Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier: ZEQ7OYDvsEQYCIqTANNzt1l+QhVqzSVTaCJYePQyils=
Subject key identifier: 35:E8:B4:04:78:51:C5:06:EB:83:12:83:82:3F:16:F8:66:DB:B2:DF
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial: 0198D705E0D94557D2BEB01D1042108CCC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number: 0521
Signing time: Sat 23 Aug 2025 13:02:23 +0000
Manifest this update: Sat 23 Aug 2025 13:02:23 +0000
Manifest next update: Sun 24 Aug 2025 13:02:23 +0000
Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: SUHpN5O3UmQV1TO7Bd8vwbtuoOXH9mDeliKWh+ZhEsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e0:d9:45:57:d2:be:b0:1d:10:42:10:8c:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Validity
Not Before: Aug 23 13:02:23 2025 GMT
Not After : Aug 24 13:02:23 2025 GMT
Subject: CN=35e8b4047851c506eb831283823f16f866dbb2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:4c:fa:f8:5b:aa:9a:99:3f:e8:58:72:5c:
2f:02:90:92:19:f7:d6:6a:c1:e8:da:f6:f1:c9:68:
59:cc:41:44:23:26:3a:20:f2:a0:d6:16:7a:98:0a:
f5:29:52:b0:c6:da:cf:70:dc:87:7c:0c:54:34:7d:
d1:86:dc:bf:b6:e0:32:81:8c:3f:e9:f2:5d:a7:86:
b9:80:5b:95:94:ab:0c:0e:bc:cb:01:7b:74:2e:a1:
c9:a5:f1:52:89:ca:ea:a2:1e:02:76:64:b5:76:1d:
ef:93:0e:7f:4c:63:8c:7f:2f:da:2c:e3:58:59:6f:
33:7c:92:db:57:a4:16:eb:d7:a1:2c:12:48:cc:7b:
1e:3f:25:39:60:67:66:6e:5b:b3:ab:64:a5:92:c4:
37:46:bb:53:b5:63:23:85:33:b0:f6:e1:b3:a1:04:
47:4a:35:71:b2:6f:83:bf:8f:9b:eb:66:31:60:ed:
cc:d5:1b:30:d5:3b:d5:ed:03:90:42:1a:b3:ff:2b:
ba:f3:7c:c8:3d:c5:e7:21:69:af:ae:ab:b4:50:ee:
63:75:1b:74:57:59:e2:11:ce:e1:bc:27:6a:b0:69:
38:4c:3c:83:b6:d5:05:dc:4c:82:4e:d6:03:7c:e5:
d7:76:a8:c2:a6:db:61:b7:69:41:ac:26:01:76:d3:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E8:B4:04:78:51:C5:06:EB:83:12:83:82:3F:16:F8:66:DB:B2:DF
X509v3 Authority Key Identifier:
keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3a:4a:e2:fe:18:f7:e9:16:01:c9:76:fe:3e:6b:68:8d:e0:
08:e2:24:d1:a9:22:a7:cb:86:1a:b3:54:f2:fb:84:a5:ad:2b:
ff:b2:09:2e:6a:40:40:48:a2:bc:0d:1e:8d:56:c5:14:7e:47:
16:25:88:d8:a8:b8:3c:72:15:1d:8d:4b:b7:4b:a3:fc:1b:11:
cd:ff:30:e1:5e:65:39:ab:23:16:d7:00:ac:3b:98:91:0b:2d:
c8:b0:52:d4:1d:95:f7:f1:37:ba:31:40:10:c1:f5:4d:25:de:
39:d4:f4:d0:a9:de:0c:e2:23:e4:ec:ce:b0:ac:62:c7:4f:98:
d3:ee:7d:ba:75:48:fb:b7:db:e7:d0:6b:30:37:0c:14:b2:40:
9c:1c:fe:b6:57:80:fc:6b:70:28:86:17:b0:4b:15:d5:33:04:
1d:62:cb:07:86:29:ff:79:69:2e:cd:49:70:b4:62:88:e5:25:
09:37:db:3f:5d:8a:12:46:52:7b:ac:50:53:6f:02:6d:15:2a:
f8:cf:d7:6d:e8:2d:eb:23:2f:ea:8c:c2:05:dc:ba:91:b9:ac:
72:51:25:f7:5a:c0:5c:08:d6:3a:c7:e0:ec:0d:99:95:ff:3e:
e5:a3:a9:9d:7a:32:08:36:7b:c4:cf:3c:b9:f2:4a:d2:2d:14:
75:f1:ca:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:20 2025 by rpki-client