Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
File: RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json)
Hash identifier: 5O+TqhKVs8PqlmlrIJCv3p69IUCDlAklVJX9efKU2pk=
Subject key identifier: B1:71:CD:F0:3B:81:FA:00:81:5A:9E:F6:35:6C:91:39:22:11:74:88
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial: 0198733D858CE8577F84CBE96895B89120FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
Manifest number: 0473
Signing time: Mon 04 Aug 2025 04:01:08 +0000
Manifest this update: Mon 04 Aug 2025 04:01:08 +0000
Manifest next update: Tue 05 Aug 2025 04:01:08 +0000
Files and hashes: 1: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: VJLZutrotdv/HNdG4qp4IqshIgYLKSBCw3AtwmwdQwU=)
2: knBsZ4wjpF8zeO3oZHgDCU3JzpY.roa (hash: TYTzhZiCS0TYNybiAGDqTJecyl1aRzohizYpYrTciOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:85:8c:e8:57:7f:84:cb:e9:68:95:b8:91:20:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Validity
Not Before: Aug 4 04:01:08 2025 GMT
Not After : Aug 5 04:01:08 2025 GMT
Subject: CN=b171cdf03b81fa00815a9ef6356c913922117488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:73:1a:d0:c8:ad:88:07:44:1b:12:c8:58:
5c:3b:b6:25:70:cb:83:b9:9e:ad:fa:a4:19:5a:59:
ce:56:60:a8:f0:8b:41:44:9c:12:35:8a:1e:63:14:
f7:78:72:a5:87:fa:a3:8c:c5:a3:0c:cc:2f:3f:b4:
06:60:78:d2:75:e5:81:f6:5c:88:92:71:24:13:38:
de:17:f3:a6:5f:8d:35:3b:23:1b:17:9c:96:14:8d:
1d:e3:ed:b2:88:ca:85:b6:c1:54:d0:55:a0:f6:dc:
cc:35:ae:b7:ec:9d:48:59:25:6d:34:61:18:93:81:
75:98:9c:ae:d4:bb:e3:43:72:26:1c:32:7c:33:55:
77:c4:1c:d5:85:54:26:6f:25:f9:11:d4:d2:6c:9e:
4d:f4:4a:bd:88:39:4f:0d:f5:fe:2f:9d:18:52:c3:
e6:d1:d2:03:18:b0:a3:25:c4:40:45:9f:d7:35:88:
12:db:09:17:ab:52:0f:14:2a:f3:54:23:6f:33:cf:
82:16:bd:7d:e8:fd:62:8c:3a:e5:a9:9f:e2:b0:f2:
8d:a4:0a:3f:1d:60:a1:db:6d:55:f6:41:b1:f7:34:
dc:81:bd:d5:d0:68:c7:59:59:ea:31:3d:d2:8b:01:
e2:d0:51:f2:27:c8:f1:53:14:86:7e:61:87:fb:1d:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:71:CD:F0:3B:81:FA:00:81:5A:9E:F6:35:6C:91:39:22:11:74:88
X509v3 Authority Key Identifier:
keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:d5:6f:33:bd:7b:6c:83:19:26:4a:91:73:9d:c5:9d:0d:
38:78:28:46:11:3e:34:5e:19:f5:ec:f2:cb:99:bf:da:c3:f9:
91:2b:f7:2f:a2:f0:20:de:aa:da:a8:b0:18:db:91:25:6b:61:
16:e9:14:70:d4:94:7b:c3:8d:af:c0:b1:c3:81:96:26:71:2a:
10:cc:dd:c7:9a:99:94:66:0a:3d:79:6b:0a:0f:0e:e8:ed:99:
da:72:3d:29:57:a3:88:6e:39:d5:0f:b4:0d:29:c6:81:62:11:
58:0e:56:29:31:55:69:a6:7a:e4:60:c2:a9:40:33:83:a8:59:
0f:1f:d6:48:55:b2:73:e0:fc:48:c0:9a:6e:d4:29:fb:09:8c:
3e:09:20:b0:6c:6c:5c:b1:fa:6d:4c:1c:3f:cb:30:9f:dd:c0:
65:f5:8c:e1:fe:66:bf:08:8a:1a:26:2d:7f:a1:99:35:eb:47:
93:6c:12:2f:14:79:9c:f3:86:29:19:fe:06:ee:96:fb:8c:67:
de:f3:62:ed:17:cc:07:1c:e1:50:35:38:19:15:7a:fb:1e:45:
3b:c6:37:9a:0e:60:56:87:ed:5e:9b:49:96:30:70:1f:60:ec:
b5:72:fa:8e:c8:99:7e:f1:15:d9:8a:84:d3:c5:37:4e:49:c4:
dc:aa:07:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:30 2025 by rpki-client