Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
File: rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft (raw, json)
Hash identifier: 3mA8D1p2Qs8kC6xB5uf9otL761EJ7nCp4BEyqsDFeM8=
Subject key identifier: F8:92:8F:16:11:F0:7C:02:8E:AE:0E:E0:92:94:5E:8D:4A:95:D4:5B
Authority key identifier: AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
Certificate issuer: /CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
Certificate serial: 0197C6138FE3018FDF3DFF7556C41D072931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
Manifest number: 0ABA
Signing time: Tue 01 Jul 2025 13:01:00 +0000
Manifest this update: Tue 01 Jul 2025 13:01:00 +0000
Manifest next update: Wed 02 Jul 2025 13:01:00 +0000
Files and hashes: 1: rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl (hash: UWL7NLS+nVCfHQa1cLHdqZqvtx13iTVGwwumWW87/GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:8f:e3:01:8f:df:3d:ff:75:56:c4:1d:07:29:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
Validity
Not Before: Jul 1 13:01:00 2025 GMT
Not After : Jul 2 13:01:00 2025 GMT
Subject: CN=f8928f1611f07c028eae0ee092945e8d4a95d45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:fa:ca:c1:5e:7b:c1:5c:4d:bb:d1:66:1f:
35:da:7f:da:29:ac:f0:94:07:4b:18:f1:91:51:cc:
6c:3a:ac:c9:90:e7:63:4e:c1:77:86:d2:8d:13:74:
4b:4c:fe:08:ce:50:e0:bb:fd:81:18:96:26:49:a2:
75:a1:6b:51:01:b2:22:a7:c2:41:8b:b3:cb:bd:e8:
8b:0d:b9:11:60:59:00:4c:fb:55:dc:ab:79:db:b4:
e1:c2:e3:59:8a:18:3c:b5:1b:bf:42:ac:2c:ce:ec:
50:90:6a:db:19:43:be:59:ee:a7:0a:52:62:d1:2c:
ff:75:03:27:16:0a:1c:ae:fb:27:4a:02:99:9d:47:
61:e1:76:60:fa:54:7f:9e:5f:1f:9b:3b:df:3f:d4:
fd:f0:11:9f:6f:54:85:68:67:c0:94:e0:7b:21:26:
ba:fa:54:3f:fa:23:57:a5:6b:11:97:ef:45:d9:0b:
80:3a:62:fa:61:30:fe:a0:00:51:0f:53:06:f2:d6:
22:9c:0a:a3:d5:a4:f3:de:b0:a0:9b:f5:c2:41:25:
78:53:c0:0b:25:3d:73:67:5a:84:1b:b8:a3:65:26:
20:30:15:07:96:d0:d0:7a:10:45:ff:32:bd:b5:76:
67:f8:8b:91:f2:71:71:2d:af:67:19:20:66:89:d5:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:92:8F:16:11:F0:7C:02:8E:AE:0E:E0:92:94:5E:8D:4A:95:D4:5B
X509v3 Authority Key Identifier:
keyid:AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a1:4d:15:5c:13:91:eb:e8:60:f5:a3:fd:0f:fe:dd:dd:6e:
0a:4e:0b:cb:10:4a:07:20:bb:8b:0a:b6:d3:9e:bb:6f:06:2e:
ab:d6:fd:18:97:73:4e:01:b0:ef:f5:95:fc:f4:88:30:51:44:
ee:b4:b9:bb:bc:e1:33:7c:df:9c:84:c6:11:15:36:be:71:2d:
1f:91:e3:80:b6:48:02:c9:32:ed:5b:29:43:e3:08:e3:33:85:
37:d2:f2:83:d4:c7:91:54:ee:a7:cc:2f:8d:04:2a:52:c3:dd:
ea:09:ae:1d:25:0a:b6:4a:ab:71:0f:9b:08:fa:f6:f1:c5:5e:
16:31:bf:b0:24:bd:98:31:ed:1c:7f:3f:16:65:14:6f:a6:16:
c1:4d:1b:30:43:80:b7:4b:62:10:d9:e6:73:db:05:4c:2d:2a:
5a:43:de:be:02:5d:8b:a5:65:af:3f:07:ca:56:e4:a5:4d:c0:
a6:c5:8c:66:10:ff:39:56:a1:18:da:60:71:17:23:50:2c:86:
33:78:0d:f2:3b:09:6b:08:a9:6d:cd:a4:f2:93:45:42:23:23:
5a:1d:34:f8:96:87:fd:9a:3e:cb:00:09:a6:9c:59:b4:ba:1b:
68:48:4a:09:7f:c4:45:e6:20:6c:ab:8f:05:03:84:d9:3c:cf:
c8:cc:2b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:09:00 2025 by rpki-client