Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier: LC9zNgXAcEWFccVB6D3N9Q+Ltic22rMpkEifIIFePUw=
Subject key identifier: CD:0B:18:A5:EB:1F:A8:93:2C:63:27:73:21:AF:B1:FE:E4:FF:CB:4A
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial: 0197B70EE355F0A230F618B01B7E1165BD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: 8OmHjaERCpXsVtk95dNkyzYP+GGCoLQwMuYheTjdRPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e3:55:f0:a2:30:f6:18:b0:1b:7e:11:65:bd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=cd0b18a5eb1fa8932c63277321afb1fee4ffcb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:02:d5:03:67:0c:bc:82:44:98:59:a0:3b:
82:04:fb:cf:32:12:99:a2:d3:d5:4e:71:dd:88:80:
9f:79:7d:da:14:fd:b6:e9:e9:f4:ec:ae:fb:a0:04:
50:e2:41:82:7a:b8:e0:4a:e9:86:d0:79:e3:54:5e:
fc:d8:0f:e9:44:80:d5:bf:60:4b:2e:df:e9:ab:a3:
68:ac:93:72:b7:04:4d:c1:5d:f9:23:ba:6c:11:cc:
a8:21:3c:66:1b:94:db:b8:eb:9e:8a:78:d4:5a:1d:
87:ac:ed:73:cb:a9:a3:5b:e0:e2:ff:c5:92:d6:79:
d5:c0:cd:e5:61:b0:8c:40:6c:00:28:80:6b:13:b7:
b0:e6:14:69:2f:e7:62:a3:ce:e7:07:e3:77:ff:c9:
a5:a0:f9:86:74:ab:62:05:4d:aa:f5:dd:0b:15:f5:
81:ab:2a:67:40:df:ae:23:05:25:e9:07:75:ee:08:
a4:5c:de:fe:ff:67:0c:86:11:6a:35:0e:a7:17:6d:
a8:93:d6:6d:78:e2:14:9b:01:5e:09:d1:2b:03:19:
69:63:52:d7:8f:94:52:2b:87:82:7d:73:d8:65:4a:
44:35:8e:84:c5:c2:97:b2:08:89:98:a7:95:53:9e:
37:22:27:75:25:cc:c7:75:69:e5:99:1a:3a:10:61:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0B:18:A5:EB:1F:A8:93:2C:63:27:73:21:AF:B1:FE:E4:FF:CB:4A
X509v3 Authority Key Identifier:
keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cc:a1:25:42:2c:99:59:07:91:7b:66:9c:41:01:01:b6:16:
4f:9c:1d:6d:0f:20:09:3e:7d:09:79:96:3e:b7:82:b0:81:3d:
a1:db:57:87:13:d6:35:66:7a:81:d0:1a:ea:bd:20:d5:d8:56:
de:85:d9:98:96:2f:3b:02:c9:6a:ab:4e:e7:76:2a:db:14:1c:
55:36:08:4e:4f:bc:b0:3f:c9:ea:c7:a0:ca:77:73:49:b7:dd:
5c:af:8d:2a:71:fa:49:ef:90:e9:42:23:34:59:a0:b5:87:4c:
02:18:a0:08:61:71:0b:f7:c5:cb:e6:8f:22:f0:1d:51:78:e2:
e3:1e:16:27:79:92:ea:fa:c8:87:0f:e8:a1:4e:63:b3:87:c2:
96:12:1f:f3:a5:23:01:32:a8:11:45:f4:26:b3:47:6b:46:f0:
ce:9c:07:03:14:8b:6e:da:d5:45:e6:de:85:3d:0e:92:8e:78:
c9:f2:c8:83:10:4d:d0:c1:94:a5:72:03:8d:b9:31:15:1d:db:
58:ff:b5:87:ab:ed:8e:70:e5:3f:61:a6:b6:90:12:59:2b:5b:
38:0d:3a:92:7e:b3:70:45:53:cc:d1:9c:c3:a7:30:fd:86:37:
23:fe:dd:ee:42:3f:93:14:43:1f:02:c5:14:da:40:90:c9:16:
a5:ff:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:34 2025 by rpki-client