Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
File: mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft (raw, json)
Hash identifier: asRpLsT+F9xoajyKcdSqglAmFgkKDdov1gB1Js6TFQc=
Subject key identifier: 26:52:A8:23:18:9C:7F:62:B4:D5:D4:CE:05:2A:7D:5E:D7:73:3E:B8
Authority key identifier: 99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
Certificate issuer: /CN=99f4973e524b08717582577630d33193e53b67c9
Certificate serial: 0197B8FD501388EB9B9D6CDC4B05F0818A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
Manifest number: 0468
Signing time: Sun 29 Jun 2025 00:01:38 +0000
Manifest this update: Sun 29 Jun 2025 00:01:38 +0000
Manifest next update: Mon 30 Jun 2025 00:01:38 +0000
Files and hashes: 1: mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl (hash: 29WdM8cJgit0+wEff9eyDxdzwre3huGsPawzf/eUXpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:50:13:88:eb:9b:9d:6c:dc:4b:05:f0:81:8a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f4973e524b08717582577630d33193e53b67c9
Validity
Not Before: Jun 29 00:01:38 2025 GMT
Not After : Jun 30 00:01:38 2025 GMT
Subject: CN=2652a823189c7f62b4d5d4ce052a7d5ed7733eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:3c:2f:a5:2b:bb:c2:5c:8f:ae:8c:e1:a4:
e7:90:91:c5:e7:f8:57:fb:57:19:01:af:4b:7e:63:
4d:5a:55:94:d0:aa:f7:03:fa:95:4f:5b:6b:d7:67:
66:6e:0f:ae:dd:b2:a4:71:fa:b8:91:0e:52:26:be:
69:4c:7a:b2:06:1e:3a:ef:10:e3:fd:3d:da:7e:3c:
3b:d6:22:5e:f0:62:f3:69:9b:d2:c0:c2:27:41:c9:
9e:06:3e:1d:33:82:c9:87:28:ba:64:48:8e:df:2c:
cb:ed:ca:8a:67:a1:bb:16:3b:b4:63:28:41:4d:32:
c4:e6:d9:99:bb:fa:65:1c:80:7d:94:0b:99:c9:ba:
c8:62:a9:0e:a7:24:4d:10:c0:a7:ff:0b:d6:07:b5:
cf:49:bf:4b:c4:04:1c:66:09:d4:db:cb:e3:48:c9:
25:e9:ec:6a:ec:6a:c0:12:87:f6:1b:5c:d4:dc:96:
be:81:3d:24:09:3d:5e:dd:a7:e9:11:00:5b:92:9b:
ec:53:22:0e:38:9b:b6:81:4c:00:ad:5f:eb:89:0c:
da:cc:bd:6f:68:80:39:77:27:9a:f5:ef:e3:a8:e3:
c5:65:03:88:e3:8e:16:a8:89:2e:bb:1a:8b:e8:c8:
be:00:40:9c:b5:e5:4c:9e:3a:1f:f2:b6:fb:1c:f2:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:52:A8:23:18:9C:7F:62:B4:D5:D4:CE:05:2A:7D:5E:D7:73:3E:B8
X509v3 Authority Key Identifier:
keyid:99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e1:76:05:4d:29:f0:04:0f:cc:89:80:c5:40:d2:82:ca:1e:
df:10:27:ad:f0:39:d7:7c:98:97:e9:04:39:f9:50:57:57:1e:
db:d4:9f:5b:f5:bf:9a:f4:31:14:e9:fd:3d:1b:ef:b0:1d:70:
3d:48:3e:6d:48:8e:51:09:d2:e1:a9:08:fd:72:df:ca:07:cb:
2a:14:85:31:47:9d:5d:78:7c:2b:51:5d:bc:52:2b:a9:e4:4c:
08:c3:03:44:fa:77:af:18:07:dd:2f:00:f3:3d:d2:58:69:4b:
82:8c:26:0a:54:2c:62:a7:07:bc:f0:6c:58:1a:6a:3c:70:3d:
e6:c6:fc:ef:c4:0c:a0:22:4e:44:ec:a4:03:ba:b1:a4:a5:40:
13:4d:5f:20:b9:b2:1d:d1:9b:0a:ac:ec:45:a0:67:c8:3f:5d:
36:63:a9:8e:84:ce:7e:c1:e3:45:55:62:aa:48:36:37:5c:bb:
7a:1c:a8:dc:19:bf:b7:fb:84:87:b6:a6:f4:7a:8b:26:80:50:
f6:b0:0e:6e:71:39:86:a0:b6:2c:12:84:d3:9b:92:d5:b7:f4:
3c:50:df:df:52:af:38:77:ad:c6:8f:73:f0:e8:93:a1:6b:4a:
a5:3e:0b:c5:30:14:fa:d6:22:01:32:a5:7f:c7:2e:92:0a:4f:
11:12:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:32:27 2025 by rpki-client