Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File: b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier: QhWb71JBiUPMo+sMZ/FMhScdo76BiiOQ8uvHr+ZLqqc=
Subject key identifier: C7:E1:C3:73:0E:0B:83:EA:81:41:63:D7:5B:FF:13:6F:C9:09:41:CF
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer: /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial: 019893A4534D5B4EF77193110647ACC4841D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number: 02CE
Signing time: Sun 10 Aug 2025 11:01:16 +0000
Manifest this update: Sun 10 Aug 2025 11:01:16 +0000
Manifest next update: Mon 11 Aug 2025 11:01:16 +0000
Files and hashes: 1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: VDBAqSJKJcQiPjFnsODxvUwVLZMy+35KRUJbVcnShck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:53:4d:5b:4e:f7:71:93:11:06:47:ac:c4:84:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Validity
Not Before: Aug 10 11:01:16 2025 GMT
Not After : Aug 11 11:01:16 2025 GMT
Subject: CN=c7e1c3730e0b83ea814163d75bff136fc90941cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:d6:b3:c9:f9:12:ad:25:af:da:cc:81:56:
eb:aa:17:81:39:25:91:56:9f:30:6c:ca:07:ca:6d:
99:07:c8:10:59:0f:32:3b:4b:5c:91:9a:7a:5b:a0:
6f:d5:c9:d3:b1:2f:bc:36:2e:f2:4c:4b:ae:ac:50:
3c:31:91:03:6b:d6:96:c6:e3:ef:a9:f6:ca:e8:1f:
74:be:a4:7e:5f:43:c3:dd:91:ff:3c:9e:c2:e8:11:
8e:d2:7a:ef:90:73:b5:88:03:c7:8c:b7:cb:18:86:
f5:4f:ec:a5:97:b6:c4:fa:58:fe:01:2c:f5:62:36:
8f:d2:ad:0b:cd:23:ba:be:0b:6d:ac:cc:bc:19:5a:
9e:f1:0f:3a:46:49:f7:a1:63:c7:60:42:96:7c:61:
d2:12:76:b3:a6:97:3e:a2:37:0b:19:76:58:d5:b4:
0e:79:35:a2:42:8e:7e:c8:ed:4e:43:9e:c4:18:a4:
bd:af:73:d5:5f:f8:57:eb:ae:70:c6:34:38:9f:a6:
48:c8:31:76:ae:ba:cb:44:7f:bf:d5:54:dc:70:17:
2e:3d:0f:44:b4:c7:ed:c7:f9:b7:34:e0:22:f3:90:
17:e7:fa:3d:24:6f:4d:73:9e:f9:d5:8a:cf:ad:bd:
b2:db:2b:01:38:df:1e:07:cb:f6:3b:a2:69:d3:21:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E1:C3:73:0E:0B:83:EA:81:41:63:D7:5B:FF:13:6F:C9:09:41:CF
X509v3 Authority Key Identifier:
keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5f:c3:64:40:64:4c:5e:9d:43:ec:68:85:2d:2b:93:2c:25:
fe:36:a1:d6:0f:fa:eb:71:38:00:62:d1:fc:46:b7:cd:e6:da:
ed:64:35:04:cc:57:1c:f4:ca:74:19:4d:95:bb:40:fb:88:c8:
01:eb:36:ab:3a:70:67:4d:65:bc:5a:4a:2f:88:54:1d:f4:b0:
cb:48:d4:50:4e:81:7d:cd:99:b3:0b:37:15:12:35:e7:cb:31:
90:eb:7c:92:dc:40:fb:94:b6:cd:95:5b:60:3d:75:41:bd:da:
8a:2d:b2:ce:18:23:b0:2c:af:13:9d:c4:ea:d7:31:a0:81:43:
c0:49:97:55:06:f1:74:dc:38:85:77:58:41:fa:fd:9d:fe:5f:
1e:65:ec:22:d5:46:6a:8a:24:8c:ab:bd:7d:e3:95:40:0b:55:
9f:b6:fb:8f:6a:c7:e2:4c:45:1e:42:9c:bb:6d:71:f2:ea:82:
6b:88:a1:b1:d0:71:fd:36:df:ba:bf:d9:3b:99:3c:15:e0:b8:
14:61:fc:d5:48:bb:74:52:21:63:e4:cd:18:58:6e:0a:b0:10:
88:55:ae:5c:c7:8a:a4:58:7b:70:a6:68:db:5a:4e:6b:56:ea:
3b:30:81:6c:cd:0e:4e:69:50:4d:cb:f9:85:8f:86:77:d7:d1:
6c:51:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:34 2025 by rpki-client