Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: FmOKNy1rWqnRYvXrsThCkDTSZ8WZ0qN0JtilWxCERYo=
Subject key identifier: 83:EA:A8:79:8B:56:6F:56:82:A6:E9:54:B5:3B:78:1A:AD:A8:74:C8
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 0197B6A145C599E2CF096781713E2994E5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 096B
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: 4CzWB9ndllIshU0tALqCeNgDrFhe20w+wDeGM8p5EbY=)
2: vtzVAFS2sSXFMY4pT9LQwpwKXN8.roa (hash: IK29JkUi3ofZEZGY2PidWdMxcE655gfnkWlaKv3tisg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:45:c5:99:e2:cf:09:67:81:71:3e:29:94:e5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=83eaa8798b566f5682a6e954b53b781aada874c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:5f:d8:73:af:be:0b:fd:1e:00:9e:6a:b3:
cd:d4:8d:b2:0a:af:a1:4d:1e:97:27:e2:e7:ba:db:
c0:d2:1f:4d:d8:7b:af:79:7b:61:1e:94:d3:54:c0:
bb:6c:ad:e4:b5:22:66:1e:87:57:09:12:fd:9b:66:
47:1a:39:25:b9:47:92:13:04:e9:78:a6:3c:d7:72:
ce:a6:bb:22:b7:48:7e:40:cf:7f:1d:6f:85:a1:da:
04:ce:ea:f2:bd:fd:c3:d5:51:e5:64:6f:3c:d4:d2:
c5:7b:28:a1:51:b9:d4:52:3d:f0:42:06:10:1b:57:
bd:bc:ce:95:35:16:a7:73:cb:81:0b:37:99:1f:0a:
eb:86:b3:92:70:b8:36:9f:72:f8:8f:bf:a1:dc:ef:
0e:69:e2:54:f7:df:17:ac:5f:3b:f6:32:0a:e7:44:
cf:fd:41:1f:fd:f8:ce:ce:67:ff:ad:16:f3:31:b2:
89:a5:f2:a5:d6:97:15:79:e1:4a:bc:ed:15:87:31:
00:3d:29:b3:f8:0b:0e:da:69:fd:4c:14:6f:07:20:
73:65:f1:bd:4a:4b:c7:d2:ba:13:15:f0:f3:a3:7a:
e9:a1:4e:f0:f0:bf:8c:99:a5:de:34:96:9b:26:a9:
d5:2c:04:f3:e5:ae:2c:52:6c:e9:3a:69:77:90:66:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EA:A8:79:8B:56:6F:56:82:A6:E9:54:B5:3B:78:1A:AD:A8:74:C8
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:bd:7b:54:a6:8f:24:cf:f9:e5:e7:78:e6:e4:98:48:59:23:
5f:b5:14:cb:de:3b:7a:d2:3c:c4:6f:0a:1b:0f:e0:94:18:2a:
f6:42:c6:ed:15:46:97:e8:7d:55:af:dc:65:5a:9e:0f:39:13:
03:b8:97:19:10:90:f4:ea:f8:f0:9a:d6:f5:f7:24:28:b0:fe:
bf:1e:e8:17:5a:f1:b0:1c:c3:c4:be:2e:fe:2c:47:b1:d8:f0:
8c:1f:ef:d8:13:5f:55:74:99:f5:cf:ba:6a:90:bf:a3:ae:98:
85:ed:9d:f1:2c:fb:57:ef:41:c7:62:c3:c3:b7:1e:00:a1:ff:
a4:ef:ea:c3:b4:e0:da:1f:3e:f2:d8:05:89:f4:2f:a2:cb:bc:
38:9b:b4:60:2d:d3:44:2c:e3:f4:09:d6:98:82:8a:c1:58:d8:
4b:9b:3d:f6:ff:68:e7:8f:6d:c4:8f:39:b2:ce:f0:e4:fd:66:
82:15:12:9f:5d:a9:49:fc:35:5c:2d:5c:f7:a2:0f:74:2f:56:
43:ee:62:df:d3:ad:c8:b3:01:e2:d8:f9:e8:cd:79:8a:9a:e3:
d7:3f:8f:a4:0b:5e:73:ed:e3:2c:90:d5:eb:71:2a:ea:02:0e:
f0:b6:69:2d:9c:34:a3:37:ec:99:ad:4d:8f:cf:83:c6:12:83:
3b:51:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:50 2025 by rpki-client