Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: TFASTb/OY+KRX7aB1SOBce75VrWv54EoDFmsHcrlYHw=
Subject key identifier: 43:4B:37:7F:55:5B:EC:19:E6:9C:2E:87:57:E1:41:2A:33:C1:F2:D7
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 0197B6A240D53C1D52C1E77CDA19B7303E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: ZQ7D1DlrQ4DXeH/QrQ9ynvWLLCwSWdXLdU0OU9HwA+w=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:40:d5:3c:1d:52:c1:e7:7c:da:19:b7:30:3e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=434b377f555bec19e69c2e8757e1412a33c1f2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c8:5b:f5:a6:7d:f0:3d:37:b0:5b:8b:da:29:
47:f8:b8:63:c1:77:04:18:11:76:6f:4f:02:26:7d:
a3:93:f1:91:1f:95:73:ae:8c:34:12:df:96:e4:23:
5f:de:a8:5a:45:ff:19:04:50:ea:60:58:d1:34:7f:
16:54:5e:e5:be:1b:67:0c:07:0a:bf:6a:c0:d3:46:
ca:3a:71:a4:8f:09:25:b1:4f:ff:27:3e:a0:46:fd:
08:41:1c:27:27:cc:43:98:3e:0b:78:e5:16:49:db:
7d:55:14:1e:e3:c5:ac:7d:c4:79:d7:20:54:4d:37:
e7:c4:83:fd:d2:9b:60:d9:04:f8:2a:f2:da:bd:50:
e0:6f:f6:72:c2:fe:d5:05:f8:ed:61:a0:c0:af:18:
3b:a8:b3:db:5f:75:a4:aa:cf:01:68:8d:83:a2:c9:
8a:58:bf:c6:42:71:b8:07:84:c3:2b:5a:53:bd:92:
b0:57:cd:dd:c9:f7:17:65:4d:c1:fd:f3:dd:76:fa:
95:a5:0b:96:b9:34:0b:7c:ee:a8:c6:b9:df:50:5d:
75:62:fc:21:4a:ed:63:d2:a9:98:fb:69:e1:2e:7b:
fa:a1:72:2a:1c:38:7f:c1:a0:fe:79:9f:d1:be:19:
90:e1:97:58:53:90:49:5f:75:b5:8d:b1:c3:fa:f0:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4B:37:7F:55:5B:EC:19:E6:9C:2E:87:57:E1:41:2A:33:C1:F2:D7
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b3:cb:8c:ba:6f:76:b8:2f:14:3b:2b:c3:e3:85:40:4d:ca:
38:f9:48:a0:60:62:b9:71:65:52:20:ce:04:7e:9c:15:cf:09:
94:1f:49:1d:81:26:3f:ad:9e:ad:68:5f:5e:cc:bb:91:84:7f:
2f:73:0f:78:03:b8:45:c4:d1:ab:b1:9f:73:11:c8:99:0f:c7:
c0:5a:33:bd:8a:69:b7:9e:40:03:c2:36:ed:2e:11:de:44:8d:
49:17:3a:ff:32:a4:85:2b:1b:2b:08:77:68:9e:57:07:51:75:
b0:18:7b:39:f1:15:48:a6:bc:07:a3:50:b1:4d:af:37:27:3b:
d0:22:b9:ec:59:0d:53:c7:c5:69:e2:6a:0b:c3:7e:8d:e0:05:
a3:43:ba:c0:8d:a0:d9:70:63:71:bb:ee:20:a2:65:cf:34:29:
3e:ec:48:6f:69:f9:22:07:cd:f3:3a:15:d8:1b:d3:40:0a:f2:
ed:5e:78:77:49:97:3f:41:ad:df:b5:44:3a:e7:f7:92:73:29:
cd:0a:b5:09:52:5a:eb:b7:23:b9:78:4b:e4:03:d5:e3:9b:4f:
18:99:c2:16:07:81:d5:6a:e1:8a:b9:73:d8:54:95:a7:94:de:
33:e2:d8:3c:c8:e7:f3:16:c3:af:73:8f:05:66:27:08:cc:25:
97:5a:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:45 2025 by rpki-client