Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File: RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier: PYGqOaH2KpCXtAoyO0e/xfeKpJ4etzonsZ6RTFj6vHU=
Subject key identifier: 42:5C:B0:45:36:85:6F:39:BF:41:E9:B2:EF:8C:0F:D7:37:3F:FF:57
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 0197B632DF5C2955190DEC0956AD4F015557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number: 0CAA
Signing time: Sat 28 Jun 2025 11:01:16 +0000
Manifest this update: Sat 28 Jun 2025 11:01:16 +0000
Manifest next update: Sun 29 Jun 2025 11:01:16 +0000
Files and hashes: 1: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: +q4s/tIZnmWZAdY1BSf/CiKjMnqHk12VxwyzG3/yN1g=)
2: egGTR94gsD7sQAhG3KJ4vP9O6xI.roa (hash: U5VvDZubZFCpTXi93NWnw4hGkgnoWx3BFWnLjsNRwko=)
3: iZoqGkHfTscgkTRCL_nQYe_AAg4.roa (hash: gZNhRS+asEm9YEfETKtD9xHhALpBNhQLktZUScrlo6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:df:5c:29:55:19:0d:ec:09:56:ad:4f:01:55:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Jun 28 11:01:16 2025 GMT
Not After : Jun 29 11:01:16 2025 GMT
Subject: CN=425cb04536856f39bf41e9b2ef8c0fd7373fff57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:3e:a9:4c:d3:c4:a2:ca:4d:47:45:40:d1:
bf:33:0c:2d:65:d7:6e:8e:35:ff:24:65:7e:90:46:
61:37:9f:ab:c2:5a:2a:ba:ed:85:3f:8e:46:bc:aa:
73:81:53:01:d3:9a:36:05:1f:66:87:fa:5b:f0:aa:
f9:d9:83:5a:ba:a6:9c:d6:49:a1:72:9f:11:b8:14:
f9:a5:46:66:83:e1:01:e9:80:d2:55:79:13:3b:2d:
72:28:47:55:ff:9b:b1:48:95:72:e0:e4:db:5f:65:
c1:fd:52:7d:da:ef:39:bc:1f:18:c6:ec:6a:3a:42:
fb:82:87:c1:55:5e:4c:8e:0f:49:fc:4b:d1:da:b3:
eb:03:73:a0:87:fb:a1:a7:27:c3:a7:1d:31:46:ce:
28:04:a8:0d:32:ef:6a:62:f5:61:03:4b:e0:86:79:
f4:c0:a3:36:b7:ae:49:84:03:a7:bc:c4:4f:cd:cc:
18:4d:f8:b2:89:db:31:21:35:53:16:6f:94:97:e9:
aa:0e:21:68:49:a1:a0:d8:e6:e2:9b:f0:ed:e1:9d:
04:ae:16:04:6b:d0:76:cc:3c:84:d0:98:4e:fb:f4:
24:03:92:4d:d4:47:35:8d:79:7b:ae:8a:e2:6b:ef:
7a:a5:29:10:3c:e2:e8:51:6c:29:21:94:e7:7f:98:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:B0:45:36:85:6F:39:BF:41:E9:B2:EF:8C:0F:D7:37:3F:FF:57
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:43:a0:85:8d:bf:49:02:13:b6:21:d3:a3:4e:46:af:6f:bc:
7f:3a:d4:a8:b0:ce:90:47:f7:a6:58:6c:94:a4:7f:e5:9e:3d:
5e:fe:21:39:b3:ef:90:20:1c:13:45:bc:e4:c3:dd:e8:44:eb:
47:83:7d:15:e0:90:db:b9:cd:e4:20:1a:5c:21:47:d3:fa:09:
d8:30:9a:51:db:6c:12:f3:1f:ae:cc:33:86:71:f8:eb:a8:79:
a0:91:04:c0:5d:0c:ce:ab:71:a4:90:c3:c5:33:8d:44:e8:c0:
45:93:1a:bf:65:c0:88:f4:df:1f:eb:1f:77:52:e6:a5:28:47:
c1:cd:bb:65:27:f8:0a:01:2a:ed:aa:4c:9d:9f:52:85:e3:df:
db:3b:ea:ce:d0:6b:02:b0:da:a7:95:43:9b:65:d1:5f:64:44:
28:41:81:39:bf:87:24:b4:70:60:38:56:de:e3:31:c0:24:d8:
53:e2:4d:41:4d:e1:dd:81:ab:3e:94:07:79:3a:74:44:52:3d:
c7:46:a8:e3:75:25:ec:98:51:84:5e:6c:5c:43:98:6f:cb:b3:
3d:c2:5c:5d:f8:df:e9:80:b2:c8:02:9f:a7:40:10:8e:3d:f3:
d4:d4:74:4c:4d:f0:e1:73:05:d8:c7:41:be:30:42:71:e4:0c:
fc:a3:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:33 2025 by rpki-client