Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
File: Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft (raw, json)
Hash identifier: VPNANS6VTtvMvD5vZNHyJxQ1K4/9KnoIPLHYJCiteok=
Subject key identifier: F6:F8:08:B1:AF:54:70:A4:B1:25:B5:39:A4:E9:34:28:37:BC:9E:08
Authority key identifier: 46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
Certificate issuer: /CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Certificate serial: 0197B7450EDE7C328E4A56E663D113AD3A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
Manifest number: 1272
Signing time: Sat 28 Jun 2025 16:00:45 +0000
Manifest this update: Sat 28 Jun 2025 16:00:45 +0000
Manifest next update: Sun 29 Jun 2025 16:00:45 +0000
Files and hashes: 1: Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl (hash: EEu8wRg18B1+WMIaJoVAtKlxGDI8zCtTlrIk28WKh/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0e:de:7c:32:8e:4a:56:e6:63:d1:13:ad:3a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Validity
Not Before: Jun 28 16:00:45 2025 GMT
Not After : Jun 29 16:00:45 2025 GMT
Subject: CN=f6f808b1af5470a4b125b539a4e9342837bc9e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:ef:c6:6a:b4:7c:8e:25:8d:90:c3:be:6d:
12:2c:12:d9:b9:35:4b:62:32:69:a4:23:89:57:f1:
31:23:64:98:27:c1:43:5c:49:88:22:37:e6:07:00:
73:20:7e:85:ab:09:dd:c2:0d:fc:d6:e8:92:06:c6:
9b:37:6b:c9:6d:24:e3:b8:54:75:a3:73:6a:56:27:
53:aa:85:1b:99:f3:c5:d0:c4:74:67:a7:51:e2:f8:
a7:a0:1c:a0:26:9f:8e:27:da:69:af:c5:f4:2b:0b:
7f:24:de:4f:ef:1e:ef:bb:ef:b7:6f:dc:58:09:e0:
6d:ce:e9:8c:02:e5:af:7f:9f:54:13:99:92:69:bd:
c0:23:7d:11:1f:79:46:c0:64:34:4b:16:54:f6:11:
74:0b:a7:1e:c3:a9:db:7b:d6:c3:9f:57:35:53:2e:
7c:be:23:70:be:72:03:89:d2:e3:80:d4:80:44:ab:
f8:53:8b:5a:4d:f5:c5:f3:c2:73:96:df:c1:4f:14:
69:82:c0:4a:33:22:ad:80:5f:8d:e2:2d:41:a3:5d:
c6:42:5b:44:6c:88:eb:25:9a:4c:9c:56:fc:d6:6f:
8d:0b:d7:8b:1c:5c:68:67:94:f6:a1:51:d3:ca:2d:
4e:17:e4:7f:3e:6a:a5:ac:8d:ac:a2:64:d6:f1:3c:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F8:08:B1:AF:54:70:A4:B1:25:B5:39:A4:E9:34:28:37:BC:9E:08
X509v3 Authority Key Identifier:
keyid:46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:67:6f:04:7c:0a:9c:48:af:4a:97:65:9e:18:0c:68:e8:95:
00:08:fd:72:7c:65:14:63:ea:47:2d:b4:c3:4f:60:7c:9e:c7:
a8:e8:68:e1:82:82:36:d1:23:16:1e:83:22:04:95:14:cd:09:
8d:f9:ed:c7:42:2c:14:e7:74:2b:01:97:07:66:67:1c:d7:6e:
29:34:c1:af:91:7d:bc:b5:e3:5c:ca:3d:bd:d1:9a:f4:f3:81:
e8:49:de:29:6c:8b:37:44:99:c0:66:3c:8a:b7:42:46:b0:07:
5e:2d:c0:d4:ab:6b:d8:37:03:93:95:3e:45:c2:2a:89:49:1f:
1c:88:8f:3f:fe:0a:ac:fc:b9:2d:ba:da:fa:85:90:29:69:5b:
3d:fc:c3:24:89:c5:be:f9:99:ed:17:f0:d8:88:c3:2c:e8:70:
61:e7:0b:61:f9:67:db:fb:49:84:c4:27:d4:48:38:66:04:9b:
44:4e:0f:26:dd:46:53:fa:e9:13:77:e2:2d:ea:91:67:5b:dd:
9e:bc:59:08:02:f8:17:5b:96:0a:b1:2c:b9:4e:4f:e9:2e:ac:
75:0c:55:10:6f:e3:55:7b:14:8d:6c:ec:f9:c7:90:eb:82:45:
42:ad:42:8f:f6:fa:93:2e:f1:3f:b6:23:da:5a:31:8a:af:8b:
85:db:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:29 2025 by rpki-client