Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier: K6ZKjZEYFBELKjlt4BnAVPx4lb3qHU8aBT5KJ/2l+hg=
Subject key identifier: 0F:E7:26:E0:58:98:E0:9D:F2:53:34:E0:49:97:AB:A4:EF:61:4A:EE
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial: 0197CC83799E8AC61465C16ECBDEB50D225D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number: 0497
Signing time: Wed 02 Jul 2025 19:00:57 +0000
Manifest this update: Wed 02 Jul 2025 19:00:57 +0000
Manifest next update: Thu 03 Jul 2025 19:00:57 +0000
Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: twFr2VS+oFAKX94eAh1Ih9Hi3b2yg76g9Gl5cazop2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:79:9e:8a:c6:14:65:c1:6e:cb:de:b5:0d:22:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Validity
Not Before: Jul 2 19:00:57 2025 GMT
Not After : Jul 3 19:00:57 2025 GMT
Subject: CN=0fe726e05898e09df25334e04997aba4ef614aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:9d:f2:25:7b:c1:f3:cc:ba:0a:89:ac:a1:
84:82:70:3f:f1:55:49:da:2b:40:af:92:8c:7f:71:
b4:f6:88:73:62:32:5a:d9:3b:32:8f:72:19:f2:c1:
e6:95:10:f0:c3:45:6f:68:c4:8b:8e:28:11:b1:3a:
b7:7f:ab:f2:7e:55:ed:bb:8d:99:75:3a:11:b1:9e:
b5:eb:06:bb:9d:5a:5e:1b:04:30:5f:89:26:15:cd:
07:bd:da:49:48:4a:2c:e6:71:82:4d:28:ab:78:b5:
3c:6e:d3:13:6f:d7:2a:0d:80:fc:c1:ca:24:b5:5a:
f4:7e:c6:34:ec:f3:e4:df:fb:f5:82:1b:b7:1b:1e:
e6:5f:8c:d6:b0:38:54:d7:41:58:fa:c6:41:de:d7:
61:a2:b9:3a:13:9c:32:be:4e:a6:39:8f:f8:f5:7e:
90:2e:a0:b0:0f:bb:8c:26:45:20:9f:64:ce:2c:c8:
73:6a:9a:f6:79:1a:63:24:af:f1:b1:3f:c5:e6:2f:
25:1c:41:a5:97:a6:b8:a8:9c:c2:14:5b:95:46:c3:
9d:a8:6b:e1:56:78:2f:8b:67:cf:cf:ea:0d:e0:51:
07:17:de:86:99:19:2d:28:5a:8b:7e:b2:d9:fa:42:
d2:9e:e4:a0:44:c5:71:52:c8:e1:4f:91:54:26:77:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E7:26:E0:58:98:E0:9D:F2:53:34:E0:49:97:AB:A4:EF:61:4A:EE
X509v3 Authority Key Identifier:
keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ae:ac:ab:5e:2f:89:77:77:d2:c5:3c:84:f6:fc:f4:cb:7c:
0b:ce:ef:ed:8b:9a:91:39:68:e4:93:0e:b2:62:ef:11:01:0e:
6e:29:58:b3:5f:2c:8d:26:39:0b:5f:29:cc:db:14:01:6a:ba:
3d:91:ed:02:79:a7:e4:ab:55:bb:07:91:c0:29:55:13:f3:e1:
43:96:00:7b:15:93:70:bd:01:d5:f0:a6:4f:50:4a:3b:3e:e9:
45:9a:85:0a:f9:d0:b6:c9:21:51:29:81:ca:27:b0:08:f6:16:
da:cf:26:94:90:98:79:7f:82:6f:25:7b:10:13:28:01:8b:d4:
23:33:40:1d:f8:e5:84:5d:7f:91:cf:63:c4:68:b6:32:68:35:
54:4d:49:8e:8f:f8:2d:d4:79:71:aa:09:39:6f:35:f9:7b:e0:
fa:bf:1b:6c:56:91:d7:b0:39:5b:34:cc:a7:44:b3:a6:c0:01:
97:40:37:0d:e9:47:29:2b:91:6a:83:cc:bd:18:92:cf:0f:8f:
13:bb:a5:37:c9:77:ab:03:3e:a0:49:b8:ab:e3:bd:97:97:32:
56:7d:dd:63:4d:a9:32:f6:46:23:ac:21:c1:a5:c3:d8:fa:a7:
5c:7d:89:66:52:6c:42:e5:11:41:70:d8:5b:3e:e4:b1:e3:1f:
78:51:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:03:33 2025 by rpki-client