Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: nWkcFuVx/0kBbuNYVzpTLdmej7YutbvG/tF+jKIRpjY=
Subject key identifier: 55:09:19:29:77:95:B2:8E:B4:39:79:EC:DA:DA:B7:A9:CD:B7:94:90
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 0198D65F1B7E8E7B0268E511C96413B06622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 085F
Signing time: Sat 23 Aug 2025 10:00:13 +0000
Manifest this update: Sat 23 Aug 2025 10:00:13 +0000
Manifest next update: Sun 24 Aug 2025 10:00:13 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: AE7daRQWZRp08V5g++eM3eFBR3oTWyjr4etKBDmj0I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1b:7e:8e:7b:02:68:e5:11:c9:64:13:b0:66:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Aug 23 10:00:13 2025 GMT
Not After : Aug 24 10:00:13 2025 GMT
Subject: CN=550919297795b28eb43979ecdadab7a9cdb79490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:de:82:8a:55:84:8c:b7:5a:cc:0c:de:4c:
31:eb:15:3d:4a:29:17:3a:b9:d4:b9:97:64:a0:36:
3f:fa:b7:ed:e8:b7:f6:05:05:24:8c:24:d0:e6:eb:
74:da:9e:03:41:a0:06:86:50:6d:0d:0c:60:49:4b:
36:1f:68:94:ef:89:34:5e:c0:ef:36:96:24:df:c0:
da:06:2e:d2:ae:3e:4c:fa:b7:ac:78:3e:23:58:b7:
d7:f6:7c:3e:a5:37:54:ad:29:e1:be:56:a0:25:40:
37:11:db:ac:a1:e9:20:e4:12:95:53:ea:16:55:a3:
db:96:b5:22:fd:7e:8d:e1:f0:6d:b0:d9:6a:8c:f8:
d0:9d:a2:47:22:77:9d:85:aa:3b:ec:d0:a2:cd:e4:
bf:af:a2:70:22:60:3c:79:10:04:c4:c1:f4:3e:31:
b8:e5:af:b0:71:8f:51:53:1e:85:a6:87:d7:9f:ee:
48:e2:74:93:88:0d:a2:d9:7d:0c:89:e5:29:71:dd:
e4:c7:f8:32:13:8d:a8:6a:cc:ea:b2:b5:05:15:91:
55:22:be:fc:43:24:8b:dd:d9:14:58:c3:21:03:ab:
d7:0e:3b:3c:11:65:ba:ed:8a:a8:ae:5d:31:06:51:
b1:1b:13:d1:9b:a6:e9:06:15:23:ce:4e:e4:52:dc:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:09:19:29:77:95:B2:8E:B4:39:79:EC:DA:DA:B7:A9:CD:B7:94:90
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:aa:ca:12:38:16:09:3f:c2:86:04:25:69:14:0c:30:92:e1:
4e:13:90:a4:2d:4b:17:4b:51:18:60:09:b0:ef:9f:c8:54:99:
e1:31:88:10:12:07:0f:c8:75:d3:1e:7e:f7:ab:07:08:e3:d3:
93:d6:27:34:ed:89:5f:54:07:c2:aa:d5:75:90:13:7f:05:0f:
31:22:b1:a2:64:ca:59:e1:95:b1:ee:a5:1e:4b:55:47:5a:66:
66:50:53:dd:e7:56:fd:e4:1f:4b:75:e0:93:6c:1c:98:0e:a8:
59:8c:08:f4:9d:e6:4e:9a:dc:f1:82:12:6f:ed:c5:a8:06:ed:
59:1f:46:a3:dc:5f:d1:99:3b:67:b7:20:d4:c0:c3:76:39:f1:
c4:03:d9:c7:90:8c:88:72:1b:4a:f9:ef:e7:38:7e:3c:2a:83:
1e:3d:25:05:93:5b:04:76:f5:cd:07:65:ae:34:d4:bb:11:9e:
7a:62:f3:a4:33:4e:90:bb:44:f7:7f:c8:c4:aa:84:82:92:e8:
c7:c3:96:b5:68:1d:55:93:36:ee:49:3a:83:93:e9:2d:b3:3b:
b2:51:12:95:98:2f:d3:a0:67:1b:7a:09:fe:52:4d:21:7a:05:
07:7f:4f:3c:bb:e0:09:87:4c:3e:5d:c5:71:95:dd:82:9f:7c:
0c:79:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:19 2025 by rpki-client