Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
File: by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json)
Hash identifier: xJMkD/99bt6JaCKHf9sPusBU9CIfPeJiJ2Qw2TOphLQ=
Subject key identifier: 33:02:62:F1:C8:70:F2:E3:82:98:9E:28:88:AA:7E:AC:C8:37:55:07
Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Certificate issuer: /CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Certificate serial: 0198D6614159B3C1C3E7CC3D508C2C7D4700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:34 +0000
Manifest this update: Sat 23 Aug 2025 10:02:34 +0000
Manifest next update: Sun 24 Aug 2025 10:02:34 +0000
Files and hashes: 1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: L6JRN+KI6fyTE0z+f3laNT106lBca9czR9N1ENj7hdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:41:59:b3:c1:c3:e7:cc:3d:50:8c:2c:7d:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Validity
Not Before: Aug 23 10:02:34 2025 GMT
Not After : Aug 24 10:02:34 2025 GMT
Subject: CN=330262f1c870f2e382989e2888aa7eacc8375507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:41:a3:03:e9:fe:d8:65:46:22:46:dc:75:
74:4f:9e:19:f1:29:38:97:bc:23:d4:1a:4d:f9:bb:
39:c4:0d:65:9c:3c:11:21:0b:84:b2:e8:27:b0:01:
61:46:0f:82:12:92:4d:d6:9f:3b:d7:02:ec:76:de:
4b:d6:4e:05:54:aa:5e:7a:e2:bb:7a:17:4f:cd:a3:
b4:17:fd:51:4a:9a:e0:12:7a:ac:50:46:da:7d:09:
17:18:3f:93:8b:03:e9:09:80:df:8c:8f:7f:82:1c:
a9:e4:15:53:a9:ab:62:3e:6b:42:8c:75:26:0a:59:
88:f0:76:0a:c6:81:5a:41:57:70:39:60:31:3a:9f:
56:64:df:d6:fe:20:e9:3b:b2:c9:7f:15:e6:c6:04:
d1:49:83:9b:c6:7b:e2:48:36:56:79:06:eb:7a:50:
97:86:82:ce:73:25:24:c4:02:8e:e5:58:38:8e:05:
43:dd:90:8e:bb:1e:5b:e2:cc:64:39:52:58:d2:0a:
84:5c:9a:02:98:a4:67:28:d4:a8:e4:ca:aa:c6:3f:
21:b5:d0:89:b1:dc:6f:4c:60:7a:99:4a:4c:0e:89:
e6:4b:83:57:21:72:47:06:24:64:3b:99:fa:37:4d:
c6:5d:eb:ea:19:eb:e8:70:2b:51:10:41:1e:dc:c9:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:02:62:F1:C8:70:F2:E3:82:98:9E:28:88:AA:7E:AC:C8:37:55:07
X509v3 Authority Key Identifier:
keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:52:86:54:7d:3d:38:44:1c:c1:01:d6:8e:07:39:49:44:be:
9c:db:af:26:8e:a9:91:23:21:3a:6e:b3:63:5f:63:05:8a:95:
13:51:60:4d:e8:1f:1b:ce:90:d7:1f:54:68:4d:83:00:eb:a7:
d2:76:62:27:3a:5a:d2:fa:00:6a:a5:07:fc:0d:78:cc:2c:09:
69:8a:65:e3:76:9d:40:44:0e:e3:3c:8b:44:08:58:5e:b9:ad:
89:80:90:79:0e:62:8b:4e:4c:e0:30:7d:98:32:06:9f:dc:83:
1a:87:fb:d7:24:13:34:59:40:8e:89:5b:69:f3:67:cf:2c:16:
f9:19:27:16:2a:20:b3:2c:26:d8:9b:5d:2c:50:e7:97:b0:07:
1f:1d:0a:ef:fb:9d:4a:8f:59:85:49:cc:54:53:4b:ba:5f:f7:
c3:5e:3e:91:60:ad:30:04:84:95:57:98:40:6b:fb:2d:35:f4:
dd:20:41:1a:17:bb:eb:b7:ad:28:33:80:ef:b5:f8:a5:86:c9:
7e:8b:be:99:0e:04:ae:28:d8:52:c6:1e:a3:b0:0f:d0:cf:43:
6c:79:46:e7:7f:36:9d:27:e3:ca:27:40:77:e8:78:e7:24:ba:
7a:2c:39:0f:39:16:dc:8f:3f:3b:45:9c:54:a2:80:7e:19:41:
bc:26:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:37 2025 by rpki-client