Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
File: r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json)
Hash identifier: tmUjL4n9mEClErD/XbVa1cjBAFzKe2fzuVgmXRAA7ww=
Subject key identifier: 1B:8D:C2:6B:B3:69:B3:57:AF:61:FF:2E:63:8B:C7:08:1C:7F:A0:E1
Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
Certificate issuer: /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Certificate serial: 0197B6A0EDDBACB7FF4A92DE8BBB8745DCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
Manifest number: 08E7
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: DrCsQdaeeN/1iw0DcPu7PUOGnMhNAzstTAkf6l/sJ6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ed:db:ac:b7:ff:4a:92:de:8b:bb:87:45:dc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=1b8dc26bb369b357af61ff2e638bc7081c7fa0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:c4:15:5e:b3:a5:97:c8:30:28:03:c8:0f:
f5:69:39:50:21:79:a9:66:58:29:64:20:c6:a3:a2:
b3:f2:68:1d:0e:83:de:cf:10:b5:e1:81:9d:85:5e:
38:66:70:01:0a:61:2f:44:db:4f:10:4a:f6:eb:2a:
d9:1c:47:9f:d5:91:ff:bc:3f:8c:04:f4:6d:6e:2f:
45:05:f9:6f:87:74:76:26:0b:3f:40:ae:3d:d5:e3:
e8:15:2a:73:d0:e4:b3:37:bc:22:e1:8f:1c:d7:11:
75:9b:bc:11:70:6d:ba:3c:7a:f5:f9:ac:67:50:b8:
33:e7:fc:96:fb:07:03:a2:03:b2:8a:ce:aa:2c:ed:
15:58:c8:20:e6:2f:75:84:44:25:6c:02:f5:3b:40:
17:17:65:15:6a:07:54:cd:3e:70:e4:2c:5b:b6:53:
a1:1a:f5:7a:89:6f:23:71:5d:9e:00:65:25:fd:7f:
33:b1:86:80:1a:30:1a:59:c5:b2:2d:cc:70:25:84:
d5:7e:76:90:a4:f5:4a:74:35:4a:97:87:e7:14:72:
d2:d0:79:58:32:84:a6:f5:75:64:63:49:bd:37:23:
76:70:9e:8d:c0:cc:16:9c:a8:9e:b1:1a:72:12:e7:
40:d7:42:e1:fb:50:3a:48:23:45:4c:c6:6a:8e:51:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8D:C2:6B:B3:69:B3:57:AF:61:FF:2E:63:8B:C7:08:1C:7F:A0:E1
X509v3 Authority Key Identifier:
keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:10:89:62:39:da:70:98:29:f6:4d:e5:d3:e4:4e:a5:a4:0a:
4f:6e:7c:57:dc:de:3a:cc:a7:b9:ad:3b:81:4d:17:06:38:1a:
fa:8c:b4:c4:e2:8d:d2:45:ab:d3:4b:36:71:d2:c0:74:40:33:
4f:39:f5:12:b5:20:9e:95:bc:e0:a5:ad:fd:4b:7a:81:ae:02:
3d:d3:ab:f7:67:44:77:87:14:a8:f6:b6:51:91:fc:7d:91:a1:
3a:35:92:83:1b:c8:3d:6c:a0:67:26:e9:2e:25:c9:06:9e:a6:
27:71:85:95:8d:21:4f:ac:c5:83:f7:f5:ab:e2:ac:b2:ab:3b:
70:b6:f7:3f:bd:21:e1:be:36:77:04:0c:69:a3:19:04:f1:d8:
76:3c:7f:39:43:33:b2:44:b3:64:9b:57:33:14:4e:93:36:82:
f2:ba:d6:d5:d1:e2:aa:16:4f:31:9e:7f:f6:48:e2:b2:06:43:
8c:7a:10:b6:f7:6b:8b:6f:5a:b3:f6:3c:6d:15:82:77:4a:85:
ef:01:58:93:4b:82:cc:55:2c:e7:17:8f:c9:8d:bd:6e:08:78:
61:0e:ec:c0:06:89:da:69:f8:7b:23:0e:06:af:a0:f5:2c:2c:
62:ff:92:e9:7c:27:2f:80:3a:fe:6d:e4:e6:3d:ad:80:1b:b0:
db:96:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:28 2025 by rpki-client