Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
File: Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json)
Hash identifier: XWg/YDrK1K6yy05LObSp7yfWbcRNivMGBVKsuYRj5ac=
Subject key identifier: C1:12:EE:C2:51:A7:DD:93:79:A6:AD:1B:FF:FF:0E:88:20:04:7C:B7
Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
Certificate issuer: /CN=471d7371241346c6ea9a476946802172ca07566b
Certificate serial: 0197B88F2C212C7C8B5C692FF20171C3A8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
Manifest number: 08EB
Signing time: Sat 28 Jun 2025 22:01:20 +0000
Manifest this update: Sat 28 Jun 2025 22:01:20 +0000
Manifest next update: Sun 29 Jun 2025 22:01:20 +0000
Files and hashes: 1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: RxSpho3FiDy3PKZmwD8Q/n5/l0CUX5/mAh1S/rBX1Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:2c:21:2c:7c:8b:5c:69:2f:f2:01:71:c3:a8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471d7371241346c6ea9a476946802172ca07566b
Validity
Not Before: Jun 28 22:01:20 2025 GMT
Not After : Jun 29 22:01:20 2025 GMT
Subject: CN=c112eec251a7dd9379a6ad1bffff0e8820047cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:f0:8f:af:50:0a:08:9c:e2:15:11:c1:fc:
59:a7:20:0a:fb:91:99:30:53:39:9a:c2:b1:5d:a1:
3b:7b:9b:ea:31:c0:f5:18:3c:c8:e7:04:b7:95:5c:
c7:2e:a2:e1:dc:ac:f0:43:d6:de:27:cf:40:76:ba:
b6:f2:e1:50:4f:15:56:39:c6:f9:7a:d1:e0:35:03:
2a:f7:8a:79:22:97:a6:ad:42:e3:d5:ea:44:e3:2e:
1f:09:e0:7e:24:07:98:ea:1e:e9:6f:9d:c7:e3:e4:
fe:57:0d:c7:f5:00:a4:75:c4:3e:8e:ab:f0:e4:9b:
eb:e1:02:ec:0d:cc:43:72:38:98:32:93:bf:06:12:
79:f4:ee:d1:c3:43:87:14:c4:02:2a:a3:53:88:58:
26:52:1d:99:b3:f7:5f:3a:84:1d:40:b1:e9:4a:7e:
44:54:f8:b4:5e:c1:9b:9b:5a:ba:e9:04:e4:15:01:
a8:07:8b:5b:75:eb:10:f9:95:bc:37:d9:7e:a5:74:
80:a6:0a:8e:81:51:8f:e5:d9:eb:2f:16:7e:48:c6:
70:d1:73:d3:1f:40:35:0a:30:57:d1:f1:76:d3:40:
a8:63:8d:15:d4:cb:31:07:d2:ec:a1:88:d6:18:0b:
86:eb:25:e1:80:99:e6:4a:f3:5f:af:0f:67:eb:51:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:12:EE:C2:51:A7:DD:93:79:A6:AD:1B:FF:FF:0E:88:20:04:7C:B7
X509v3 Authority Key Identifier:
keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:6a:84:74:2d:be:d4:49:18:f9:8c:7c:85:f0:7a:3e:08:
2c:ca:d3:51:96:6f:a2:f7:2a:ab:d3:d2:78:5c:b7:5e:00:98:
36:75:a5:d4:ad:59:64:4e:1b:b3:2f:07:3e:6c:16:c2:e1:2d:
21:f9:d0:27:bd:da:c3:65:29:18:6f:d2:65:e6:a0:6f:fe:ef:
08:21:77:7f:e0:e5:71:b0:5c:b9:84:3a:ff:89:a3:52:63:5d:
46:b8:d7:1a:5b:23:ee:9b:2a:ba:f6:ac:37:3b:33:1b:38:4e:
60:8a:0d:c9:d6:b7:07:a3:a8:46:9c:04:e8:12:cb:ec:9c:fa:
58:05:51:42:d5:76:50:67:81:36:52:9c:13:b6:dd:b7:71:c5:
59:40:eb:00:c1:11:53:fe:80:05:13:5f:89:f8:eb:65:dc:2d:
c1:67:68:66:5a:26:7b:77:25:d8:b5:ff:6c:a9:1c:2c:60:bc:
3e:23:48:39:c2:ef:bf:b9:4a:3c:05:1d:21:8c:31:29:3e:a9:
b2:19:0d:cb:61:4a:30:f8:56:f9:d9:fd:c6:33:fd:1a:7e:3d:
25:63:9c:1f:a6:ea:93:6a:5d:92:df:61:4e:28:09:0f:2c:83:
1d:3c:9c:bb:9d:e0:06:33:49:cf:55:0b:1a:c9:59:c6:e5:fd:
90:8e:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:21 2025 by rpki-client