Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: adgqDccXAgJsXQtY0nl0DzUnANLZgTy31qpwWh/L9qY=
Subject key identifier: C4:BD:35:BB:95:72:09:31:67:27:2D:1A:A6:0C:D6:C6:7F:E2:6A:AB
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 019769618276632367CA23E8AC4BF6E818E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 1588
Signing time: Fri 13 Jun 2025 13:01:27 +0000
Manifest this update: Fri 13 Jun 2025 13:01:27 +0000
Manifest next update: Sat 14 Jun 2025 13:01:27 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: 7eeOGQPcDcoyuCpA32LRmBVddHnfKKSRsCiOf8/QmJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:82:76:63:23:67:ca:23:e8:ac:4b:f6:e8:18:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: Jun 13 13:01:27 2025 GMT
Not After : Jun 14 13:01:27 2025 GMT
Subject: CN=c4bd35bb9572093167272d1aa60cd6c67fe26aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:e9:db:6e:e1:66:26:b5:f4:22:aa:a2:09:
8d:57:b2:9c:cb:f1:81:4d:c6:fe:4b:30:2a:c1:9e:
10:95:d8:da:d1:34:a8:ed:6b:64:02:72:9f:3e:73:
bb:f0:f3:63:00:d1:7f:4e:12:58:43:3d:a6:dc:e9:
17:b3:2a:d4:d1:95:19:03:99:6e:65:c0:40:e9:cc:
2b:94:f7:8e:b0:d6:e3:6e:ca:0a:42:8a:44:90:57:
9e:08:98:14:a4:64:3d:e6:13:e4:f9:23:22:3c:02:
68:1a:a5:51:f2:d1:d2:9a:6d:93:18:16:e4:80:44:
8b:38:77:05:22:4d:92:a6:b4:ec:b2:07:a0:c7:0e:
aa:a2:bb:b7:a0:36:68:58:bb:13:a1:8f:3e:83:62:
c4:ef:5f:28:c8:91:2e:4d:9f:6a:c9:2f:82:00:8a:
91:50:66:cd:99:8e:32:7a:0f:c2:e3:30:64:5e:5f:
60:1f:f9:f2:2d:87:c1:30:42:d0:04:dd:2e:e1:f9:
b3:e1:32:11:aa:a1:a1:98:4a:f6:e5:e5:db:e5:48:
be:9a:2f:3a:71:4d:07:9a:98:f3:8f:88:14:07:d1:
77:38:ff:90:27:18:c5:ff:b3:39:db:ca:18:eb:1c:
e0:90:89:a9:fe:36:6f:e3:6d:fb:2f:72:f2:d4:cc:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BD:35:BB:95:72:09:31:67:27:2D:1A:A6:0C:D6:C6:7F:E2:6A:AB
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:52:95:d6:33:90:7e:b6:e6:39:4a:42:65:9f:ce:8e:fe:51:
d0:f4:86:07:03:6d:bb:97:d0:67:11:2b:21:5b:90:70:97:3c:
9a:09:e0:21:f9:82:41:2b:8c:07:99:c7:d4:92:d5:4e:bc:b0:
2c:d6:1e:07:3f:ba:1f:f7:4e:26:ba:7c:9c:d7:58:f8:88:f7:
27:6e:10:18:36:79:35:93:88:ac:3e:4f:2d:8c:68:19:30:c5:
70:b5:73:49:c3:2e:e5:f8:56:05:bd:e1:7f:e9:4a:69:df:dc:
fe:76:18:f1:83:03:d6:22:03:0e:cf:58:6d:e0:63:59:b8:31:
ee:3f:84:4c:6f:33:c3:21:d5:5d:29:73:b0:13:f9:87:b5:29:
8b:57:04:0e:89:db:d5:d2:28:0a:f4:60:3b:f3:80:b9:04:9a:
21:c3:be:2c:16:ed:06:16:7a:9e:23:29:c3:a6:93:af:a8:99:
e4:c0:77:3b:28:15:4d:d4:f9:8c:21:f4:5f:31:00:a3:9b:eb:
3c:8f:03:cf:9c:0f:32:4e:78:0d:c0:29:e9:fa:d2:4c:a8:fe:
59:30:51:ac:f5:6a:14:48:fe:76:20:4d:a9:3b:b0:72:ed:57:
c6:56:5a:39:85:18:ff:0e:b2:60:d2:ac:f7:cb:cd:2f:d2:ef:
95:aa:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:24 2025 by rpki-client