Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
File: 20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json)
Hash identifier: sI6593GiVWUnHGHah42SyZ4Cf+nV9kXSa3VUNhYvMI0=
Subject key identifier: BC:48:BD:27:2F:51:BD:42:34:0D:F3:BE:A2:D3:16:8F:13:C5:91:BF
Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
Certificate issuer: /CN=db488163daf50db646de4df24d34cbac993f457f
Certificate serial: 0198D5BB9A319D9127496066B9E3A8BF6775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: WhMI7JxBhWJEC3rrueetaQSmWLjUDn6+xN8zI/fl5cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9a:31:9d:91:27:49:60:66:b9:e3:a8:bf:67:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db488163daf50db646de4df24d34cbac993f457f
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=bc48bd272f51bd42340df3bea2d3168f13c591bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:13:79:94:38:91:4d:62:9f:e1:02:b2:1c:
1b:c1:46:b0:0c:bb:52:34:90:ea:05:98:16:a4:6b:
e1:d4:b2:de:04:6d:6d:6c:0b:b2:f8:d0:60:7d:52:
a1:71:49:5c:c7:b4:43:7c:c0:55:a9:99:d6:f5:ee:
23:c1:63:12:15:dc:02:56:be:ac:d4:c0:a4:b9:1d:
e3:4b:71:7f:99:c2:16:c9:aa:45:40:85:cd:61:36:
83:65:e8:e0:7c:5e:f5:63:40:a0:f2:53:85:2e:91:
7b:fd:76:e2:03:3a:a2:a7:3c:80:51:fd:4a:ee:6b:
71:cf:48:5c:e4:d8:df:6e:be:91:ca:99:7b:df:48:
99:6f:02:72:73:cb:c2:e6:eb:9b:f7:26:0b:74:11:
92:3a:fb:24:0c:cb:52:28:70:bb:ea:f9:a8:12:c4:
67:5d:65:0b:b9:ab:0a:a4:eb:f2:c9:90:7f:bb:2e:
dd:39:64:3d:e3:64:e7:c1:98:ee:0e:b4:eb:6c:e2:
56:b5:26:96:89:7c:10:4b:0a:70:77:7b:71:df:b4:
42:88:81:a5:2d:29:cb:52:fc:45:29:fc:0a:8a:55:
b1:19:22:8c:c3:a6:ea:a9:e4:c6:7e:40:8d:b2:08:
27:11:9b:ce:5a:5c:b9:c5:70:22:42:23:99:f1:d4:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:48:BD:27:2F:51:BD:42:34:0D:F3:BE:A2:D3:16:8F:13:C5:91:BF
X509v3 Authority Key Identifier:
keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4b:f2:fb:a0:16:1b:38:bc:15:44:30:4b:7b:f9:11:fd:98:
1f:6e:1b:a6:cf:5d:48:40:3d:89:e2:cf:4f:b0:e8:15:46:8c:
f2:55:ac:c6:dc:55:8b:6a:1d:2f:ff:7b:22:59:51:bb:d1:5c:
9b:52:01:e5:2a:71:ce:be:0c:fa:53:44:d5:b8:c8:82:ee:b3:
db:c1:54:d6:fa:b9:53:a6:31:6e:0f:6f:53:5a:0b:37:80:99:
6d:6a:bb:d8:03:42:dd:36:c9:d8:58:56:e5:7a:b2:42:ee:c8:
bb:9f:90:0a:c3:e2:cd:36:16:94:81:ba:10:6e:89:03:8b:83:
eb:fc:23:f3:f6:62:d7:6e:ec:3f:41:e4:dc:82:81:01:76:bc:
af:de:b4:5b:c9:ef:3a:da:34:f2:7f:23:5c:a8:b7:c9:9b:3d:
1e:92:a0:12:ec:37:75:9a:7c:37:84:6d:98:ab:8a:fc:be:14:
dc:62:8c:18:18:d7:9c:e4:b6:d9:02:1c:99:48:d3:4b:84:96:
a0:29:85:51:d0:b8:fb:9c:29:38:91:90:94:fc:db:37:86:9d:
0c:e1:e6:f8:de:11:74:02:0a:dc:25:65:41:62:a6:fe:48:15:
66:64:bd:3c:9c:44:b2:ef:0c:ec:15:41:2a:13:36:70:46:02:
47:a7:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:51 2025 by rpki-client