Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json)
Hash identifier: UEtB+guTranbMRFj0KitDOO/AGNTemRyvSkmdgO+t/w=
Subject key identifier: A8:11:74:2D:6D:4C:8F:ED:19:0D:93:0B:AD:0C:B5:62:0E:5A:EB:A2
Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1
Certificate serial: 01987A528EA7FC65EA71E30D24C8D0DB37D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
Manifest number: 149C
Signing time: Tue 05 Aug 2025 13:01:27 +0000
Manifest this update: Tue 05 Aug 2025 13:01:27 +0000
Manifest next update: Wed 06 Aug 2025 13:01:27 +0000
Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: QsHYrcOg0JmdKlqsn3dPcGREDmFcgEX13XsRAyIItWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:8e:a7:fc:65:ea:71:e3:0d:24:c8:d0:db:37:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1
Validity
Not Before: Aug 5 13:01:27 2025 GMT
Not After : Aug 6 13:01:27 2025 GMT
Subject: CN=a811742d6d4c8fed190d930bad0cb5620e5aeba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:36:b7:f9:7b:d3:86:b3:e5:60:41:00:69:
14:f2:24:ac:df:c9:f4:23:9c:c3:0f:bb:48:53:77:
6a:ad:d8:bc:f4:28:49:a6:7a:1b:e4:ea:59:38:65:
5e:ef:48:b1:b4:39:dd:b1:28:a4:7e:be:22:af:27:
f4:71:c0:dd:98:04:60:78:3d:35:c9:ad:e1:ad:db:
d9:a5:9d:ab:7a:a5:37:e8:6c:6a:2e:3c:33:00:97:
c7:68:94:e9:73:17:10:cc:5f:34:fa:cc:c8:b6:a5:
a8:d2:cb:44:9a:5c:d0:87:0e:57:48:6b:65:1b:96:
90:c7:af:11:ce:9b:84:4e:99:d5:07:14:fb:c5:4a:
dc:3e:da:9b:7d:11:7d:90:a9:7c:5f:97:88:ce:d8:
93:c4:d0:8e:9f:61:0c:7a:b4:55:d5:56:26:a6:97:
0e:5f:8b:79:45:ab:7d:1c:1c:76:10:6f:c2:57:12:
03:55:63:3d:20:97:5e:1e:53:bd:56:12:ae:73:db:
4f:7e:d8:06:eb:85:d8:ba:7c:fe:e0:67:0e:87:7c:
40:11:71:e0:f2:6e:bf:0c:ad:0e:fd:55:9d:01:28:
fa:04:3d:f4:45:aa:c5:f0:d8:0a:42:b7:a8:9f:68:
e7:dc:4a:62:e8:8c:d7:6e:0a:86:0c:f5:85:1a:8a:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:11:74:2D:6D:4C:8F:ED:19:0D:93:0B:AD:0C:B5:62:0E:5A:EB:A2
X509v3 Authority Key Identifier:
keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:23:06:96:4d:db:1d:b8:b6:28:06:e5:40:5d:c0:8c:7d:3c:
f3:48:3c:78:80:a4:d8:f5:94:4c:f8:93:f9:1b:d3:6d:e4:94:
c4:fb:5b:f3:a7:f3:6f:d1:d8:c2:03:d5:6e:ac:2d:ec:32:38:
52:21:1d:3a:30:83:83:5a:57:b5:bb:e4:d2:92:df:e5:83:d1:
87:6f:94:86:82:1a:51:25:cc:48:1d:91:ef:35:81:2d:5e:19:
78:83:b2:4e:4a:a8:29:47:10:ef:b8:ac:df:57:42:1c:05:86:
94:63:f6:bf:da:2b:f4:f7:0d:9e:de:cb:df:ce:7b:65:9c:b4:
7d:64:05:84:1a:11:72:36:1c:0d:58:79:13:98:f5:4a:3e:6a:
49:bd:1b:fb:58:69:a1:ba:a5:ab:2b:40:82:03:09:42:6f:49:
f6:f3:f5:c9:ea:94:5c:c9:e7:34:5a:56:07:22:e2:7d:e1:6f:
e8:de:55:d3:c5:c9:6d:cd:a3:9c:f3:d4:23:aa:06:ec:0f:82:
cb:34:1c:f7:84:80:78:e5:c4:9f:1d:0e:84:9c:8d:de:06:a5:
be:8d:b7:aa:b8:df:4d:16:f1:30:58:0a:28:37:18:d9:56:c0:
5b:36:1e:25:ae:1b:2c:75:c0:0e:b4:1c:a2:46:c9:4f:ac:ee:
da:a8:58:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:44 2025 by rpki-client