Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File: i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier: o2pXOvTDEN8ks86+mbZAnUTua4RJyHVysFQnL+ZtX8Q=
Subject key identifier: 5B:F9:E1:2F:27:D5:A5:68:74:65:F7:9F:B8:F7:30:A9:C0:03:4A:9E
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer: /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial: 0198741909B5CA1F80D445E633E94962E57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number: 0101
Signing time: Mon 04 Aug 2025 08:00:54 +0000
Manifest this update: Mon 04 Aug 2025 08:00:54 +0000
Manifest next update: Tue 05 Aug 2025 08:00:54 +0000
Files and hashes: 1: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: 4gHZmtFUOSN/HcStAtRHGilyZCr4qXNAKCeBv366CWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:09:b5:ca:1f:80:d4:45:e6:33:e9:49:62:e5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
Validity
Not Before: Aug 4 08:00:54 2025 GMT
Not After : Aug 5 08:00:54 2025 GMT
Subject: CN=5bf9e12f27d5a5687465f79fb8f730a9c0034a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:2a:7b:49:82:9f:50:b5:76:90:8e:54:8d:
f9:5e:9b:c1:a8:34:0d:11:94:61:a3:74:5c:50:66:
88:2e:0d:a6:df:98:56:ce:8a:38:21:c8:2f:2f:17:
25:3c:22:cd:bc:cb:76:c5:46:90:9d:04:7a:0e:9d:
46:f3:31:a7:a9:a6:b3:96:70:19:86:95:1b:31:5f:
45:96:fb:de:b8:83:72:3d:54:3d:f6:28:30:fc:9d:
c9:2d:dd:8d:bf:94:42:7d:dc:b8:64:e8:c1:7e:49:
e9:9f:8b:3e:85:4d:20:f7:64:91:04:87:c3:c5:6e:
13:7f:a1:83:a1:e9:0e:e3:e9:51:38:2f:ad:26:f9:
7d:20:5c:41:a2:f5:5f:6a:6b:1e:46:51:b2:86:1e:
cf:5b:69:18:1c:aa:ed:62:74:5a:5c:81:46:8e:55:
11:ba:95:78:e7:b8:8e:b8:6b:86:83:ad:4e:f1:d1:
63:cd:8b:21:04:42:40:a2:b4:51:ec:c2:9b:d2:b2:
44:78:67:25:4b:ae:f8:33:73:68:3d:18:3d:50:9f:
dc:16:7b:26:b6:f4:85:d5:c1:cd:d5:f2:fb:f6:76:
22:5d:d4:a8:06:5c:7f:0b:b8:02:8d:75:12:92:ae:
69:47:74:e3:16:6a:5c:d5:46:d0:58:0b:ea:d3:58:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:E1:2F:27:D5:A5:68:74:65:F7:9F:B8:F7:30:A9:C0:03:4A:9E
X509v3 Authority Key Identifier:
keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a2:ae:87:ef:46:1e:29:dd:9c:66:62:f7:40:b9:5e:43:8a:
fc:b5:45:dc:5e:b1:e8:93:0d:bb:28:28:58:f0:43:46:dd:7e:
ad:45:a4:30:db:c5:13:63:29:62:f2:d0:ec:90:b1:d6:69:9a:
25:fe:91:68:cf:5f:fc:89:07:34:f5:37:0e:71:73:96:c9:f4:
8c:bd:51:f5:ec:92:c6:93:26:2b:78:69:0f:ca:fb:7f:c6:39:
9f:e8:65:cd:9c:0b:0c:17:dd:c8:4b:4b:c7:63:68:ba:2a:a5:
2c:ba:31:7d:7e:59:76:d7:35:19:10:45:a2:f1:ff:c5:f9:e7:
85:dc:10:7e:08:a4:c4:ff:66:74:93:89:bc:6a:f3:a3:79:e5:
f0:29:07:38:db:13:2b:02:af:dc:e1:57:6d:63:ab:a4:0d:49:
ac:dd:a6:3b:ab:d7:a8:24:98:f1:5c:32:f4:5b:a5:7d:85:7d:
aa:5c:c5:74:7d:fd:1e:a4:69:04:45:10:de:d7:f7:36:1a:60:
82:1a:56:87:e2:aa:7f:bf:6e:17:80:30:3b:97:97:50:07:51:
5f:d9:1b:cd:58:f7:da:dd:70:d5:a6:74:2c:d0:68:56:55:8c:
44:21:9d:26:c1:69:2a:5c:24:52:9c:13:63:2f:a1:9d:5d:8f:
e5:af:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:32 2025 by rpki-client