Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: ImxD5rPQrNIP2UkKBrYWMqTEBeYpdr1+UGBhCQL31L4=
Subject key identifier: 67:55:DB:1C:2F:A5:96:38:51:20:F7:A1:C0:24:64:1C:89:8E:03:92
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 01976BBD715FC33463363B1903C84CA109ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 00:01:06 +0000
Manifest this update: Sat 14 Jun 2025 00:01:06 +0000
Manifest next update: Sun 15 Jun 2025 00:01:06 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: wVv+KSmych0WI1AzPs8scza4DKuGDZXu/XhirWGDRyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:71:5f:c3:34:63:36:3b:19:03:c8:4c:a1:09:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Jun 14 00:01:06 2025 GMT
Not After : Jun 15 00:01:06 2025 GMT
Subject: CN=6755db1c2fa596385120f7a1c024641c898e0392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:a8:a3:8e:98:99:5a:7a:aa:cf:bc:bc:19:
ca:6d:1a:2b:43:a1:c0:10:75:5f:e4:19:4a:ac:9f:
32:7f:fa:9c:e8:1f:1f:e2:8f:f6:3c:7a:be:c0:f7:
80:72:ff:45:16:24:d1:bf:50:ed:ff:c1:3b:1f:b7:
b8:d3:7d:65:95:ac:69:bf:46:0b:cb:e1:e7:ac:d0:
e6:d4:e7:07:3b:22:61:06:a4:a5:ab:7f:5a:53:8b:
21:fc:8b:d6:6c:f9:26:a2:74:65:f5:12:e9:6d:c7:
64:2a:5c:ca:af:37:2c:46:49:1b:f7:49:48:b8:db:
51:55:4a:cd:ba:48:78:f0:66:05:5c:82:13:a1:0c:
a8:06:c6:7c:0e:c8:42:4f:a7:e7:47:08:36:d0:ce:
8f:25:06:db:6c:0a:95:8e:b6:d1:be:35:d3:9e:8e:
6e:aa:61:5c:36:db:0e:66:86:3a:6b:04:46:13:44:
1c:31:34:02:56:cf:0e:4a:7a:14:aa:56:13:95:24:
a7:11:39:4d:77:9a:b1:2b:96:47:7e:47:6e:28:7b:
33:58:32:e7:45:22:af:c4:f3:db:f6:7d:3a:99:a8:
db:b8:6c:19:ce:19:80:68:94:73:42:6d:d1:2b:80:
53:ef:14:7b:f2:44:28:34:db:0a:6d:bd:b6:bc:6a:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:55:DB:1C:2F:A5:96:38:51:20:F7:A1:C0:24:64:1C:89:8E:03:92
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:dc:dc:13:13:74:ee:df:78:60:12:0c:d3:28:13:b8:f5:aa:
35:36:33:f4:8b:66:70:55:ea:e0:2c:cc:c0:1b:fa:d8:b9:cd:
75:05:fd:e3:00:e5:6f:d3:9a:d5:6e:58:6c:9a:82:82:e0:42:
bc:14:ca:ae:b1:39:55:5a:f2:9e:1e:12:20:df:6b:84:67:3e:
79:bc:93:8d:c2:b0:67:3e:8f:df:01:da:82:41:72:50:b8:49:
61:75:ac:78:79:6b:62:1b:5f:15:8c:cb:26:2f:07:14:5e:0d:
5c:6d:11:24:46:a2:c4:f0:ae:32:60:d7:40:91:e5:4f:71:77:
11:d1:e1:44:62:90:54:33:fb:0e:f2:4e:da:78:56:1c:3f:0c:
bd:2b:a4:5b:33:28:ae:2a:64:a4:84:27:5b:4a:76:1d:d3:97:
4c:3f:c2:d7:34:3d:bd:c1:ef:36:8b:99:99:76:96:6f:1a:b6:
57:f5:26:9c:e9:e6:cc:24:b0:0c:ee:17:7e:a3:f8:75:c1:ac:
b3:44:06:26:e9:9d:ab:7d:8e:14:35:27:0a:6c:2d:a2:87:ce:
b2:2b:12:f0:e6:b3:62:90:5f:3a:96:05:49:23:fe:83:69:57:
e5:f2:3b:fe:89:7a:7c:aa:ee:7d:18:9e:8b:e5:2c:21:2e:0e:
32:6c:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:18 2025 by rpki-client