Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
File: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft (raw, json)
Hash identifier: gkTtleRT7ea08NFaF4wMEC88PQVjPXeVc7vwb103h88=
Subject key identifier: 7B:0E:65:8D:14:82:9A:81:F8:95:47:20:CD:02:05:82:15:71:21:74
Authority key identifier: 46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99
Certificate issuer: /CN=466cfa4f8847f1561b55971670165c0e68b62799
Certificate serial: 0197B77C4C6585B47856EFAF12994D2D3623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
Manifest number: 0A02
Signing time: Sat 28 Jun 2025 17:01:05 +0000
Manifest this update: Sat 28 Jun 2025 17:01:05 +0000
Manifest next update: Sun 29 Jun 2025 17:01:05 +0000
Files and hashes: 1: Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl (hash: uy1Kw1UPFrFF0xW6ynue/SuAsYIPh+6/QTUjGmNFOfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4c:65:85:b4:78:56:ef:af:12:99:4d:2d:36:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466cfa4f8847f1561b55971670165c0e68b62799
Validity
Not Before: Jun 28 17:01:05 2025 GMT
Not After : Jun 29 17:01:05 2025 GMT
Subject: CN=7b0e658d14829a81f8954720cd02058215712174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:a7:8e:ff:5a:07:48:38:2d:2f:cd:aa:c5:
c6:c8:01:b6:a9:28:41:02:1b:6c:d1:c2:d2:0c:2f:
a0:dc:b5:53:12:47:fe:cb:7f:a5:b9:63:d3:86:21:
3e:06:c4:ee:28:61:89:6e:77:7d:98:0a:26:81:bb:
38:09:12:bb:3e:0e:59:4c:5a:72:ef:52:75:7f:5d:
be:f9:93:30:f8:f0:19:17:1e:4b:b6:68:8f:1a:80:
00:a5:a1:35:a4:7f:33:88:bb:0d:a1:de:5c:9d:7a:
24:8f:d5:bf:88:08:31:6e:4f:ea:17:17:0f:8a:9d:
7a:18:00:98:6c:bc:01:4d:da:2c:af:b9:86:5e:4a:
7a:06:e7:9d:be:8b:0f:3d:9b:f5:d5:d3:65:e2:2d:
da:9b:5a:f3:2b:4d:68:8f:c1:4b:8e:5c:dc:7c:5c:
31:18:3a:03:d0:e7:a1:a0:40:c9:f5:65:5d:8b:12:
56:a8:e2:8d:04:15:2a:98:0b:04:46:87:dd:31:e0:
cc:40:26:46:9c:42:97:99:2b:32:fb:ab:27:e7:c7:
43:6b:1b:aa:88:3c:13:6c:b1:96:69:28:50:53:57:
9f:91:8a:ec:96:d2:60:86:02:9c:11:80:90:ee:cd:
22:5e:d7:b0:06:d4:96:6f:ca:c3:1f:51:76:a6:40:
3f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:65:8D:14:82:9A:81:F8:95:47:20:CD:02:05:82:15:71:21:74
X509v3 Authority Key Identifier:
keyid:46:6C:FA:4F:88:47:F1:56:1B:55:97:16:70:16:5C:0E:68:B6:27:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/504ffa-2905-4785-9291-5b11bb179a8b/1/Rmz6T4hH8VYbVZcWcBZcDmi2J5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6b:f6:bd:ca:d3:9d:e5:9f:4f:84:01:19:f9:ba:83:7b:52:
6a:56:6c:1f:fe:32:ee:94:c8:ee:48:fe:6f:33:5a:4b:06:a3:
d2:2a:7f:f5:f5:1c:69:b9:23:98:52:30:ae:59:ef:c3:65:a8:
50:d8:01:81:7d:b2:dc:f5:d0:ab:2a:05:1d:a6:ec:58:42:5f:
42:d1:ab:4b:e9:c6:95:67:c4:3b:4d:ea:02:db:8d:46:b1:79:
00:07:ed:e9:07:4e:69:16:e6:70:8e:9b:f2:59:45:89:70:a6:
87:f9:36:92:e3:83:6e:1f:8d:b0:e5:b7:3e:ce:46:9a:4c:d1:
4d:7b:3a:dd:01:dc:37:e1:f9:c1:1e:14:25:53:e0:3c:4d:41:
20:64:73:da:fa:5d:4f:ef:fd:22:ac:7a:6a:65:38:57:04:b0:
90:19:53:b3:89:a8:08:13:64:47:79:b3:74:37:2d:a0:4c:fe:
0c:a1:01:e6:a9:e1:a8:6c:21:d1:0c:45:20:15:4c:be:6f:9d:
1f:ac:da:96:f9:84:ba:4b:9c:f4:e3:05:03:2b:f1:8c:8d:cf:
cb:a2:fb:0a:8c:ea:eb:9b:2c:3c:ca:45:f3:63:9a:f9:f3:fa:
8b:77:f8:8d:e9:27:c9:b1:ea:ed:8f:b9:5b:26:31:8d:d9:45:
4f:85:84:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:58 2025 by rpki-client