Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
File: Rl73vS6z3NurBJCDgNSKjy_rxiw.mft (raw, json)
Hash identifier: WT2XSX70IkpwS+sLJowd8v+I6Z1aNGr2VM/g97ekWx8=
Subject key identifier: F1:60:51:77:51:FA:DE:6E:3C:20:0F:CA:38:F6:BA:E4:0D:15:5A:32
Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Certificate serial: 0197B6D731ABF22A12D88294118691659481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
Manifest number: 0FB2
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: 0-c9PgPd1_wXhamWThnKHlQbGGs.roa (hash: t9blZuOAI0IrEr32bYa6e5eRP1KzQCe8vHG6m5RDWu8=)
2: Rl73vS6z3NurBJCDgNSKjy_rxiw.crl (hash: S0ZyKmvQMiknI0OiD8f8/ghsqAhRKHGBLUUK7Q6305s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:31:ab:f2:2a:12:d8:82:94:11:86:91:65:94:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=f160517751fade6e3c200fca38f6bae40d155a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:c7:b3:1f:91:a1:2f:68:af:4c:bd:e2:58:
64:c8:ec:d1:64:12:b1:f6:59:f2:32:fe:fc:c0:9b:
de:bd:90:37:0c:18:a7:61:4e:6d:fa:e1:2b:49:a8:
ff:a7:58:17:f0:eb:17:3b:3f:59:3b:79:40:80:f1:
89:64:96:e6:f9:78:da:f2:a5:66:be:de:8b:ec:64:
47:e1:48:6e:b0:df:bc:c9:fb:6f:04:7f:8c:0a:3e:
2f:fa:e1:d0:22:1f:ea:b4:bb:e4:3a:e2:a1:4c:5a:
4d:98:54:f3:4e:c2:ca:dd:d7:e0:41:60:cd:99:fa:
a4:24:53:ed:b0:c2:9e:61:3b:df:2c:57:2a:8c:bd:
b0:84:b0:cb:12:35:6f:01:66:d0:8a:38:f8:cf:d0:
d7:38:55:28:cb:b2:ac:23:63:ae:dc:c2:7e:97:40:
16:fe:0d:7b:44:59:ee:6a:21:6d:cc:51:2b:30:7e:
13:9f:7d:23:37:d0:31:3d:7c:5d:05:ac:17:87:b1:
5c:01:aa:1e:3a:af:07:d8:cd:74:89:9f:24:32:16:
e8:a0:9a:fb:87:34:45:57:18:a3:93:da:3b:a1:ad:
04:85:50:9c:e2:d8:23:87:1e:c1:2c:03:b8:5d:af:
49:fc:51:7d:40:e4:de:84:34:dd:20:95:a3:cf:14:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:60:51:77:51:FA:DE:6E:3C:20:0F:CA:38:F6:BA:E4:0D:15:5A:32
X509v3 Authority Key Identifier:
keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:77:ba:53:25:b1:0d:4e:85:16:ac:4f:9b:c3:b6:20:15:
37:38:e8:c0:ca:69:86:c6:f5:3d:6b:cf:0b:5a:ef:bf:11:5b:
74:8e:c9:d5:b1:a6:0e:25:f3:42:09:f6:44:24:56:8f:a0:a4:
46:d1:f9:2e:50:c9:6c:60:38:03:67:1a:7e:9b:8e:c3:0f:ea:
f8:2e:3a:4c:a4:fc:7a:8d:dc:d2:0a:fd:3e:f0:c1:31:e0:db:
ba:e6:db:84:d2:5b:33:dd:83:1c:61:88:88:f5:df:5c:6e:b5:
ff:58:94:40:3b:12:63:8c:9c:71:d3:af:6b:ef:9d:f5:6d:fe:
40:5a:d6:c5:af:c9:90:52:e1:d8:dc:a3:b8:78:f0:fc:39:02:
b5:e7:ef:5a:ce:fe:3a:dd:f4:b6:4f:3a:8e:c0:c4:26:e6:cb:
a6:fb:bf:76:11:50:5b:92:d9:3c:66:ba:4e:ba:78:3a:b5:8a:
70:78:59:57:27:61:31:5a:b9:3e:ae:26:0a:13:ab:65:5a:5f:
7c:10:86:89:c7:0a:44:4c:e3:2f:33:17:a5:eb:55:85:b5:27:
d0:8a:81:95:29:7c:ef:f3:76:6c:3e:5b:ff:1d:45:d1:ac:11:
86:2c:d8:e8:67:51:49:69:b8:71:aa:05:a6:25:0a:ab:fa:db:
f1:93:f8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:31 2025 by rpki-client