Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: 2vPOU5zELKJ6PB97feNYFi1SnPQLK5DJSmRuThzfYdc=
Subject key identifier: 63:08:51:F9:7E:30:ED:5E:A4:FF:03:B3:B1:C8:BB:4B:72:E0:AA:32
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 0197B88F9A284E14DF0C44FA3A1F135F2264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:01:48 +0000
Manifest this update: Sat 28 Jun 2025 22:01:48 +0000
Manifest next update: Sun 29 Jun 2025 22:01:48 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: 8fyx9bszsUNUevCXhm7XnK2vQnFBi3uGNvgwWf7TNJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:9a:28:4e:14:df:0c:44:fa:3a:1f:13:5f:22:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Jun 28 22:01:48 2025 GMT
Not After : Jun 29 22:01:48 2025 GMT
Subject: CN=630851f97e30ed5ea4ff03b3b1c8bb4b72e0aa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:61:ff:7d:4c:9a:9c:d3:2b:52:e9:14:c6:
50:dd:b4:3f:b7:79:fc:be:1b:d3:af:e0:60:84:cb:
16:75:04:33:dc:0d:c4:e7:cd:fc:e2:98:e1:01:1c:
cb:65:5e:cf:cc:09:b8:99:fb:8a:23:5a:5b:95:c8:
f7:b5:31:16:89:a7:57:8f:f5:6b:0d:d9:14:c6:69:
54:f8:87:dd:bb:5d:2d:3e:04:c5:f0:eb:c4:87:e9:
ac:e2:b4:f0:d9:90:6f:c6:0a:8d:99:db:01:c3:25:
f9:cb:ba:8e:c0:1f:d3:60:1a:b6:7f:83:ed:58:6b:
13:e1:25:67:f1:bd:0c:3f:67:c7:0b:95:a6:66:ac:
6b:fa:f4:b6:e3:e7:86:71:f6:cb:ca:36:be:96:da:
49:c0:53:6d:93:ba:cd:1e:b7:95:bc:04:7d:2d:b1:
d6:9e:67:50:0f:7f:97:1a:ea:53:67:ca:22:62:46:
06:b2:0e:02:d2:10:c1:48:1d:39:42:1f:ac:3e:b8:
25:61:51:2f:51:94:ec:d9:c6:19:60:9d:ab:c2:71:
e6:b1:e4:d5:f5:25:f6:2c:e1:8a:b5:6f:f4:ca:54:
25:55:8d:57:b2:90:f7:0f:d0:30:5f:58:eb:77:22:
87:4b:5e:3f:21:e0:cb:8d:fc:a5:eb:6b:b7:77:9b:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:08:51:F9:7E:30:ED:5E:A4:FF:03:B3:B1:C8:BB:4B:72:E0:AA:32
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ad:8b:5d:19:14:80:e4:1b:9a:c7:ad:bc:a4:2b:1e:01:f3:
ef:da:db:60:c4:ce:c8:67:94:95:2f:53:d0:e7:b5:01:55:e9:
f1:c8:d5:1c:47:28:f5:62:ff:df:a5:22:8b:09:62:68:91:01:
ca:ba:79:28:57:af:8c:9d:3d:fe:be:a8:1d:b5:7d:43:0a:98:
3f:93:e1:5d:5e:6e:07:32:f9:72:11:1e:18:da:9c:1d:01:f1:
e6:13:ca:63:b5:ce:83:73:52:8e:69:ac:2d:21:22:5b:b1:d8:
e7:21:70:73:66:ea:ac:36:4f:0f:32:7e:c0:c3:99:75:7b:f5:
2a:72:2d:58:ab:5f:45:bc:28:db:81:e0:6b:79:dd:bb:09:43:
3f:25:bc:71:fb:16:c4:01:72:56:ae:cf:58:e3:df:f7:51:ee:
a6:27:c9:c4:c6:20:f8:36:c3:92:7d:05:72:02:f0:92:cc:3b:
30:4c:ae:e1:9a:08:64:de:16:d2:91:f0:47:45:d5:6a:b8:6c:
cc:dc:b6:bd:cc:71:7a:a4:8a:54:a0:22:8d:66:25:0c:65:c7:
37:4f:7f:3f:1a:74:b1:8d:ef:bc:56:ba:f0:ba:cb:0e:3d:b2:
3d:cd:f5:cb:c7:af:85:e5:a5:21:1e:b2:fe:16:e3:e4:d4:e1:
2e:70:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:05:31 2025 by rpki-client