Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File: R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier: tpjRNwPsJT2hVYtjjalkEDDEU0tG7AL72jb2U1vDnyA=
Subject key identifier: 51:1C:05:90:03:E8:88:FE:11:90:91:2E:EF:39:DA:E6:B7:6E:7C:92
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer: /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial: 01987B2D74CEF9625718246B381AB9FA37F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number: 02BF
Signing time: Tue 05 Aug 2025 17:00:33 +0000
Manifest this update: Tue 05 Aug 2025 17:00:33 +0000
Manifest next update: Wed 06 Aug 2025 17:00:33 +0000
Files and hashes: 1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: i/uTFsEgRxFlBPCvYYFmz9k0o00ocCZfe+SVl3S5jcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:74:ce:f9:62:57:18:24:6b:38:1a:b9:fa:37:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Validity
Not Before: Aug 5 17:00:33 2025 GMT
Not After : Aug 6 17:00:33 2025 GMT
Subject: CN=511c059003e888fe1190912eef39dae6b76e7c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:ea:68:9e:62:9e:33:67:fc:ea:97:45:da:
a2:a0:fa:c5:fb:48:cd:ae:3b:c8:3d:26:75:29:c7:
51:c6:b5:2a:73:4b:01:32:1c:c5:7c:a2:a0:c5:d1:
bc:f8:dd:16:76:db:9d:5c:0d:47:59:32:12:cb:49:
8e:f2:91:71:bd:80:c8:e2:7e:5f:22:f4:97:a6:1a:
4f:20:10:71:83:49:71:9c:35:ed:91:7d:78:bc:91:
7e:76:06:3d:49:59:17:06:09:0d:f9:cc:28:6f:8a:
1c:6c:d3:87:fe:9e:49:1b:f9:fd:69:0d:c1:c9:1a:
c1:4c:4a:c1:d3:79:fb:e8:7d:57:4a:2f:d0:39:62:
22:34:93:82:cc:b9:a2:95:f1:89:93:6f:ef:fd:26:
b5:d6:a4:e2:1f:8f:84:e3:43:fd:f2:53:a0:b5:eb:
fa:f3:27:d8:fd:2d:d6:94:4c:d3:9d:a6:08:47:10:
d1:b4:d6:62:a1:f3:54:0b:a1:15:b1:38:2e:68:cc:
b8:9b:15:9c:37:11:80:28:de:a5:ee:e4:c0:38:81:
3c:af:76:f5:41:b6:03:98:36:bb:5f:c4:f4:17:e1:
32:ab:c2:e0:78:ab:28:26:f7:f9:3f:b1:7b:08:cb:
90:4a:8f:5d:46:14:10:6f:69:98:75:fa:6c:f4:cc:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1C:05:90:03:E8:88:FE:11:90:91:2E:EF:39:DA:E6:B7:6E:7C:92
X509v3 Authority Key Identifier:
keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:82:b2:83:b1:84:d6:fd:c1:58:99:33:2e:49:f5:ad:f4:d6:
40:2e:f5:79:58:8d:81:c3:5f:24:13:04:44:38:d2:a6:ea:18:
34:62:8b:e4:dd:7b:26:d9:0b:33:ac:98:56:79:2c:eb:af:c2:
a9:07:cb:38:c1:24:d8:35:e6:5c:2e:81:d5:8d:a1:a3:c8:59:
23:4a:a2:b1:03:12:bd:71:23:57:3b:58:a7:d6:ef:bc:99:d6:
3b:1a:5f:b5:b9:46:5d:03:6a:01:a6:6b:92:b5:14:94:43:2f:
e6:c3:0c:b0:b9:0f:b4:e0:5a:26:c9:3f:e3:60:f0:35:37:73:
ef:8d:f1:e8:c0:26:9d:eb:05:41:2d:86:0f:7d:c1:84:4e:57:
35:76:59:f2:0a:20:15:23:ea:02:2f:55:f5:5f:ce:67:f9:a7:
99:50:6f:fe:b9:fb:61:08:df:fb:92:4a:6e:74:0f:0c:ad:e3:
54:1d:31:8d:81:a3:f9:6a:ee:1c:44:e9:8c:35:e8:b8:af:80:
ec:69:08:a3:47:51:7d:85:dc:fb:66:19:e7:ad:f9:be:d5:df:
0e:c5:eb:62:75:b3:64:fe:a3:bf:15:a5:8f:28:5a:ed:f3:88:
bf:34:12:13:e7:ac:71:fc:93:32:12:86:b5:d4:62:71:a6:ac:
3f:97:78:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:20 2025 by rpki-client