Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier: W/GkZUO/noDnDrExIm/3C1kxjSHYMyBt18txg2f8Gpo=
Subject key identifier: C9:D9:32:7B:3F:F0:30:99:19:0A:EC:2E:82:30:42:8B:B6:E2:06:AD
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial: 0197B632A53E1D0C5CC3FB9FF5DBB53B88BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number: 01F3
Signing time: Sat 28 Jun 2025 11:01:01 +0000
Manifest this update: Sat 28 Jun 2025 11:01:01 +0000
Manifest next update: Sun 29 Jun 2025 11:01:01 +0000
Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: +cxqB7sJW9YXUk/6OR8wQA6vXd0KKiNALjFbopEsI5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a5:3e:1d:0c:5c:c3:fb:9f:f5:db:b5:3b:88:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Validity
Not Before: Jun 28 11:01:01 2025 GMT
Not After : Jun 29 11:01:01 2025 GMT
Subject: CN=c9d9327b3ff03099190aec2e8230428bb6e206ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:84:cd:43:1d:86:c2:61:a0:54:4b:53:9c:
74:12:74:1c:9b:30:51:c7:c9:e1:bc:0c:f3:c3:1b:
9b:d9:07:b6:c6:04:2a:a2:46:55:54:8d:ab:e7:ce:
ce:4c:8f:bb:1f:85:f9:f9:79:6a:01:67:69:14:79:
a5:41:03:74:c6:df:4a:a3:e7:3d:ca:8b:7c:49:cb:
6d:7a:12:b4:f2:4a:13:38:c6:da:5b:fe:d5:4b:8c:
45:58:1b:2b:f4:b3:6e:23:de:c5:6f:41:65:ea:d0:
11:8f:8a:75:10:ca:32:80:d9:d6:a4:56:05:2a:3f:
93:9b:fa:55:72:09:c0:90:d9:59:14:66:3a:62:aa:
12:a2:3a:9e:8d:1f:d4:e7:39:d0:79:02:b4:e6:0c:
5c:2b:5a:62:16:ac:64:5b:36:24:73:1a:fd:db:86:
7d:5e:bc:87:fa:59:70:70:b0:c5:1c:ff:0f:f2:b4:
77:8e:44:fd:36:9d:b7:3d:b1:a1:df:92:20:61:b7:
8d:37:7b:15:4f:c0:bc:1b:15:f8:e8:f7:52:ff:31:
b8:bd:a8:7e:64:d8:a2:3a:20:02:d8:12:9f:39:e5:
3d:a9:83:a8:6e:5e:8a:d5:7a:16:a9:f0:c1:4d:f6:
86:f0:8a:33:20:9f:4b:ce:bc:bc:3c:72:ec:e4:80:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:32:7B:3F:F0:30:99:19:0A:EC:2E:82:30:42:8B:B6:E2:06:AD
X509v3 Authority Key Identifier:
keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:43:f6:8a:6c:34:7f:51:b2:72:ce:ce:bb:6e:3d:29:80:e9:
4a:df:b4:ef:e7:84:8e:b6:76:2f:8e:1a:52:c8:85:3b:d4:ab:
50:c8:9c:5d:9e:57:7e:07:ae:42:2b:15:6d:0f:1a:43:50:b9:
fe:3a:a8:83:f8:d4:79:3c:c2:58:12:a5:cb:36:ca:cd:4b:58:
61:2e:c2:7a:18:87:4b:47:b0:5e:4d:7c:d7:c2:2d:ac:7d:e8:
2b:48:ed:b9:a2:1c:11:24:b2:64:a8:21:42:2d:d6:d5:c0:19:
18:dc:ae:d8:17:97:d3:f2:44:b8:84:bd:a2:f4:c9:62:68:f1:
92:1a:bb:de:cd:06:99:08:e6:f8:4b:7d:c9:b3:a5:50:e5:e5:
b1:2e:97:63:61:3d:77:6e:7a:97:ae:d3:0c:f2:97:7b:db:69:
ad:38:1c:a2:8e:46:c6:b4:34:fa:7f:89:18:ca:0e:5b:ca:f3:
3d:c1:73:d5:b4:de:e9:2f:fd:df:44:74:ad:46:99:e8:d7:f5:
6f:4e:75:39:32:86:ba:a4:8e:b9:05:77:4d:e0:d4:05:8c:0a:
96:85:25:49:04:01:a7:08:31:d7:61:62:02:d7:c5:c1:c0:ea:
eb:ff:65:1e:16:28:d6:47:00:72:cb:be:82:05:a9:67:6d:63:
75:54:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:50 2025 by rpki-client