Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
File: RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json)
Hash identifier: yDeRZ+JMtM/Sll8ip9c5iVZbwILCmsf7yET74mQv5og=
Subject key identifier: 99:BF:42:DA:11:05:C4:66:E8:A9:61:8F:2F:42:ED:C7:F0:32:BA:4F
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial: 0197782EDE8C235CFED3536C94AE0C6D238F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
Manifest number: 03F1
Signing time: Mon 16 Jun 2025 10:00:26 +0000
Manifest this update: Mon 16 Jun 2025 10:00:26 +0000
Manifest next update: Tue 17 Jun 2025 10:00:26 +0000
Files and hashes: 1: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: vxJGFeujW2jW39Q6RCgjeyTrgENYreVOmDvGwkdBUDg=)
2: knBsZ4wjpF8zeO3oZHgDCU3JzpY.roa (hash: TYTzhZiCS0TYNybiAGDqTJecyl1aRzohizYpYrTciOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:de:8c:23:5c:fe:d3:53:6c:94:ae:0c:6d:23:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Validity
Not Before: Jun 16 10:00:26 2025 GMT
Not After : Jun 17 10:00:26 2025 GMT
Subject: CN=99bf42da1105c466e8a9618f2f42edc7f032ba4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:a7:1a:ef:95:50:8e:1f:58:5d:6b:c5:0b:
e0:31:dc:a9:5b:2e:7b:33:a3:e9:f7:f9:1f:30:8d:
2e:3d:ff:07:55:72:bd:9a:0b:6e:c2:ad:57:20:25:
57:1f:10:a8:76:79:f9:05:82:76:06:53:0b:6f:ce:
2b:66:06:c5:cf:c8:df:f1:15:0e:db:1b:c2:71:70:
5e:1a:d0:ee:c6:e6:20:23:43:f2:2a:cd:6c:a0:83:
13:31:f1:ba:b1:f4:91:d4:fc:f8:e3:0c:ec:23:4f:
6c:05:00:28:4c:27:c0:6b:54:ab:4e:0f:e6:11:8a:
cd:12:b1:0a:0f:a9:70:d1:c3:43:b9:ba:e0:7c:37:
ff:f1:f3:f2:d2:1d:4b:14:07:33:71:74:6a:c1:d2:
96:be:ab:0b:ea:a6:c2:ed:c8:7e:21:b7:c2:68:95:
39:c4:d7:a6:aa:85:bd:2e:ce:70:38:d2:06:b4:81:
0c:5d:a3:77:49:d9:18:f6:04:cd:4e:c3:3a:7d:85:
33:06:d0:e4:ca:99:43:9a:fb:f0:03:e2:a1:95:a8:
54:11:cf:f1:dd:f9:82:fe:73:bf:ba:f5:90:c1:be:
f3:96:43:72:7a:d3:10:d7:c5:7e:b5:74:a9:d0:ff:
57:ef:13:fe:0b:53:b0:85:fa:18:4f:75:ea:d9:9e:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BF:42:DA:11:05:C4:66:E8:A9:61:8F:2F:42:ED:C7:F0:32:BA:4F
X509v3 Authority Key Identifier:
keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:33:5b:20:50:59:93:76:92:cf:5d:81:57:03:ce:a0:f3:be:
df:30:14:7a:bb:0c:bd:70:d0:ee:e8:c7:06:3c:1d:03:75:5d:
cc:ce:06:00:90:36:b5:cd:58:1b:86:ca:80:0f:15:18:cf:f2:
d8:c0:2e:e9:49:e2:e1:0d:d5:f8:be:f8:c4:56:a8:61:7d:c4:
7d:e2:3b:89:67:c9:01:c9:ae:85:38:b8:8a:63:d7:54:9f:28:
f7:1c:64:13:55:7d:19:89:26:e1:fc:3e:5a:b2:76:64:c5:15:
f5:d8:4b:7a:ed:83:71:d4:82:3a:01:cf:fb:d5:73:d1:d5:a2:
a2:a5:0c:37:1a:b1:01:dd:6d:bd:ea:23:48:54:13:48:48:ae:
d6:e5:cf:ed:29:6e:c2:6c:55:21:fa:04:26:c5:c5:70:a1:70:
51:3b:8d:39:33:53:06:8d:1e:e0:c5:51:cd:2c:4d:13:20:30:
b1:08:16:bd:bc:3e:75:84:bd:bb:ed:e2:78:7b:98:57:fe:ab:
df:ec:de:35:6b:69:d9:ce:6d:07:52:54:77:50:59:82:ed:d8:
45:a4:5e:e0:09:38:e2:93:42:ab:12:82:0b:58:cb:fb:88:9f:
ab:33:78:d6:cf:ae:98:dd:f9:cc:c2:87:cf:b7:14:a8:58:4a:
ca:91:b1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:43:02 2025 by rpki-client