Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: NjsmHbB8y/vE17u5rwdnTkJSpW/2CUl7AIxOeSpfPBM=
Subject key identifier: D7:18:18:A2:44:41:69:2B:29:40:C3:F5:F4:FE:3D:8F:B5:7A:5C:4B
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 0197B88FEA77EDA0032788A71E41A10046FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 22:02:08 +0000
Manifest this update: Sat 28 Jun 2025 22:02:08 +0000
Manifest next update: Sun 29 Jun 2025 22:02:08 +0000
Files and hashes: 1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: aNGG7dc5Kjg82g+5tVe3ZcgTRdJOU8H+MFG5X0X4foE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ea:77:ed:a0:03:27:88:a7:1e:41:a1:00:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Jun 28 22:02:08 2025 GMT
Not After : Jun 29 22:02:08 2025 GMT
Subject: CN=d71818a24441692b2940c3f5f4fe3d8fb57a5c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:fa:40:f7:be:eb:60:03:d0:4f:7f:04:27:
a5:be:c8:90:7a:24:5c:53:6e:b2:4c:a8:f6:f0:9d:
de:35:e2:45:3d:1a:6a:28:0c:69:55:ee:34:8b:3e:
1b:fe:cc:d9:f7:72:0e:99:d5:f8:b6:56:10:2b:55:
be:9f:01:52:ba:6c:37:02:ac:89:0c:25:3a:13:85:
dd:c5:a5:c7:6a:94:bd:29:0c:be:b0:df:9b:ad:19:
35:7c:fb:c6:bb:1f:1f:35:89:83:55:0f:68:cd:ce:
d2:89:7c:ef:c8:1e:00:2f:72:a5:0e:d7:be:60:43:
e8:6f:9b:a4:c8:46:b4:15:07:4f:68:11:84:7f:83:
65:3c:cf:cb:3c:6c:9f:9c:01:af:71:7c:e7:d1:d9:
1e:74:6d:5b:6a:86:45:41:20:97:44:a0:10:d9:e9:
79:47:a8:3b:52:14:b8:24:8b:55:ab:3c:d5:1e:7a:
1c:c1:a7:0f:aa:ae:f6:e3:3b:67:02:01:53:3b:ef:
30:79:53:88:b4:67:da:35:68:c8:8b:4a:2c:01:d6:
61:3d:c8:40:cb:b3:79:37:32:15:92:c4:8c:53:35:
94:7c:ce:c4:9b:e3:71:61:8a:4b:40:dd:90:01:c2:
6b:68:62:63:60:26:53:ad:3b:59:d9:3b:4a:ed:be:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:18:18:A2:44:41:69:2B:29:40:C3:F5:F4:FE:3D:8F:B5:7A:5C:4B
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4b:cc:e2:9b:53:8c:6b:51:53:aa:48:6b:1a:33:b2:03:22:
c8:48:63:9f:18:de:7c:8d:cf:28:96:8b:79:51:f6:37:43:3b:
45:8f:1c:73:4a:18:3c:bb:db:7d:0e:19:51:c2:b5:53:8d:de:
6e:13:81:70:73:70:5e:66:6b:e3:b4:ed:51:02:2a:18:e1:19:
cd:a9:d0:08:ef:7f:1c:a1:79:1a:50:13:dc:80:40:91:ff:32:
3d:11:bf:0f:d2:fd:1d:d0:14:4d:9c:b7:1f:a3:79:fa:38:6f:
c9:c1:eb:7c:7b:a8:0f:53:2d:c0:c9:ee:45:89:eb:90:75:f6:
34:14:6e:b4:7c:69:fd:45:7c:7b:fe:55:cf:97:39:a6:82:85:
bb:6b:23:60:f1:77:d4:c8:d6:6b:c5:b3:05:aa:8c:72:66:10:
09:a5:c6:bd:f0:d8:db:ea:a6:6d:91:a0:ab:e8:4d:d2:2b:ac:
37:d3:ba:b1:d6:61:ce:a8:07:41:0f:38:9f:e7:9b:72:8a:b5:
5b:17:a2:3e:dc:67:0d:ae:a9:fb:70:f0:40:cf:23:be:48:56:
63:9c:da:e8:79:c4:60:56:93:50:0a:95:6b:b2:0e:37:d4:b0:
b8:51:48:c1:04:ef:5f:3e:77:94:cc:f1:59:8b:81:3a:f8:ef:
3f:fe:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:10:00 2025 by rpki-client