Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
File: rxFguAPrImHBP4yK3JU9O1r7V8w.mft (raw, json)
Hash identifier: 1pcL72fixA5fasqPHNU8TSqmN8FqVnHmFRp4ximUwlI=
Subject key identifier: 5C:59:F9:E3:39:6E:26:14:CD:BE:CA:00:14:47:0F:B6:55:E7:89:E6
Authority key identifier: AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
Certificate issuer: /CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Certificate serial: 0197838E5F93C7E5FCA80C8FFC392AF802C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
Manifest number: B9
Signing time: Wed 18 Jun 2025 15:00:35 +0000
Manifest this update: Wed 18 Jun 2025 15:00:35 +0000
Manifest next update: Thu 19 Jun 2025 15:00:35 +0000
Files and hashes: 1: rxFguAPrImHBP4yK3JU9O1r7V8w.crl (hash: 7KzjOg9f9nK/Jly9dJgZrJYu2yhEd/nomvJ2+PMViNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:8e:5f:93:c7:e5:fc:a8:0c:8f:fc:39:2a:f8:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Validity
Not Before: Jun 18 15:00:35 2025 GMT
Not After : Jun 19 15:00:35 2025 GMT
Subject: CN=5c59f9e3396e2614cdbeca0014470fb655e789e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:26:e6:a3:1d:7e:62:46:06:0e:37:99:25:
ef:85:3d:23:d9:57:12:92:94:fb:69:ac:e9:ac:6e:
68:6f:87:c7:5e:ca:a0:30:34:b5:37:a7:be:08:ec:
75:fd:60:70:5e:f9:8c:d2:5a:b9:cf:45:12:de:3b:
66:c3:97:06:3e:22:ab:1b:1d:bf:cd:c3:85:74:5e:
fc:6f:f4:ed:1c:6c:f6:8f:c8:6d:3c:92:f7:05:c0:
b6:51:ef:c9:6c:35:6f:07:84:86:1b:47:1a:c9:a0:
f2:e4:d4:8f:1b:10:0c:ea:16:a1:fe:aa:4a:40:56:
bb:fd:1f:4b:e7:8b:8f:20:67:79:1e:5c:66:28:50:
20:26:c3:26:c0:62:ee:70:1f:b8:ae:23:55:ef:1c:
07:7f:90:cb:de:58:d4:29:5f:43:bf:59:85:d5:bb:
fb:07:87:c7:0e:4c:03:d1:a1:ca:0e:75:4a:66:96:
ca:9d:e0:f3:7f:21:db:90:ef:5b:34:98:37:c4:f5:
f5:77:9f:af:3f:3d:37:3d:f4:c1:11:35:8b:a1:b3:
07:60:ac:3a:87:33:b2:d1:46:d0:f7:c0:a8:49:a8:
5a:f3:c7:7d:f4:50:16:b2:fa:cf:ff:c9:4f:19:32:
9f:f4:6c:e8:4e:cc:c7:c6:51:0f:64:dd:69:81:37:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:59:F9:E3:39:6E:26:14:CD:BE:CA:00:14:47:0F:B6:55:E7:89:E6
X509v3 Authority Key Identifier:
keyid:AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:52:f4:67:bc:dd:6e:e0:3e:86:57:7b:74:fd:01:24:a2:99:
7f:83:b6:dc:f1:14:c7:2c:46:72:0b:7a:fe:72:4f:e1:ea:b9:
d8:05:c6:df:02:14:ed:44:e1:16:a6:4a:d4:b7:6c:7e:14:e0:
5a:57:61:ab:22:c4:9f:aa:d1:62:32:94:2d:5a:27:4a:5d:e0:
40:18:7b:34:f7:33:1f:17:25:b6:96:9c:fe:3f:8c:7e:6a:6a:
2b:1c:b8:5a:73:8b:2b:f7:00:3a:bb:5e:82:c8:cb:fe:40:2c:
ed:a1:d0:e0:61:74:52:86:57:ac:a4:d8:e5:9f:a6:db:43:49:
98:a5:3b:10:cb:96:ae:61:f5:bd:17:bc:80:98:ab:27:33:f3:
26:0c:68:3e:78:3c:f6:75:f8:b3:dc:63:05:99:b7:c6:76:6a:
f3:b4:e3:85:bf:2c:95:4c:37:7e:15:ab:b8:b6:c9:64:28:82:
99:f9:9d:ff:52:4f:81:b8:74:5f:36:dd:18:3b:40:7a:11:04:
e6:5a:1d:96:a3:23:36:32:d6:96:bc:28:50:1c:94:af:05:bd:
8d:1b:d3:5a:48:70:a1:ac:a7:97:ba:f1:a2:2d:0f:93:97:d6:
ff:1c:7e:59:82:b3:b0:07:ce:8b:23:89:64:1b:94:ce:0e:7c:
08:3c:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:07:22 2025 by rpki-client