Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
File: A2x42XMHxhcQhWc4FBzAvTlczJ4.mft (raw, json)
Hash identifier: enyCw2ISd0lmASGB2fcnyzqrVhToFxCqPAJY+uM3wiE=
Subject key identifier: D3:EA:7A:35:B4:BF:2A:83:75:E4:EC:F2:78:08:69:C9:2C:C6:6B:0B
Authority key identifier: 03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
Certificate issuer: /CN=036c78d97307c61710856738141cc0bd395ccc9e
Certificate serial: 0197B7B325D19245841C8DC696F5AFFE829A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
Manifest number: 44
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: A2x42XMHxhcQhWc4FBzAvTlczJ4.crl (hash: lnj0ZSROjY9HDRiNCKFNaXZuGoP9HVTfTX71Hlv3vv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:25:d1:92:45:84:1c:8d:c6:96:f5:af:fe:82:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036c78d97307c61710856738141cc0bd395ccc9e
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=d3ea7a35b4bf2a8375e4ecf2780869c92cc66b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:8c:69:19:e8:59:54:19:db:cf:00:f8:9f:
30:50:35:46:6c:bd:4b:8a:6d:b9:1b:be:ec:35:7f:
63:45:1c:d1:8e:bd:5c:9e:d0:dc:f0:f1:9f:5a:71:
17:ef:44:4f:b1:ce:73:e1:b0:07:be:76:5d:2c:83:
dd:a3:be:de:77:20:31:73:76:09:24:77:78:9f:fb:
b3:57:b9:67:02:fa:28:9f:37:f8:48:29:4c:32:d4:
3c:8d:85:64:df:f2:b2:3c:27:0d:6f:e6:6b:15:dd:
75:8d:e5:8c:3c:55:e3:8d:50:d1:92:6c:68:88:6a:
de:20:42:83:2b:61:81:38:4c:6f:d3:0b:fe:c6:44:
ce:07:e3:94:3e:a9:d7:83:3f:27:ca:c2:31:ea:35:
10:b0:5a:16:45:26:ff:79:a5:ca:61:83:64:34:98:
e2:a8:74:a1:60:33:f1:2c:c7:8c:09:d8:eb:86:17:
a0:f2:2b:e7:15:c7:d1:ab:dc:35:6d:20:ca:d9:ba:
e6:16:eb:4a:7c:11:5e:8c:b7:1b:97:7d:7b:b1:6b:
66:86:94:29:2b:96:42:ad:f3:d5:62:98:c6:bb:e4:
61:ad:fb:79:a6:e4:82:36:6f:3c:5a:75:db:f3:95:
be:cb:36:23:ae:41:44:12:a2:08:4f:b2:a3:5e:3b:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EA:7A:35:B4:BF:2A:83:75:E4:EC:F2:78:08:69:C9:2C:C6:6B:0B
X509v3 Authority Key Identifier:
keyid:03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ea:1d:27:59:30:a9:e6:81:5f:53:35:ab:33:03:fa:8e:f9:
3a:43:8c:29:cf:44:a4:b1:e9:20:7e:df:a0:6b:3a:34:36:f1:
da:ee:dd:0f:a8:6b:02:d4:d3:ae:79:9f:b9:e4:9c:20:ac:a1:
d0:b3:67:ff:f9:6a:8f:6a:8c:43:f7:b4:b1:a1:da:13:84:db:
23:94:c3:a7:32:88:8c:36:66:85:4f:93:a7:35:87:56:48:52:
9b:8a:28:1c:eb:6c:a4:ec:89:75:df:35:37:2f:51:5d:09:05:
aa:53:c7:40:35:e1:86:fe:d3:e3:39:08:f2:6a:b1:8a:f6:61:
35:cf:63:0a:f0:86:25:02:bd:cf:e1:19:be:64:bf:74:0a:ba:
7d:9e:96:ff:5f:98:9e:da:40:29:58:63:eb:91:03:a6:99:36:
56:af:e1:dd:fe:7b:f4:44:6b:28:13:b5:0b:dd:dd:6d:f7:82:
dd:a3:82:9d:d3:e0:93:1f:e2:5b:31:ba:3f:0b:32:69:18:9a:
ff:1b:8a:8d:1c:b7:5c:82:d2:7e:43:95:96:e9:7a:61:db:e5:
ad:c7:55:56:54:a0:d1:d9:b2:31:99:86:1b:b1:5e:15:83:b7:
33:f3:fa:67:70:0b:c3:df:41:29:01:f5:81:7a:19:41:a2:3f:
5a:9a:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:08 2025 by rpki-client