7:12:d3:6a:3b:c7:60:09:6d:87:
a9:16:5c:e4:0b:9d:3f:b4:ea:79:c2:5a:85:d5:88:df:42:9a:
8f:5f:08:88:5f:32:69:43:02:38:12:c1:b1:3b:5a:7d:d4:ae:
d4:24:9e:dc:bc:8b:11:86:98:78:4e:56:8b:7b:30:19:ac:87:
59:d2:e7:c2:6c:33:15:a4:0d:61:47:f2:24:dd:1d:82:46:d9:
7d:17:95:55:fd:08:d6:39:d7:47:67:74:ab:8d:c7:d3:7c:7d:
cb:70:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:32:30 2025 by rpki-client