Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: Db2z7XsLtErY57OTmhkLglQRlog3MgvgOPdCUBoqQTs=
Subject key identifier: EB:E1:C3:35:5C:26:C2:03:31:E6:82:EC:98:9B:4F:21:D8:D2:C2:4F
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019768BC37DCCC9C1A486F09195D2B7135FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 1522
Signing time: Fri 13 Jun 2025 10:00:54 +0000
Manifest this update: Fri 13 Jun 2025 10:00:54 +0000
Manifest next update: Sat 14 Jun 2025 10:00:54 +0000
Files and hashes: 1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: MUr2JKddeAksCQ0jglzmrmIv9VIXtZOw8iZRRtnaWIE=)
2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:37:dc:cc:9c:1a:48:6f:09:19:5d:2b:71:35:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Jun 13 10:00:54 2025 GMT
Not After : Jun 14 10:00:54 2025 GMT
Subject: CN=ebe1c3355c26c20331e682ec989b4f21d8d2c24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:f1:c0:e1:a6:58:cd:bb:c5:d1:47:2a:69:
03:38:5b:c5:bc:0f:f0:7f:8f:78:62:19:0f:f0:e9:
da:64:81:da:72:4f:e9:f2:d1:66:90:f5:ba:a4:51:
cc:9f:80:f8:ad:73:c3:70:8b:4f:76:16:fe:f7:1b:
9c:c7:b6:05:b8:93:06:97:e6:dd:33:28:ec:14:47:
8b:08:18:76:91:d6:a6:a3:ff:d6:80:02:f9:a8:2c:
b6:43:44:ce:a6:4b:b7:40:c1:39:6c:47:76:40:6c:
74:6c:41:e9:2e:ba:15:2b:b8:e5:5d:7b:9f:be:2a:
61:f0:b7:12:34:06:ba:20:d4:d0:60:30:3b:4d:52:
31:cc:91:29:20:d2:7f:d8:47:8a:ae:20:32:7e:c4:
bb:42:78:df:2f:c3:b5:0d:08:54:40:4f:89:00:4a:
e2:69:1a:80:30:7a:28:fe:cc:f8:ad:f0:ca:ae:4d:
1f:13:0c:bd:8a:48:e4:22:8b:5b:71:5b:91:5b:e5:
3f:d5:e3:ee:a9:b9:cb:d4:a8:2c:fb:da:c1:7e:79:
56:c3:4a:ea:73:6e:c7:bb:b6:39:d4:fc:28:c6:16:
37:c6:de:c7:ea:a9:b2:a8:29:9d:0c:0b:5c:ce:d4:
d9:d5:9f:ac:95:75:48:14:f1:d0:01:c1:a6:32:71:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:C3:35:5C:26:C2:03:31:E6:82:EC:98:9B:4F:21:D8:D2:C2:4F
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:62:1d:07:3d:8f:af:3b:fc:8f:8a:60:50:d8:71:6d:4e:e0:
af:ab:d5:93:70:75:b1:41:9a:ba:5b:de:ab:e8:f4:eb:d1:25:
da:03:b5:96:ab:58:9b:e1:bf:02:29:54:78:e8:07:1d:a1:3a:
f7:3d:52:62:cd:67:7d:3c:80:15:4c:04:03:31:58:d0:f3:06:
95:aa:03:f0:80:ea:7a:19:c3:3b:90:13:14:72:bb:8c:eb:e5:
96:02:79:b8:a4:73:ae:dc:a5:7f:df:5a:d2:df:dc:02:52:4d:
34:e8:8a:7a:de:1d:e1:d7:16:65:e3:31:73:69:a5:9c:56:58:
a5:44:e9:a1:2d:db:6c:eb:b0:f7:e6:c5:13:38:cc:7f:3b:cd:
f5:e9:db:49:90:68:60:53:8e:14:76:b6:27:c6:cc:c9:f9:c1:
77:dd:cb:95:e0:7d:f7:74:18:7b:61:63:1f:c3:18:5e:7e:d2:
b4:8c:5c:f2:9a:67:a8:8c:fe:73:b8:b5:28:55:fc:0e:3c:eb:
5b:8e:24:bb:b2:c6:05:2d:4a:27:8f:f6:d4:70:da:4c:bf:57:
e0:c8:7c:aa:08:34:ab:49:49:b6:0b:64:a8:ab:b9:42:86:b0:
99:0f:eb:94:9b:75:f7:83:8d:76:e7:f1:05:19:08:5b:3a:3b:
2c:c2:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:03 2025 by rpki-client