Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier: gg3jbXjikVH3La7riHlJ6ulOduKNhL+xy+Ze4ssXcME=
Subject key identifier: CB:E2:EC:74:1A:D7:A8:76:3B:7C:AE:60:43:65:BC:B2:40:B3:8A:B8
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial: 0198D4E0716C22033C5D386A8CE0FE7F07E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number: 12DB
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: 31vyJG53P1QzhiHsgMb8yDB+ogmap6ffWtigxjKunzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:71:6c:22:03:3c:5d:38:6a:8c:e0:fe:7f:07:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=cbe2ec741ad7a8763b7cae604365bcb240b38ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:cb:83:32:e1:60:a8:3a:0a:f6:9f:20:e3:
b5:07:90:e1:78:b9:4c:d6:8a:5f:59:78:11:9e:7e:
cc:71:6e:96:bb:89:64:b5:a3:09:81:3c:35:89:db:
3c:ac:a7:44:50:ad:74:df:50:67:cc:21:05:74:a8:
0c:7a:ba:cc:f3:33:fe:a9:19:77:68:47:90:41:85:
1a:74:f1:13:24:8a:45:3c:96:7e:a6:24:12:61:12:
d5:3a:b8:04:d5:0e:a4:96:2a:c7:18:94:49:1d:f7:
cc:16:0b:cc:3d:e1:13:f7:c8:9b:db:95:aa:63:5e:
91:6a:8f:20:e1:7d:26:22:1d:38:eb:e9:c8:02:1d:
f1:de:4c:97:00:32:92:af:ed:b3:62:47:21:d9:a5:
74:fa:08:66:00:04:64:29:de:26:61:5f:78:72:63:
fb:44:e8:72:5c:b7:29:94:e5:a1:df:39:75:53:08:
5f:f1:92:9d:3a:94:ee:52:4e:9c:26:3c:26:fd:a5:
ac:0b:b7:f3:da:39:52:30:76:27:42:3f:c1:4e:bf:
10:f0:48:26:e7:65:3c:a7:64:f1:eb:f6:d8:ec:62:
7b:93:51:83:a5:33:a7:8a:14:d1:47:74:1a:e8:6e:
f2:fd:72:18:1e:28:95:e2:87:3a:d9:d9:cf:fb:2d:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E2:EC:74:1A:D7:A8:76:3B:7C:AE:60:43:65:BC:B2:40:B3:8A:B8
X509v3 Authority Key Identifier:
keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:70:66:f3:9c:35:c4:f1:70:55:a8:80:96:f3:5e:52:6f:f8:
6f:12:3b:0e:4d:a8:87:38:fd:e9:7b:75:88:e5:3b:50:ef:fc:
ab:0f:1c:44:c5:6a:63:08:53:77:97:ef:b5:f7:58:77:93:f2:
de:7b:5a:27:ca:f5:0f:ad:84:0d:d6:4e:ee:1f:b8:91:03:c7:
ec:f1:a1:36:c7:68:a7:4e:2c:76:69:6a:68:c9:01:84:a7:47:
15:f1:9b:f8:62:9a:23:ed:a3:2d:c6:c2:4b:df:2a:8c:59:fd:
7b:84:c3:e0:c1:1e:26:d1:67:bb:74:c3:40:47:1a:66:a8:eb:
66:ab:75:1d:3d:76:e2:1b:17:4f:9d:c4:40:36:19:60:86:3b:
af:d9:59:c5:ee:4c:4b:b9:35:15:bc:52:71:38:b1:5c:8c:7c:
8a:af:e8:92:ac:a2:fa:aa:27:8d:16:66:a1:24:37:f2:35:8f:
52:b2:02:33:59:cb:66:80:f4:19:b1:83:7a:57:c4:97:9e:ca:
e4:49:16:87:66:e0:72:46:df:23:2a:24:28:dc:14:c1:6b:c7:
2e:7b:90:fc:ae:1a:31:f3:d7:56:0c:02:7f:64:4b:20:82:d0:
58:0d:4d:36:a3:04:c9:be:9f:10:96:ec:7b:3e:eb:c0:ba:3e:
22:dd:4a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:33 2025 by rpki-client