Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: iSmD41KC5NFyZhEkF1Oo+jNZrPla4cIGn/KG0JJQ5ew=
Subject key identifier: 09:02:03:A0:00:8D:DC:F6:01:25:8C:D7:4F:83:40:2F:0A:77:3B:6C
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 0198D4732FA4C2F9CFADBDA2B156F4D653DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:02:55 +0000
Manifest this update: Sat 23 Aug 2025 01:02:55 +0000
Manifest next update: Sun 24 Aug 2025 01:02:55 +0000
Files and hashes: 1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: QEu+orxucSQmUtYdy+MX/d7IgJcqsXlhlxyoetn0hlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:2f:a4:c2:f9:cf:ad:bd:a2:b1:56:f4:d6:53:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Aug 23 01:02:55 2025 GMT
Not After : Aug 24 01:02:55 2025 GMT
Subject: CN=090203a0008ddcf601258cd74f83402f0a773b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:05:0e:a6:c5:2b:79:bd:a3:55:22:ae:c9:
1d:1e:ff:ba:b6:0d:31:88:9a:9e:09:80:14:57:61:
a8:6c:32:e8:c8:28:71:77:c5:55:0a:10:1f:93:6a:
08:2e:52:48:d2:de:96:34:f4:44:e1:cd:df:ff:00:
41:b9:88:62:5b:fc:13:25:d8:6c:39:45:ed:7a:b0:
b0:8f:23:42:06:be:f8:1b:45:b2:b5:62:c3:5e:bb:
40:f9:ad:21:1b:d3:7d:76:20:58:48:68:6c:36:ef:
e8:2a:10:00:ab:32:7d:e8:9d:41:6d:76:7e:6b:95:
e2:6e:c3:b3:97:62:e1:75:1b:ba:83:5f:55:a0:e7:
26:0c:2d:a2:b4:9d:77:71:84:9e:f1:df:a4:89:88:
0a:7b:4c:e0:ca:42:0d:7a:e1:bd:4c:4c:9e:5e:f2:
ff:f1:71:79:b2:b1:b8:90:ed:72:75:c1:da:eb:32:
d9:3f:39:ed:d7:da:ea:93:4c:22:81:59:fe:c1:75:
b9:55:a3:d5:1e:67:f6:fa:84:3a:60:b2:52:62:a4:
43:76:35:c8:0f:82:55:16:cd:c0:86:cf:b4:62:02:
07:69:12:af:48:b3:41:d9:c8:58:d4:c9:2b:84:c5:
9e:df:dc:92:f2:1a:eb:5a:4b:9a:6b:b3:21:5a:f9:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:02:03:A0:00:8D:DC:F6:01:25:8C:D7:4F:83:40:2F:0A:77:3B:6C
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:53:32:ea:23:0c:47:4d:0e:0d:85:df:f4:e8:84:ee:00:f0:
44:61:90:f8:65:fd:a9:39:c7:dc:dc:c0:64:cf:4f:17:3e:1a:
88:76:df:b1:12:a0:d4:e7:ea:77:3b:4c:0b:ef:c0:30:13:03:
9b:57:58:c5:31:43:b7:c3:85:de:3f:5e:44:5c:5c:d1:e0:c1:
82:0d:50:a7:1a:d0:34:46:17:24:19:f7:95:cd:0d:87:06:f8:
34:4b:f9:b1:29:96:2b:32:fb:31:f4:18:50:7c:4a:6f:be:17:
24:46:e4:cf:e2:23:f3:49:95:6b:c9:4f:17:cf:e2:43:06:aa:
a4:a1:7a:8f:89:b6:99:5b:3d:b2:16:bd:5a:d9:2b:a1:b9:41:
62:a5:5a:77:06:12:37:f8:b9:ac:4b:43:66:d6:33:ab:89:f4:
ee:b7:95:3c:bb:a3:fe:5a:0a:e3:05:18:a9:7c:5e:db:04:35:
be:b4:1f:01:82:47:01:3c:29:d0:30:3a:da:a7:fe:23:d2:2b:
24:88:e1:a7:6c:9d:ab:24:4d:50:05:f0:0b:e8:4a:5b:19:b1:
80:f9:58:9e:3f:bc:15:5f:30:98:18:82:a2:f1:cc:11:1d:3e:
d2:82:fd:05:62:32:e7:c7:76:b5:44:10:fe:7e:b4:69:03:ba:
0f:f6:5f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:34 2025 by rpki-client