Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
File: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft (raw, json)
Hash identifier: VQ5GZPlps08idG0eLSL/DULXEvqsW0WOfoz+mgtDGLA=
Subject key identifier: 94:10:67:02:C8:09:D8:A2:44:7A:AC:B8:B6:7C:50:BC:D7:5B:74:DC
Authority key identifier: 99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
Certificate issuer: /CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Certificate serial: 0197C123E48E03B5CA54459374D13691F97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
Manifest number: 1178
Signing time: Mon 30 Jun 2025 14:00:44 +0000
Manifest this update: Mon 30 Jun 2025 14:00:44 +0000
Manifest next update: Tue 01 Jul 2025 14:00:44 +0000
Files and hashes: 1: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl (hash: MiSM0NPIHvkpIi9XPq+yMD5dyS04Flw93la+kOzfeqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:23:e4:8e:03:b5:ca:54:45:93:74:d1:36:91:f9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Validity
Not Before: Jun 30 14:00:44 2025 GMT
Not After : Jul 1 14:00:44 2025 GMT
Subject: CN=94106702c809d8a2447aacb8b67c50bcd75b74dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:a1:88:ec:07:da:00:27:fa:e9:83:2f:b6:
26:b1:e0:f4:e9:29:ac:6b:de:bb:5e:f0:f3:06:2e:
b4:6e:d3:83:df:fb:8c:ae:7c:9a:d9:c5:39:d3:d7:
02:15:bf:23:51:67:09:b7:62:2c:e6:ca:49:c5:5a:
9d:8d:13:77:81:e5:1f:bf:01:e1:0a:eb:34:fc:45:
6b:12:9a:2e:64:f5:09:b7:98:f9:cb:30:65:82:87:
14:b2:c7:36:b2:f0:98:18:ac:c2:67:96:61:bc:60:
04:e4:89:84:c7:92:34:0a:6f:ad:27:aa:46:fe:eb:
9d:45:59:62:67:01:18:c2:29:19:59:78:3e:05:78:
08:8c:a9:8c:a2:74:61:f1:02:10:5d:9d:bc:fb:d0:
0d:ea:ba:93:af:5c:e8:b3:95:6d:f2:dd:c2:85:db:
90:22:e2:cc:86:6a:14:7a:96:ea:e9:2d:50:50:f9:
65:89:b7:16:14:5e:e5:19:45:bd:9f:8b:66:cf:6c:
60:d5:2e:e8:91:03:f3:36:55:4f:47:0e:07:d4:52:
55:d4:96:0f:2b:68:17:a0:c9:31:ec:13:20:ac:fc:
8c:12:37:96:32:d1:74:c1:53:25:64:71:94:95:ca:
d0:d0:22:5f:e7:1c:db:cd:eb:ca:d0:8b:35:3d:42:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:10:67:02:C8:09:D8:A2:44:7A:AC:B8:B6:7C:50:BC:D7:5B:74:DC
X509v3 Authority Key Identifier:
keyid:99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2e:1b:cc:29:77:53:de:65:19:b2:fe:30:20:05:30:b0:46:
c4:b1:14:9c:a5:32:bb:14:fc:33:72:ae:af:7a:83:e2:e1:76:
0b:f7:27:f1:2f:59:ed:9e:49:ad:cf:fc:dd:1b:fe:af:fb:21:
8d:ff:31:f9:33:a3:6c:33:47:4d:06:27:7c:da:eb:fb:fb:4a:
a3:75:c6:3e:3a:01:b5:99:44:87:ff:17:8e:4f:0c:33:29:26:
7f:09:38:36:a2:e1:48:32:2b:bf:95:57:68:21:a1:70:d9:44:
58:63:08:be:62:b4:9d:20:11:36:44:6f:5f:c4:25:7c:f1:a4:
9c:88:16:91:59:63:08:ff:e9:4d:98:51:2f:87:10:1f:b9:83:
15:d0:1e:0f:60:f6:cb:15:58:c3:b7:fd:33:f8:6d:ab:09:a2:
b5:9b:a5:a8:02:a8:ea:74:90:99:cd:f8:54:c6:44:a5:2c:53:
ba:c4:40:30:6f:ae:ad:3f:6f:c3:d3:e1:64:ac:91:77:bd:03:
6e:ef:93:9d:7e:18:40:8a:94:07:77:0b:88:34:18:71:62:c7:
3f:22:ff:f6:7c:66:ab:4d:2f:51:18:85:22:78:be:32:9d:6f:
3c:64:c5:4f:67:e7:06:a9:b4:71:ae:04:04:f0:e4:be:dd:86:
af:76:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:49:34 2025 by rpki-client