Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: p0efjEToRXXoVJQHSVILWwK8WnWXxpUspQjEnZ6LuMA=
Subject key identifier: E4:01:CD:AA:EE:88:32:22:07:18:57:11:94:86:14:17:33:EB:B1:96
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 0198D5BBBE4205DD071D47A310F884434FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 1295
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: 2i8k7IHIgEeLt2MGiO+AAWtQLevR5LNWw0nETNuTyJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:be:42:05:dd:07:1d:47:a3:10:f8:84:43:4f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=e401cdaaee883222071857119486141733ebb196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:1f:91:bb:89:ae:8e:24:0c:8e:11:f2:e9:
06:c0:38:9a:4d:df:cf:b0:30:2d:92:db:41:08:dc:
d1:f3:8c:29:85:01:d5:f4:cf:20:83:44:93:42:df:
fe:da:c2:2b:f6:e7:6a:4f:81:71:53:fe:b4:64:68:
69:e2:92:0f:c1:cf:3c:e5:34:1b:73:29:4f:ab:1a:
ae:dd:55:b9:9e:18:69:86:3d:6e:e8:78:b0:72:42:
1b:6a:a5:a9:a4:00:52:28:c8:d4:c5:36:e1:c6:94:
0c:e3:ce:93:73:3c:31:8e:18:34:ed:94:7c:0d:65:
c1:74:39:27:51:f1:b7:4a:7d:0f:17:b2:45:8f:01:
51:92:32:b7:f1:cb:ff:46:b5:6c:b2:5e:c7:74:9f:
10:74:30:2a:3a:a1:a1:51:e0:8b:5c:5a:ba:4f:91:
84:95:9b:41:98:4a:88:3f:e4:92:18:6d:d9:05:ba:
27:3d:8a:d3:b0:98:e3:61:cd:5c:31:a6:11:99:ff:
7c:02:2b:28:32:53:13:d7:1a:16:f2:0e:de:96:44:
22:a5:f6:23:22:90:b6:4a:b6:01:a5:f4:90:9e:47:
ae:a3:8f:97:56:c3:a3:27:96:a4:98:b3:5d:2c:64:
a0:b9:4b:0f:92:31:4f:a0:a2:0e:e3:47:c9:60:3f:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:01:CD:AA:EE:88:32:22:07:18:57:11:94:86:14:17:33:EB:B1:96
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:99:a6:69:a5:78:a2:42:f9:1a:06:80:83:7b:00:73:9e:99:
99:34:83:63:ff:36:32:19:46:ad:d2:3f:b6:3c:2b:21:29:d7:
0e:49:63:e6:1b:31:41:5e:fb:d3:fb:48:82:5c:20:07:d6:3f:
2b:74:42:f6:5f:3d:30:6e:bb:e2:9b:4a:9d:90:1b:e6:67:f9:
35:04:9c:3a:d4:84:05:d0:a3:3f:07:f8:bb:c1:4a:d6:89:0f:
e9:4f:63:a1:3e:13:9d:13:04:c3:6a:62:0a:60:03:ea:75:0d:
27:98:b4:f8:e0:9d:9d:6b:0b:84:ee:a2:1e:86:c0:4c:80:45:
c7:ab:b8:f2:24:3d:e5:bf:0a:e8:31:73:7b:9e:a5:cf:0d:d1:
7f:a4:93:2e:33:c1:e4:52:f3:9c:d5:2a:e5:30:93:5c:17:44:
7d:18:53:05:32:b2:07:3f:ca:fb:9c:e8:34:bb:3a:c8:9f:98:
73:37:6c:eb:b7:78:0f:cb:18:4c:9a:3a:07:97:92:4b:0f:10:
db:7c:54:2f:ae:ea:43:cf:51:b3:65:9b:dc:8d:b9:52:ec:65:
8d:bd:e7:7d:aa:ff:8d:20:c3:eb:2a:be:95:7d:8d:54:21:c4:
ce:c8:46:60:5d:32:91:f4:4b:73:7a:0e:c3:69:8c:41:d2:b5:
02:06:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:07 2025 by rpki-client