Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json)
Hash identifier: Iil45/QpZvV7d7srUY2+OcfclFYLWTmhS0VdBQXCoPk=
Subject key identifier: 75:D8:57:A5:AC:E4:E1:67:66:CC:6E:44:77:BD:EC:47:EA:E9:9A:BC
Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Certificate serial: 0198D54E1878B8570C3875125F5577413EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
Manifest number: 072E
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: aXZ6KKw92yZZUH03gNmQAV0vJQ3sOVC4Q4duGt1qCWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:18:78:b8:57:0c:38:75:12:5f:55:77:41:3e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=75d857a5ace4e16766cc6e4477bdec47eae99abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:9e:55:85:5a:6c:65:b8:5e:bc:86:7e:b0:
80:94:f6:95:28:e3:fd:58:54:5c:b3:f0:95:f0:0b:
9c:4c:fd:30:74:b2:1a:66:13:89:58:aa:36:de:ec:
d7:3f:73:97:84:1f:cd:8c:cc:f3:4b:eb:f7:5d:73:
6e:c6:f2:b0:61:45:e6:4a:a8:a0:05:f7:08:a1:09:
af:94:57:b1:38:56:8b:7e:c8:d8:1e:86:17:b8:82:
53:ab:e7:09:8d:c8:8d:5d:5b:a3:30:ba:26:ea:75:
aa:65:e3:ed:11:62:c5:a7:de:7b:a7:dd:9a:3e:e7:
08:d3:9f:b5:7e:e0:e2:00:b5:46:3e:4b:40:ad:94:
30:0b:a3:36:cb:f3:33:33:6a:42:d5:55:97:fb:72:
40:72:60:99:9a:2c:31:6e:28:28:03:ff:c9:8c:f4:
15:b6:56:0a:79:12:e8:55:f8:0f:7c:fc:c9:19:cc:
c5:5d:68:6b:a1:af:13:6a:b3:e0:67:2d:e4:15:6e:
0d:16:d7:6d:2f:36:6c:21:9f:c3:77:96:d8:65:55:
b6:b6:64:f4:4f:a7:40:ef:29:ef:a7:39:4b:d3:05:
fb:9d:7c:10:27:6f:c5:f4:03:5c:e7:b0:da:c3:64:
ce:a2:52:55:3e:d6:e0:d4:7d:19:94:7c:0a:e7:35:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D8:57:A5:AC:E4:E1:67:66:CC:6E:44:77:BD:EC:47:EA:E9:9A:BC
X509v3 Authority Key Identifier:
keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:86:39:dc:41:02:01:32:eb:14:71:1c:5c:c7:57:16:04:8f:
2d:1f:e7:67:68:6e:7b:6a:ff:f4:fe:71:24:ef:c9:65:a4:49:
fd:5a:39:68:e5:72:2c:09:c5:8e:03:71:92:67:9c:bd:61:9a:
44:f8:27:40:a7:51:b5:f9:87:df:f6:f3:76:68:19:36:d8:d8:
d1:3a:8b:ec:38:57:cd:7c:a7:eb:78:73:fc:cb:5f:8f:0c:14:
02:27:d4:9d:79:56:72:fe:eb:d7:ec:35:d1:b2:04:9c:6a:bf:
79:9b:67:91:b1:76:61:21:7a:1c:d6:43:7a:da:74:e0:07:b7:
41:58:00:ae:4b:02:8c:57:f7:f8:da:d7:c8:d2:42:34:50:53:
e6:40:eb:a9:b7:7f:09:91:03:6d:c6:e5:b1:ad:ed:f4:ac:e9:
6d:22:a1:12:5f:44:53:10:18:c7:62:5f:f8:12:fc:4c:6d:fd:
e1:bb:c1:6f:54:ea:5a:c5:6e:fe:6d:19:41:71:e9:9b:09:6f:
2f:2a:a9:a1:91:76:99:9f:86:ca:76:af:a7:5d:08:ca:a1:81:
77:0b:e7:1e:98:a4:13:65:ec:ba:6f:c6:1c:53:63:64:68:f3:
0d:95:3b:94:1c:9f:9a:9a:f6:43:f6:69:a1:09:41:5f:fa:f3:
c8:62:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:27 2025 by rpki-client