Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: 4eAJFyxR+FVVMqlS6x03aInCmysk5thgxdOIV7oonfw=
Subject key identifier: 6B:39:E4:09:CC:85:D5:AF:9C:52:B9:0F:4B:8A:A2:2C:E9:E6:9A:B6
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 0197CB70BF68C5B7CDA7D7B6B56C289C16C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 12AD
Signing time: Wed 02 Jul 2025 14:00:53 +0000
Manifest this update: Wed 02 Jul 2025 14:00:53 +0000
Manifest next update: Thu 03 Jul 2025 14:00:53 +0000
Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=)
2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: vmi16Bg09lN01aq6/wQ8KjHIjtkIXPjK/aY1CQr/JTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:bf:68:c5:b7:cd:a7:d7:b6:b5:6c:28:9c:16:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Jul 2 14:00:53 2025 GMT
Not After : Jul 3 14:00:53 2025 GMT
Subject: CN=6b39e409cc85d5af9c52b90f4b8aa22ce9e69ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:13:86:c3:76:24:bb:bf:25:c2:6f:5e:38:
41:6d:0f:1b:62:07:b5:c0:9f:01:b9:da:66:ca:90:
95:1b:ce:86:c0:50:c2:d1:f2:e5:54:cc:3d:48:7f:
e7:0d:8c:59:96:64:d5:2d:d9:fc:64:9b:0a:3d:82:
c2:3f:12:f8:1f:a9:33:0d:da:c0:af:49:9d:39:7c:
f8:d3:d8:93:00:87:40:35:a0:0a:56:48:1c:2c:f9:
b3:88:1f:19:3f:ae:64:d0:10:96:bf:cb:b7:2a:26:
95:1b:93:a5:d2:32:85:6e:4a:d5:d0:f8:d4:f1:b0:
bf:aa:8b:a9:22:5e:2b:b7:31:07:8e:c4:be:46:0b:
09:ff:63:2a:55:d4:0a:f6:6c:6e:8e:fd:64:0c:f4:
07:21:8c:f8:ee:80:00:0d:1d:f3:77:c8:9d:f0:64:
db:35:ad:5c:92:96:54:84:6d:f7:9c:99:7b:47:e0:
e1:45:9b:45:e0:e5:c5:b7:26:87:63:b5:06:39:97:
ca:65:77:33:74:be:62:c4:6f:92:3b:95:e9:70:24:
2a:8a:cf:5b:2f:e0:96:46:ba:ca:41:e1:75:cf:38:
98:d8:ee:73:d7:e2:6a:04:48:c7:93:dc:9f:9d:1c:
cc:c9:bb:c7:3c:cb:84:da:cf:63:2f:d6:2b:27:b3:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:39:E4:09:CC:85:D5:AF:9C:52:B9:0F:4B:8A:A2:2C:E9:E6:9A:B6
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:58:5f:36:39:78:ce:45:66:c5:66:0b:4c:91:ce:f2:9e:3a:
23:2f:b8:d5:fb:ef:b7:12:a1:17:7b:f7:05:76:bd:f5:3d:f5:
1f:a1:0e:2b:38:b0:3e:93:c5:a4:50:85:5b:9a:d0:e8:21:26:
7e:58:40:06:1d:cb:61:90:6d:af:b2:c6:06:c6:63:a1:32:93:
4f:0d:6d:ad:e8:96:e8:bc:4f:39:94:c3:35:1f:b7:23:45:31:
4c:73:3f:45:bf:f0:7a:5d:01:41:08:96:d9:72:d4:bd:d4:58:
b3:44:d9:4a:28:8a:a6:7e:a4:58:5c:b2:a7:8a:ff:67:08:07:
91:69:92:9f:35:14:e8:3b:e0:03:52:a8:4d:7f:e1:2d:4b:67:
32:63:7c:fd:ba:cb:8a:7a:ea:c2:c0:69:6d:55:a1:22:02:49:
27:b5:bc:dd:8e:d1:13:dd:47:95:3e:8a:82:fc:c9:e0:e0:f7:
0d:d3:fe:39:c8:24:22:32:8c:e2:bc:ba:bd:f6:a8:f3:56:3b:
74:d5:ee:10:a8:69:56:8f:35:32:2c:2e:94:96:ce:2b:d2:4c:
96:ec:83:ea:03:23:d5:e0:43:f9:22:e4:ae:b0:3a:c3:b4:b8:
d4:00:dc:4b:4e:a3:56:5c:a7:1b:74:04:f4:84:41:2b:da:7d:
0a:49:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:07:01 2025 by rpki-client