Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json)
Hash identifier: u7TMr0UE2eF4vMWHle3CHQf9UnmRxyemqadLQYLQI/c=
Subject key identifier: DC:59:B8:D8:BC:E0:AF:FD:47:3B:1B:0E:BC:03:FB:B8:FA:AB:49:90
Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Certificate serial: 0197B77C26548CB98274033C23DAA409C5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
Manifest number: 069A
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: 5b4Jrc4la0GnXJGzgAaUkhC+6GPIoWLmyNRaEMWxIA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:26:54:8c:b9:82:74:03:3c:23:da:a4:09:c5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=dc59b8d8bce0affd473b1b0ebc03fbb8faab4990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c5:63:78:7d:d2:77:e0:82:d3:39:7c:69:05:
93:6b:f3:00:87:83:b9:03:a6:2b:96:1a:39:90:2e:
45:83:0c:f7:4e:84:bb:f0:db:5f:fd:6c:e5:3c:52:
1f:95:76:01:f7:21:2c:ea:30:ab:ef:f6:22:0d:51:
5c:fe:da:84:f0:53:fe:72:16:99:73:ae:7e:49:d7:
6e:07:c6:d8:d1:24:f0:0d:f6:d4:20:3a:57:61:a7:
83:2d:e4:f5:3e:e3:dd:18:a7:d2:57:11:c7:e9:75:
22:38:84:0e:05:0d:9a:11:2d:33:ca:dd:da:67:55:
42:ac:db:43:09:32:4a:9e:49:f7:02:90:46:30:dc:
e5:b0:93:d9:e1:1e:ad:c7:e0:31:35:5b:c4:22:98:
d7:5d:16:19:e3:ef:05:33:57:f0:55:c2:04:7a:2d:
76:10:11:16:1a:3c:87:1f:13:07:8e:48:9c:1a:1e:
25:3b:6e:06:83:83:66:76:01:23:d9:74:96:4e:ba:
50:f4:d5:46:12:86:22:89:1c:a9:62:c6:62:7c:cb:
8b:8b:cb:e5:cd:b9:78:de:43:78:1c:44:d6:5f:4b:
b4:01:de:1a:7c:d5:6f:fd:d6:d9:e7:d7:ae:43:0a:
d5:9c:7b:f0:7d:ce:97:76:da:0c:a6:47:ae:87:c0:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:59:B8:D8:BC:E0:AF:FD:47:3B:1B:0E:BC:03:FB:B8:FA:AB:49:90
X509v3 Authority Key Identifier:
keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d9:3a:2b:2a:e7:5d:64:a4:4a:2f:93:c4:c6:6d:f0:99:bc:
9f:6d:a2:c3:27:27:6d:31:01:0e:c7:28:44:a7:17:fe:29:a6:
e3:7c:be:10:52:d3:4b:c1:b1:e4:02:e2:b8:8c:93:58:8a:d3:
da:a7:13:72:48:6e:fa:a8:ac:14:b8:f5:5c:dc:98:44:30:ab:
5a:29:76:13:1b:99:56:31:fb:c5:f8:46:a2:1b:46:5b:cc:4e:
2d:66:6e:8a:c1:26:cc:20:ad:fb:2d:e3:66:02:b2:ef:46:15:
e4:95:f7:43:f8:52:ed:4e:ee:09:69:04:4d:9f:11:45:c0:a8:
0d:ec:44:36:87:2b:e2:bb:fd:f1:2d:b5:b7:1e:b5:6a:88:77:
ee:f2:8c:5e:be:4f:ee:f0:13:17:91:3b:36:36:ca:b8:89:6c:
15:c4:30:c6:d7:7c:c5:98:17:d9:77:2d:10:df:a1:fe:6d:c5:
61:18:2e:a0:cf:6b:9b:cb:d4:be:f0:74:fd:af:b6:3d:19:b6:
31:c1:ed:59:c8:51:c9:71:54:70:67:9a:92:9e:f9:8a:6e:19:
49:6a:a8:60:55:ab:d3:86:12:87:a7:d4:c2:32:8b:ba:0e:ca:
2d:84:eb:7d:86:e2:3f:66:59:97:3d:99:93:30:02:e1:0a:4a:
b4:2a:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:34 2025 by rpki-client