Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: ihIunotwlU0jLZfEb4BHQDznrru4y3YJYnJJ5p2dFYQ=
Subject key identifier: D1:19:CE:DE:92:3D:09:C1:0D:53:67:3D:F3:B3:76:F0:8E:C3:E7:CA
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 019872621271F019B4122DE0776A35805984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 00:01:26 +0000
Manifest this update: Mon 04 Aug 2025 00:01:26 +0000
Manifest next update: Tue 05 Aug 2025 00:01:26 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: 9A4i/5R58kOjRpIzVFS8BMD2plsIaQM5ToGlk1M7ipM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:12:71:f0:19:b4:12:2d:e0:77:6a:35:80:59:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Aug 4 00:01:26 2025 GMT
Not After : Aug 5 00:01:26 2025 GMT
Subject: CN=d119cede923d09c10d53673df3b376f08ec3e7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:13:b7:28:2a:8c:03:c9:7e:e8:21:9d:8a:
3e:3c:77:3c:6d:58:e5:88:03:32:0a:60:8e:0b:e4:
83:46:71:62:0a:15:e9:1c:5c:b8:3d:ea:3d:72:f9:
8c:76:3d:e8:e0:cc:2e:12:3b:54:b4:7a:ce:85:f5:
bd:42:d4:01:89:f6:8d:d4:01:d4:e0:8a:b4:cd:33:
f7:9d:b7:0b:86:49:e0:dc:7c:b7:6b:db:46:5f:c7:
1e:dd:d4:85:3e:a1:d3:78:3b:64:30:26:e2:d5:5c:
d9:f6:d5:bf:e1:56:43:b2:2a:8f:e1:ea:58:ff:53:
56:35:2c:c7:08:c4:7e:53:13:94:04:21:d1:f8:dd:
a6:69:b9:74:c1:f3:fb:89:76:08:f6:01:ff:ea:b5:
08:ad:d9:cf:b3:e9:2a:e8:a9:fb:f6:91:15:50:44:
5c:04:76:f9:f0:14:46:cf:56:c9:c6:48:1d:2b:82:
4d:00:38:77:30:f8:ad:b1:04:cd:30:f0:6a:99:9f:
81:c8:61:f3:03:e2:4c:18:a2:60:44:5d:2d:6b:06:
0d:b4:62:ce:23:8a:9c:77:64:34:7c:81:21:9f:3e:
c6:28:09:26:45:07:ed:d0:7a:8b:de:50:9e:9f:ca:
12:0a:e2:4d:07:33:44:b3:84:dc:91:a6:3d:83:24:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:19:CE:DE:92:3D:09:C1:0D:53:67:3D:F3:B3:76:F0:8E:C3:E7:CA
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e5:0e:d9:7e:a4:05:d4:7c:f8:41:82:ef:a9:07:8a:2f:cc:
1a:5e:f4:64:f1:05:56:6a:16:c5:52:46:65:25:80:52:9c:58:
7f:40:37:52:b8:8f:5c:92:39:a7:9a:ca:52:09:81:b4:2f:c7:
d7:0d:54:0a:b6:f7:81:c8:c0:30:b0:5b:0c:af:e4:aa:7f:0e:
6e:51:55:66:ed:c4:bf:94:b4:28:71:5c:0d:8a:c2:ea:6d:af:
b0:eb:c0:12:d4:d2:3f:20:3c:c3:06:96:3a:b8:7f:4e:75:de:
db:01:99:02:ba:3a:e7:93:45:f2:5e:a3:d7:80:7d:b6:22:48:
28:7d:04:2d:26:54:a0:4e:87:7e:06:98:18:60:6c:a6:b3:4a:
25:ef:1c:db:54:02:9a:2e:ac:c3:2a:fa:a1:69:cd:f9:96:b7:
ab:36:23:3d:b7:c4:e8:71:45:ae:19:f0:e5:d4:6f:3c:39:8d:
f1:a2:fe:f8:a4:00:29:23:6a:07:ce:b9:03:9a:32:8e:c1:fa:
57:8d:5f:55:58:fb:eb:59:21:db:cc:ba:b1:07:d2:78:cb:4d:
43:39:72:5c:b6:10:55:65:2b:51:72:98:56:22:e1:1f:da:4b:
e5:90:c4:13:cd:7c:22:83:fa:e8:f8:66:03:61:bf:39:7c:14:
c0:23:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:10 2025 by rpki-client