Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
File: kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json)
Hash identifier: x7t6ai+ntrdLVHbQES4oylNzFBDuc5X3LkusK3Ay2Dk=
Subject key identifier: 44:C6:00:95:35:1A:C9:C0:90:F2:19:8F:9B:83:55:4A:1C:EF:37:E1
Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Certificate issuer: /CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Certificate serial: 0197B77C03A26CF50F0BF4DB234836CE8C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: XUSHvn6heVZPFJVYax/JPTiVneA7Y/WvREaHuBPKLv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:03:a2:6c:f5:0f:0b:f4:db:23:48:36:ce:8c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=44c60095351ac9c090f2198f9b83554a1cef37e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:41:1a:15:e2:61:d0:eb:bf:85:c2:5e:8d:c0:
c2:8e:0e:7d:d3:ca:0b:32:8f:34:7e:ef:82:01:84:
12:09:92:bf:ac:79:01:e0:5a:34:8b:59:32:f9:84:
66:a9:14:5a:01:80:d1:63:38:77:3b:c1:3c:e2:07:
56:61:2e:02:fe:8b:e9:4c:87:7f:35:ed:92:d1:20:
0a:c3:ed:de:6f:a8:3e:90:7b:ba:ee:01:c4:a4:18:
c9:24:88:34:e7:af:b2:ec:55:60:7b:42:c4:09:68:
78:e8:a1:0e:05:f0:e7:72:5a:e7:05:4e:fc:9a:10:
c1:6a:b8:aa:00:bb:35:71:12:4e:54:2f:5f:ed:2a:
db:93:ae:2d:26:c2:f5:ae:92:fd:47:cb:66:08:83:
46:fa:3f:c4:94:68:12:67:29:ff:9e:64:2f:a0:a4:
e0:8d:f0:2e:12:fd:3d:86:0b:3f:58:45:0c:c3:ad:
c1:9b:be:28:57:39:f0:85:dd:b7:34:07:9a:0d:b0:
45:00:ad:89:37:66:ff:3f:a9:04:7b:fd:15:21:2d:
db:50:4c:0a:9b:2d:ee:43:cd:de:a3:7b:cb:dd:e9:
a8:d4:41:fe:97:14:2b:79:77:01:67:38:f3:9e:81:
d5:9d:c6:07:06:f4:e7:4d:06:83:b0:af:8e:b0:d5:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C6:00:95:35:1A:C9:C0:90:F2:19:8F:9B:83:55:4A:1C:EF:37:E1
X509v3 Authority Key Identifier:
keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4f:12:56:a1:c9:fc:8b:c9:c9:a6:3f:69:68:11:17:18:7d:
4e:e5:c5:b2:d2:26:82:c6:f0:bc:2f:30:4d:3a:25:8e:40:ae:
79:69:76:e1:52:65:2f:35:d8:12:70:9b:2f:12:73:d9:fd:7d:
a3:43:cd:c3:68:39:eb:25:97:bc:27:8a:55:21:01:5b:c6:4a:
5a:76:56:32:cb:0d:d3:88:ae:81:f9:45:47:d6:13:29:04:09:
6a:ef:46:21:38:fb:a7:13:34:03:a3:f9:89:d4:f0:8f:c7:80:
ff:d3:df:34:85:39:b2:f5:c7:bc:97:3b:68:c7:2e:71:7f:ee:
9e:bd:a5:a1:b7:dd:ee:df:7c:f4:0b:3a:bc:55:d0:22:4e:ce:
a9:2b:a4:03:75:fd:25:44:5e:02:4c:94:c3:bc:a4:4c:cf:64:
d5:12:0c:ce:a7:e8:d6:45:c7:a4:7d:cc:f3:20:9b:63:fc:c0:
ae:cb:77:df:09:84:69:e9:5b:c5:ab:aa:8b:0b:2b:1f:98:4e:
7b:4d:a3:63:32:27:0e:51:e3:24:fd:06:34:33:a5:26:56:95:
30:bf:f0:0e:b7:3e:0f:4c:c4:6e:9f:f1:89:44:14:98:b5:f0:
1e:a1:40:fc:09:07:8e:8e:ef:fb:43:a5:67:6a:b8:65:ec:a0:
b0:1d:71:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:19 2025 by rpki-client