Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier: wvPR3gatxGk8Y1do77qi4X0Pi7QCLjkjKHWb2zOs+2s=
Subject key identifier: 51:59:71:8D:04:22:F9:1F:E1:6F:D0:54:34:79:75:47:1F:26:11:20
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial: 0197B8210DAF9595A3C1B507747EF66E3A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number: 0325
Signing time: Sat 28 Jun 2025 20:01:03 +0000
Manifest this update: Sat 28 Jun 2025 20:01:03 +0000
Manifest next update: Sun 29 Jun 2025 20:01:03 +0000
Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: 3mf3Kx/P9Z2QkVg3Pmi6cwZalyXScZPDkPRs2yuwiC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0d:af:95:95:a3:c1:b5:07:74:7e:f6:6e:3a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Validity
Not Before: Jun 28 20:01:03 2025 GMT
Not After : Jun 29 20:01:03 2025 GMT
Subject: CN=5159718d0422f91fe16fd054347975471f261120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:dc:a7:79:6c:85:de:59:d8:9d:dd:eb:71:
a8:75:71:74:bf:70:57:be:1a:d1:bc:d6:d8:cc:0a:
1f:d8:6c:38:2e:45:75:bc:ec:da:20:9a:27:00:1a:
23:0d:59:31:34:e4:c4:e1:06:d4:87:90:44:16:7b:
28:19:0f:f8:d9:91:0f:fd:99:d1:6f:a6:7d:47:99:
76:b1:87:38:e8:f5:6b:47:fb:ed:30:a7:1a:7d:b1:
e8:20:ee:e3:18:54:c7:98:09:8e:5f:e8:58:fe:2a:
26:61:da:d5:81:b1:74:6e:ff:6d:27:43:34:d9:c1:
53:70:af:55:ff:c5:1b:02:d7:e2:29:50:b4:71:15:
90:58:d7:6b:3f:b7:d0:ee:df:2d:14:8c:3a:cc:2c:
8c:41:a6:51:0d:9b:dc:80:0e:85:63:36:f1:c7:a7:
d7:28:13:a6:fe:6a:a3:dc:88:3d:eb:72:da:5a:df:
7c:b0:93:31:86:ae:36:63:57:2d:5d:69:42:7e:36:
28:fd:90:2d:75:8d:d4:7d:1e:59:2a:87:5d:c1:b2:
20:30:69:62:bd:52:95:9a:9b:18:b1:70:b6:82:6d:
01:12:6e:bf:1f:5e:a8:75:3d:ee:18:86:31:9a:74:
7d:70:02:08:05:de:73:c2:aa:71:f4:21:d1:89:8e:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:59:71:8D:04:22:F9:1F:E1:6F:D0:54:34:79:75:47:1F:26:11:20
X509v3 Authority Key Identifier:
keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ca:24:e7:1e:7a:5d:79:eb:cb:ef:90:85:71:00:82:dd:e5:
63:c6:af:86:95:c4:03:ce:f1:f8:ca:0f:9d:ed:01:6d:00:47:
3d:2b:69:05:0e:65:8c:72:01:f6:98:e2:f0:fb:1f:8b:ce:c6:
04:f7:1e:3b:f0:80:eb:4a:59:fe:05:06:2f:b1:a3:d0:a7:9d:
33:57:ed:36:7e:55:50:9d:bd:41:3e:f4:a1:5d:1e:b0:de:c6:
82:53:cb:65:d1:d1:60:a3:d5:ed:67:15:b6:e2:79:42:d6:de:
7c:eb:db:cc:fd:ef:c1:d8:a3:74:b4:5c:55:14:c8:7d:b2:2d:
da:62:8a:23:7c:30:3d:2f:1c:e5:00:46:a3:80:de:c4:27:5f:
07:3d:ac:8c:66:4f:02:6a:2d:da:29:f0:c3:e5:e6:94:bc:8e:
2f:6f:11:c9:85:df:83:e6:02:e1:4f:74:77:ea:bc:04:71:fa:
cf:ee:b8:f5:32:f3:33:65:42:50:8e:53:2f:c2:e7:d9:fb:e6:
64:15:25:3b:54:30:37:3f:db:dc:c5:1b:33:21:83:a5:1e:38:
c7:2e:e2:53:41:8d:88:94:37:f8:b0:4f:c7:a0:bd:f0:20:fc:
47:30:b4:bb:02:64:2a:01:0b:a9:4a:51:82:e6:d9:5f:2f:16:
bb:be:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:20 2025 by rpki-client