Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json)
Hash identifier: CwMy9PJOniU7xhE6wLcP5bGIZyXes4LFgNqcZGl8xwM=
Subject key identifier: 8A:D1:B7:1C:E3:D4:AC:69:94:9C:83:E7:E1:27:7A:35:12:A3:78:EC
Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1
Certificate serial: 0197B933B572F85C9F2E5D40CB0CD54B0928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
Manifest number: 1438
Signing time: Sun 29 Jun 2025 01:01:03 +0000
Manifest this update: Sun 29 Jun 2025 01:01:03 +0000
Manifest next update: Mon 30 Jun 2025 01:01:03 +0000
Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: CRr+PlOdGnyxnXK9ZiK4lR3TJ7SnP7TovaRcDOf5TeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:b5:72:f8:5c:9f:2e:5d:40:cb:0c:d5:4b:09:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1
Validity
Not Before: Jun 29 01:01:03 2025 GMT
Not After : Jun 30 01:01:03 2025 GMT
Subject: CN=8ad1b71ce3d4ac69949c83e7e1277a3512a378ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:08:fe:92:39:79:15:c7:ba:cd:67:aa:d0:
1f:c1:37:16:fc:97:38:d3:73:4e:06:c2:f4:7a:8a:
59:91:34:ec:5a:d4:d3:ad:07:11:dc:c8:eb:d2:22:
91:66:97:4d:32:e9:8e:aa:2d:6d:e0:1c:35:45:0d:
b0:1e:4f:4b:21:53:4c:04:ce:8f:d0:78:03:b6:12:
56:b3:e3:06:a0:57:cd:25:19:53:6f:65:7d:fc:25:
fd:ae:e7:de:12:83:fb:f8:e1:09:85:db:d0:cf:7a:
bf:bd:42:56:78:a8:ab:da:69:be:aa:2c:ca:05:46:
46:c9:f1:d0:8a:89:de:5e:c5:b3:dd:63:fc:4a:e7:
de:59:98:a0:94:08:e9:0d:52:be:7a:e7:70:8e:03:
b0:b1:99:a3:1d:bb:b7:1d:a4:e2:84:61:95:8c:63:
78:fc:e6:91:f6:db:59:a9:80:2e:58:d4:fb:f5:6a:
5f:1d:cc:1d:46:2b:e8:ec:ee:50:ca:f7:3b:f4:ca:
57:b1:15:d7:ee:dc:ba:a7:b7:89:63:24:dd:d7:cb:
b3:e3:c0:ac:63:f4:17:00:ff:c1:bf:ef:5b:9c:1e:
38:4a:06:dc:2c:6a:77:0d:b5:c1:04:ae:4f:6a:f6:
2a:43:14:78:f8:81:89:3f:53:07:37:5a:6c:36:90:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D1:B7:1C:E3:D4:AC:69:94:9C:83:E7:E1:27:7A:35:12:A3:78:EC
X509v3 Authority Key Identifier:
keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bd:13:36:13:f0:a3:2a:4e:59:6c:aa:4c:26:2a:8b:e6:8c:
5f:31:1a:e5:f1:c7:07:81:25:15:f7:e9:5b:1d:7d:07:b3:75:
f5:41:04:7a:1c:67:92:1e:43:3c:7d:9e:6c:39:10:ad:a3:ee:
36:25:0b:b4:f2:e1:97:82:66:ed:38:0e:d6:d2:f2:0c:9d:cb:
02:79:ab:c4:69:51:9a:52:6a:81:19:1b:8d:27:65:f6:1a:ab:
0c:b0:95:03:e3:32:24:3b:a5:36:d9:31:7d:f6:1b:b8:89:98:
96:bf:e0:b3:2f:50:99:ea:5f:3e:14:15:17:1d:e9:d3:dd:67:
d6:15:bf:6b:7c:50:a6:c9:b3:51:4f:21:cc:be:47:d5:b4:d5:
8e:cb:d5:d9:04:9c:92:28:89:57:25:4d:0a:71:ad:01:8e:83:
c0:6b:d3:84:28:cc:02:a0:fb:18:36:12:dd:ce:1a:9e:f0:d4:
af:3d:e3:5d:10:96:84:64:7e:97:cd:59:4a:4c:5c:70:52:27:
97:a2:a6:07:2b:c3:bc:30:74:fb:9e:ab:c3:f0:f0:c9:2d:21:
78:fe:df:4f:90:73:ba:9a:f8:e0:95:08:58:d7:17:ce:21:e0:
83:76:b1:92:65:5e:94:bf:56:21:d7:2c:7d:51:86:96:73:62:
57:d6:33:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:19:13 2025 by rpki-client