Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: lbIfFcwiJ5Yf5ks4dF+yka0sdYF8hALGQSn1JfiPOqs=
Subject key identifier: B8:95:05:57:56:35:E1:91:B9:1B:EA:54:9F:7E:4B:0E:9B:C6:25:72
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 0197B5FBD05044185529CD9DDD5292735E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 1246
Signing time: Sat 28 Jun 2025 10:01:08 +0000
Manifest this update: Sat 28 Jun 2025 10:01:08 +0000
Manifest next update: Sun 29 Jun 2025 10:01:08 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: 64xVn9jOiQ+cFCK/sVSCXqG6/V+7A4MT6nhzXuKKl6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:d0:50:44:18:55:29:cd:9d:dd:52:92:73:5e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Jun 28 10:01:08 2025 GMT
Not After : Jun 29 10:01:08 2025 GMT
Subject: CN=b89505575635e191b91bea549f7e4b0e9bc62572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:b9:18:f2:56:88:76:d2:5f:1a:65:03:ca:
be:76:55:06:a5:56:63:80:38:8e:dc:cc:e3:59:42:
73:1a:a4:9f:ff:92:f0:a8:92:fb:d6:d0:77:9b:81:
55:e4:32:18:16:45:0a:d0:9d:30:0e:7c:61:35:3d:
bd:7b:65:53:2e:7c:7b:07:0b:cc:59:14:32:d4:f2:
b7:5f:9d:1b:13:b6:64:30:e0:33:52:10:d5:d8:b9:
af:45:03:98:d1:c1:d0:3f:fc:03:bf:cc:45:49:3d:
f9:e0:e4:8c:00:cf:43:8d:c3:e0:27:af:27:b9:fa:
53:1a:07:43:5a:2f:52:aa:b6:22:af:07:71:23:82:
78:96:04:9c:56:e4:87:43:82:62:6b:bb:56:0f:79:
ce:27:be:73:9a:85:36:f4:7e:aa:cc:2d:5b:55:b0:
30:9d:fe:b5:e7:62:db:93:8c:2b:f5:55:4d:3d:75:
b2:c8:02:29:5b:c8:e4:c6:a5:99:24:34:7a:26:f5:
32:ff:c9:c2:7b:24:d5:40:90:53:d9:35:4c:3e:26:
61:f9:a3:f5:e0:b6:38:c2:d7:8e:39:8d:91:95:5d:
32:15:31:ff:16:af:95:18:cc:fc:6c:52:88:69:b2:
9a:ad:b2:ae:86:88:ef:ef:f8:52:a8:f4:7d:07:0c:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:05:57:56:35:E1:91:B9:1B:EA:54:9F:7E:4B:0E:9B:C6:25:72
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f8:50:18:61:c0:83:65:d1:23:f9:09:d3:fc:84:9f:4c:9a:
2c:d3:ed:d9:f6:5c:75:f8:3a:45:77:6f:e0:ec:65:bb:fe:08:
a5:a9:02:16:db:70:23:f5:89:d7:c9:21:05:09:d3:3d:56:72:
27:3b:b9:ae:ef:fe:fe:dc:10:0c:d6:08:25:0c:c3:61:5b:96:
ce:1f:e3:40:b1:e2:89:45:90:15:f1:14:f1:ad:6f:7e:0b:cc:
b1:aa:84:80:e9:dc:c7:53:54:22:8b:75:cc:90:80:41:dc:26:
a1:e4:2a:dc:75:cb:01:b7:46:e4:19:37:1f:f6:c2:b5:10:8e:
5b:94:a4:38:2a:e8:20:16:9b:53:d3:91:d8:0a:1e:17:dc:5c:
d2:bc:dd:9d:6a:02:cd:ce:be:71:9b:6a:44:c5:6d:d1:d3:13:
4f:15:b6:12:38:42:69:c4:10:2c:09:6d:dd:69:8a:02:2d:c8:
be:5d:f1:33:41:35:98:2e:e5:a1:ab:83:58:d4:f4:ec:86:64:
5b:a9:3b:5e:59:b9:59:cc:31:a1:e7:a8:8f:1b:28:1a:3c:8c:
af:0c:ab:de:59:60:62:14:78:6e:f3:d9:46:9a:39:3a:db:23:
76:66:3c:68:05:6a:f1:3a:f9:b4:11:67:57:b6:47:2c:ff:06:
0a:5a:ef:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:35 2025 by rpki-client