Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: OMt5DcykK9w0f6JRdZGMk9h+jRv7tJ5kZkFiJgsDGxs=
Subject key identifier: CE:37:3A:24:36:98:71:14:2E:B4:C7:FB:4E:C2:68:7A:96:47:27:5D
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 01976F2CF3AE02C40A5132C61F3C0862D9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 0A1E
Signing time: Sat 14 Jun 2025 16:01:46 +0000
Manifest this update: Sat 14 Jun 2025 16:01:46 +0000
Manifest next update: Sun 15 Jun 2025 16:01:46 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: UYk7GGqVO3uXbRsJzXtlot1YsTy7GWhBVZ90cdNFuuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:f3:ae:02:c4:0a:51:32:c6:1f:3c:08:62:d9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Jun 14 16:01:46 2025 GMT
Not After : Jun 15 16:01:46 2025 GMT
Subject: CN=ce373a24369871142eb4c7fb4ec2687a9647275d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:a0:4f:eb:63:62:bb:29:1b:d2:fa:62:1b:
78:10:67:6e:88:4d:fc:e6:2c:57:a9:bc:2e:17:65:
19:6f:57:cd:bf:07:09:05:0d:35:3d:c9:39:39:26:
a3:e8:91:9f:bc:15:b4:77:07:d8:08:f5:5d:34:44:
bc:ed:bb:5f:fe:4c:c6:62:a1:a1:40:94:b7:75:83:
3d:85:6a:8e:91:81:8e:32:ed:42:8e:7a:a1:3d:87:
db:5b:9a:c4:3c:53:9e:4e:06:ec:8e:ff:40:d6:50:
c8:6a:3c:cf:a9:38:02:1a:49:f8:58:a3:25:f5:bb:
8d:73:c0:10:76:70:e4:5b:21:a0:61:35:12:2a:85:
b3:97:df:2f:10:fc:86:2d:a6:49:4d:1d:6a:d3:d9:
3b:90:7d:06:f4:8d:6d:54:c2:8e:40:a5:8b:40:98:
a0:9c:10:01:e0:e8:07:a8:ca:b0:72:fe:dd:9e:c7:
4e:d4:c3:d7:94:42:7a:5d:49:f2:a3:89:d0:c5:62:
18:f7:e7:75:cd:bd:eb:ac:88:ff:07:62:f5:8d:7a:
77:14:1d:33:d6:e0:88:ad:ea:78:a9:53:95:02:50:
d6:6b:90:de:48:80:dd:03:ca:54:62:10:d1:e6:15:
28:11:01:da:4b:fa:32:66:ac:00:82:c7:3f:de:cb:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:37:3A:24:36:98:71:14:2E:B4:C7:FB:4E:C2:68:7A:96:47:27:5D
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:33:3e:ac:ca:be:fb:54:55:bf:0d:19:8b:09:74:61:3c:44:
b1:03:c3:1d:be:b9:1e:af:4c:0d:14:18:6a:8d:6f:24:a1:71:
a1:63:16:55:de:1f:fb:5e:72:5c:97:6c:cc:19:21:cf:50:f4:
e4:96:5a:5f:3a:b1:e9:59:46:51:07:a7:50:a6:78:a7:9b:50:
d9:0b:24:57:f7:30:39:15:85:8f:6a:0e:22:c2:27:8d:35:4a:
d0:4d:d9:ca:3e:47:1e:09:02:0e:57:e7:8a:7d:99:73:46:20:
19:d1:6f:db:be:22:fc:54:06:89:49:6f:a2:89:a5:30:63:23:
93:59:4c:ea:c3:cc:4f:74:b5:ee:21:d9:45:3a:d3:56:3c:f2:
66:f8:c6:93:3a:90:be:57:92:31:1b:d5:34:fa:c9:cd:4b:48:
a9:30:85:40:c4:eb:6b:c1:b7:c9:83:e3:0a:fc:f9:25:61:21:
15:09:cb:e9:a3:7d:d6:5d:fa:7c:d1:de:e7:ff:11:00:0e:e2:
48:7f:14:2a:3b:17:44:1b:23:e0:09:28:de:cf:cb:92:5b:3a:
fe:70:97:91:ed:56:66:3b:6b:8f:8b:e1:0a:26:d8:d0:3a:be:
6d:e5:a3:4e:9e:62:1f:d4:55:e8:e5:cd:1e:a2:d9:1f:09:a9:
33:15:62:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:58:51 2025 by rpki-client