Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: TmxFigxw7LZ3uTLSss5lagAB1+MSVxTJHpoImnY4QyE=
Subject key identifier: 41:A9:26:71:27:05:3B:F2:8F:37:1D:06:2E:0B:52:5E:E9:78:FC:2F
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 0197B7457E3375290B75B69D83BFC442214D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: lHoUMGjXyzFQhHWdo3SsMm0omeuavL5OQ/mEcucCPr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7e:33:75:29:0b:75:b6:9d:83:bf:c4:42:21:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=41a9267127053bf28f371d062e0b525ee978fc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:a4:b2:45:4b:f7:42:a7:f1:0a:5c:56:07:
80:0f:15:cf:b7:9f:b4:af:5b:85:0a:5a:ce:1a:3a:
20:5a:1e:c4:d7:e5:f9:8c:cd:38:23:46:8a:13:d5:
63:c7:43:94:ac:20:5f:65:f6:51:c0:5f:92:65:5e:
5a:e6:09:28:25:65:90:b1:12:dd:09:2d:f6:e9:81:
80:69:9f:f6:61:da:d6:36:2f:b9:d6:b0:a9:b2:5c:
a5:27:6d:ff:f0:d9:2c:9a:e1:91:a1:b4:2d:c2:6a:
31:9b:1d:f2:58:a0:49:8c:8f:61:d1:1a:69:b4:aa:
2d:9a:73:98:62:74:39:e9:42:70:7f:ca:66:a7:77:
c0:df:21:aa:32:44:42:39:0e:69:0b:60:6a:0e:88:
2a:ca:0c:d2:62:e8:f0:c6:cb:07:64:59:5e:b4:8c:
79:98:0f:4d:e9:5b:58:0e:74:44:9c:35:d1:47:55:
d5:76:49:00:91:00:82:1f:b8:82:70:ca:ea:a1:0b:
fa:01:d4:78:5c:7b:4b:41:d7:6e:2c:bc:8a:58:58:
cb:bb:75:fe:47:d4:b0:1d:d0:92:fd:ea:86:c9:49:
01:45:3d:3a:52:d1:44:f1:02:05:48:ea:48:42:39:
c1:75:d6:54:93:47:b6:86:bc:51:b7:fe:17:c2:ae:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:26:71:27:05:3B:F2:8F:37:1D:06:2E:0B:52:5E:E9:78:FC:2F
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:11:3f:5d:10:f7:39:59:f0:41:0f:c7:27:ff:f8:1b:0e:
b3:9c:67:c8:ce:2e:31:c8:56:f6:29:4f:d5:33:13:e9:36:72:
36:ca:fe:1b:04:0e:5c:a7:08:09:e3:6d:7f:5d:a0:ce:5c:9f:
9c:68:5b:6d:21:06:18:8a:c8:94:c7:eb:02:fc:9f:c0:17:d6:
08:0e:f3:32:d4:69:f5:62:5b:fa:2c:e6:3e:09:95:03:33:76:
8c:df:2c:58:1c:d6:90:ed:98:c1:9d:1f:d2:b7:4a:58:f4:d5:
6e:95:db:98:59:51:1d:66:b2:e3:34:05:57:4a:3c:c5:2b:ee:
85:95:16:93:4a:57:c5:78:5a:03:89:14:2e:ed:27:40:15:cc:
3b:f3:db:3b:e9:61:3c:1f:ef:f3:c0:09:11:b3:75:ae:cc:34:
c1:ef:24:ea:d1:ef:19:7c:9c:02:72:0d:9b:33:67:e4:27:6e:
01:4a:3b:1a:63:f2:08:1b:f6:cb:4a:ca:60:a8:36:36:ac:2a:
44:f7:7f:ff:fa:6c:30:98:3f:15:5e:9d:2d:ef:19:1b:d2:56:
e3:f8:11:39:16:1c:95:2e:72:5b:bc:35:33:bd:ef:1f:ff:31:
ef:82:01:b2:46:09:3d:60:d3:69:dc:4f:7b:63:49:32:76:c4:
e0:83:e1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:18 2025 by rpki-client