Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: pcr7LNVZ2wkvOeGuP8Dx0vqLhkYAotGUulhhIzVceI0=
Subject key identifier: FC:C8:3C:75:2B:7E:C1:F1:38:4F:A4:9D:02:0E:D7:71:0F:BA:D5:CC
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 0197B6A19487DEA0B31E5A51A5A6486022B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: DssXYysqaN8tD/o/SSqHDuFJdopm+D9U1CuYPL9r+Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:94:87:de:a0:b3:1e:5a:51:a5:a6:48:60:22:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=fcc83c752b7ec1f1384fa49d020ed7710fbad5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:bd:25:db:4e:1a:34:ff:cd:f8:8c:d7:9e:
e5:f4:98:9f:75:dc:de:c7:d7:b0:65:5b:1f:06:0f:
db:ed:3d:b7:89:d8:c7:e3:43:1d:d2:c8:13:09:34:
c2:78:b9:6a:07:0f:c4:bd:1b:60:e0:4d:8e:62:9b:
81:fa:82:03:f1:5a:a0:8b:5b:c9:bf:2c:be:6d:fa:
59:d8:b7:8e:d8:f0:ae:07:81:53:ce:ad:ac:c1:d0:
48:37:7a:19:23:d2:fe:da:26:88:e1:82:0c:2f:74:
6d:79:4d:7f:da:99:f0:f7:f5:01:59:fd:7a:64:4a:
da:fb:41:dd:9e:f0:3d:f0:0c:45:fd:44:1f:80:a8:
7d:45:60:82:fd:2a:e1:2e:c7:7a:2a:59:d5:42:e4:
1a:48:35:3a:86:a5:49:00:6e:67:91:f8:cf:d0:32:
23:4e:e6:d5:88:77:2c:28:0d:0c:1d:94:01:76:26:
00:10:cd:28:ca:a6:c4:61:fb:68:af:b9:22:c0:e5:
74:22:10:f7:14:ef:ed:b2:0a:1c:43:7d:d1:f0:29:
c4:75:55:0c:6e:2c:f6:5f:01:19:de:cc:77:09:78:
8e:c9:40:f4:3f:f8:98:4e:f4:eb:0e:3e:f9:24:51:
94:41:1a:47:67:70:eb:da:64:ad:7f:eb:92:1e:0d:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C8:3C:75:2B:7E:C1:F1:38:4F:A4:9D:02:0E:D7:71:0F:BA:D5:CC
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:80:fc:21:96:77:a0:9c:d5:06:0a:fe:18:4e:4d:59:e0:61:
9c:f2:4e:3e:27:bb:47:30:22:bd:8f:3a:30:ba:de:8b:9a:e0:
67:06:71:5e:17:00:9e:a5:b0:37:01:86:af:30:f3:0c:86:ff:
79:eb:6c:ff:5d:b2:07:40:ac:66:8d:51:8a:67:0a:0f:12:2a:
dc:f2:e3:a4:8c:2f:c0:cc:9a:49:88:40:d5:0c:de:b4:e9:48:
28:ff:00:6d:a5:69:6c:87:f1:8f:94:32:dd:82:16:e9:28:4f:
c0:37:3e:ff:37:5d:9b:be:3b:d7:dd:31:8e:60:ae:59:e9:e4:
af:ea:11:0b:de:1b:32:22:48:5b:d9:51:63:d6:51:f1:7e:b7:
e2:1f:43:60:33:e7:7b:7b:96:ca:cd:0b:13:12:e6:09:f2:b4:
e8:0f:b1:ce:6e:0a:73:b0:98:9a:da:41:44:60:35:65:fc:b2:
5e:df:02:22:18:99:20:09:ca:df:c9:19:8c:f7:69:4b:7e:f4:
7e:d9:5e:2c:77:32:f1:e4:07:aa:95:51:df:95:aa:9b:c3:ca:
7f:03:2c:cb:a0:b4:bf:35:93:32:e4:bf:0f:cf:08:c8:99:02:
e5:ce:28:b0:45:6b:38:6d:53:e2:53:3b:c3:9d:2d:42:cd:a8:
4d:73:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:29:05 2025 by rpki-client