Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
File: rxFguAPrImHBP4yK3JU9O1r7V8w.mft (raw, json)
Hash identifier: vp5F5/ahgUKX5Rb2G5APtYk6krx/NiPMzD6pgjPZpWc=
Subject key identifier: 4E:17:A2:63:98:EA:2F:47:62:DF:5F:B3:3B:0C:6A:85:05:AB:09:95
Authority key identifier: AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
Certificate issuer: /CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Certificate serial: 0198808B7C3D9D7B211FC02B312F23D9CB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
Manifest number: 013C
Signing time: Wed 06 Aug 2025 18:01:21 +0000
Manifest this update: Wed 06 Aug 2025 18:01:21 +0000
Manifest next update: Thu 07 Aug 2025 18:01:21 +0000
Files and hashes: 1: rxFguAPrImHBP4yK3JU9O1r7V8w.crl (hash: rs5wCiXYKXN9LJ4NMmGGr9g4S/l4KGHUt9Enjx7F5l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:7c:3d:9d:7b:21:1f:c0:2b:31:2f:23:d9:cb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Validity
Not Before: Aug 6 18:01:21 2025 GMT
Not After : Aug 7 18:01:21 2025 GMT
Subject: CN=4e17a26398ea2f4762df5fb33b0c6a8505ab0995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:bd:60:d9:73:87:39:91:9a:7f:51:a4:a6:
a9:52:df:57:ce:7c:ab:af:d2:7c:1f:82:97:01:43:
8e:ea:53:30:be:4a:e8:3b:e5:41:31:11:ba:35:8e:
db:98:09:b7:05:92:bd:ed:b0:62:1d:8c:f8:f1:1f:
13:0a:74:0c:fa:52:1e:3d:ff:67:99:fd:e3:3b:5e:
12:98:4d:ae:a1:1d:cc:07:2b:14:56:22:ff:c4:58:
c1:aa:ab:83:42:93:9d:46:85:ed:dc:ed:54:46:05:
2c:f4:5a:af:05:7b:08:fc:50:15:97:85:0e:66:43:
e6:47:35:dc:3e:dc:d8:e3:08:4b:79:c5:2d:95:5b:
6d:a8:e1:1c:24:f5:24:7f:0f:8d:1b:33:c8:c3:95:
8f:98:bd:5d:59:47:b9:43:70:eb:6d:25:38:29:06:
7d:26:48:e7:30:9d:47:b6:6e:83:01:44:35:6c:42:
99:03:2b:e1:6b:38:07:ed:d3:4a:ad:c1:e0:35:69:
a3:c3:53:3b:44:cb:a6:f5:a1:df:0e:57:ca:a8:33:
a3:df:80:3b:4e:83:ae:bd:5a:f2:b6:0e:54:d5:15:
06:dc:fa:ce:53:07:eb:f1:ce:37:6b:7e:2b:33:2b:
78:cb:86:d8:2e:95:fd:e4:1d:88:83:33:20:1d:a6:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:17:A2:63:98:EA:2F:47:62:DF:5F:B3:3B:0C:6A:85:05:AB:09:95
X509v3 Authority Key Identifier:
keyid:AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:00:cd:43:9e:80:02:15:80:99:47:17:9c:60:72:6c:9d:c7:
63:e6:91:81:f1:6f:4a:fa:f0:73:7e:90:b5:c7:e8:47:0a:f0:
a0:f8:cd:08:86:ea:f4:64:97:b2:93:b0:18:05:49:a2:12:61:
6e:7f:2e:c2:88:1f:1a:58:23:da:d4:d2:b2:0d:c4:95:d1:44:
bf:b4:0e:f0:a0:00:f9:aa:6c:21:b1:64:03:2d:c3:2c:89:e5:
b0:97:3e:e1:f0:6a:0b:82:95:c3:da:16:55:39:49:ea:9a:40:
64:47:bb:f8:c8:54:27:8a:0a:bc:44:5f:d3:92:d6:44:a7:47:
89:e0:e6:9d:0c:9a:e0:ae:dd:43:89:c6:94:45:48:1c:b7:45:
d6:3c:03:1f:39:89:78:45:78:d7:32:98:8b:3e:a7:ad:e4:a3:
5e:42:8c:fc:6c:f5:fb:00:8b:24:83:7d:dc:4d:9b:05:61:4d:
d4:d2:a4:d9:3f:2d:72:4e:21:83:8d:8d:44:5c:94:6b:36:c8:
93:f9:20:25:4f:a0:9f:ec:83:13:f1:37:e5:d5:c9:a8:63:73:
e0:0c:19:f8:59:f3:50:5e:f9:bf:39:61:cc:b0:c2:25:b5:2f:
f0:51:33:e9:63:57:c0:e2:6d:10:db:11:0e:3e:20:f0:8d:0d:
fc:a7:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:53 2025 by rpki-client