Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: BB7dd+jRap3AYl5AFlz6aT2Q0O2IRRlHLCeyriX//To=
Subject key identifier: 9A:FB:83:58:A6:E0:E4:92:E8:EB:43:D1:25:AF:56:7E:61:C2:2D:B0
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 019873E2222E98931030E09193C455AF7913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:00:56 +0000
Manifest this update: Mon 04 Aug 2025 07:00:56 +0000
Manifest next update: Tue 05 Aug 2025 07:00:56 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: PtOmIRnoueVaDLfu0bBbmPtzCiG6+QAuT431DwT6/Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:22:2e:98:93:10:30:e0:91:93:c4:55:af:79:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Aug 4 07:00:56 2025 GMT
Not After : Aug 5 07:00:56 2025 GMT
Subject: CN=9afb8358a6e0e492e8eb43d125af567e61c22db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:33:31:54:40:c1:ed:87:86:33:12:df:9e:
ed:93:89:4c:68:65:bf:61:eb:1d:43:88:bd:5f:e9:
b6:1f:1a:0c:fd:fd:4f:64:33:24:e8:06:82:82:75:
16:4a:87:de:75:ad:d6:4b:8f:1f:d1:0f:9d:82:69:
6f:cb:96:98:18:91:c3:9e:1e:05:9b:b5:2b:aa:58:
d3:a6:98:51:e4:dc:e4:e6:a6:aa:21:79:25:91:2c:
2e:4f:7c:3f:61:bd:d4:82:0e:89:b0:53:3d:4c:6c:
21:e8:45:86:69:4d:8e:c0:07:3b:7c:58:ff:6d:4e:
21:39:8f:1d:da:c9:36:b5:7e:8b:bc:69:a6:5a:79:
34:17:52:06:2f:11:2d:3b:ef:9e:c9:da:be:df:c2:
a4:43:11:5d:3a:5e:a7:47:13:52:12:3d:b8:c4:22:
72:86:0d:01:f8:d9:60:ae:23:04:25:1c:1b:bd:70:
50:1a:1b:92:4c:da:ab:54:ce:01:a8:b1:74:1b:d8:
fa:ba:3f:f9:4e:3d:5f:89:f0:11:d0:fc:47:0a:20:
f9:a6:5b:2c:5e:36:70:cc:ba:de:f0:21:5d:e5:90:
f4:44:a1:20:00:52:90:91:f4:ec:24:b3:6f:a7:f8:
e2:43:63:91:f0:62:24:ad:db:b2:fd:e1:63:ed:e0:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:83:58:A6:E0:E4:92:E8:EB:43:D1:25:AF:56:7E:61:C2:2D:B0
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:91:71:d1:da:ed:0c:b1:a2:a1:1f:34:8a:09:58:60:4a:83:
16:98:d1:76:98:11:85:98:4d:e7:f4:75:32:26:75:7e:eb:84:
29:0a:68:7e:a3:ea:87:74:a8:57:e7:c4:7f:a6:16:ff:f0:9c:
07:57:5c:40:a8:7f:7d:f3:81:06:aa:d4:28:59:88:e6:53:48:
b4:a6:73:72:a3:e9:f1:dc:f2:ad:dc:8e:39:91:06:6e:24:55:
8f:2d:8e:35:9a:bf:9a:1f:77:66:f1:cf:28:cb:b6:a8:e8:c5:
dc:da:1f:7b:64:c9:fa:9c:6a:dc:9e:77:2e:e9:4c:85:ce:b5:
c5:8a:62:4d:13:23:5c:29:af:d9:ed:51:f8:ed:b6:5b:62:07:
e0:5e:46:1f:24:08:bd:83:2f:d1:e8:fb:8a:56:57:ba:ff:00:
4b:24:d0:13:54:e2:c2:20:a1:a0:87:43:cb:49:7c:09:0a:84:
78:81:77:03:2e:48:84:2f:2b:89:5e:e9:19:f2:22:1a:16:5c:
59:b5:12:ff:31:5b:92:62:97:52:53:16:ee:42:7e:ab:98:f7:
e9:ee:10:08:de:71:9e:09:35:61:8a:59:d4:f0:0a:f4:c2:97:
0d:5a:6b:58:2d:05:e7:4d:59:74:78:65:91:82:a8:c4:a6:22:
77:14:50:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:22 2025 by rpki-client