
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
File: RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json)
Hash identifier: t1S+XRGPCgD2pzE0/ADBQ3T2814XKJCM9Kkbf7xKjwM=
Subject key identifier: 22:AE:6F:59:39:68:AE:3C:7A:8E:88:44:C4:AF:0E:D4:98:AB:54:2D
Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Certificate issuer: /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Certificate serial: 019872CFE3F7657CF35EA290CD0E55004795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
Manifest number: 03CB
Signing time: Mon 04 Aug 2025 02:01:23 +0000
Manifest this update: Mon 04 Aug 2025 02:01:23 +0000
Manifest next update: Tue 05 Aug 2025 02:01:23 +0000
Files and hashes: 1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: J26EEg6eGXHMRox2XRjANNboBTf2PJV4m960A0K8ELA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:e3:f7:65:7c:f3:5e:a2:90:cd:0e:55:00:47:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Validity
Not Before: Aug 4 02:01:23 2025 GMT
Not After : Aug 5 02:01:23 2025 GMT
Subject: CN=22ae6f593968ae3c7a8e8844c4af0ed498ab542d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:99:6f:f2:66:f3:1c:c9:0d:f1:11:b2:a8:
64:12:7f:cb:d0:de:9f:9a:8f:8e:6e:39:ea:a7:08:
7f:0b:90:09:e6:9a:31:11:60:49:a0:85:34:91:72:
e1:1a:40:31:17:29:a2:34:74:1b:a4:a6:55:68:1b:
94:ff:b0:d7:f3:a5:4a:bb:b0:b3:54:48:09:e2:ac:
67:a1:64:a7:8f:21:ec:48:75:bb:6b:5e:93:d1:a5:
52:80:ea:44:ff:37:48:68:f9:33:e7:a7:be:f1:93:
ed:34:21:3e:20:2c:35:fa:ba:05:c5:84:25:b5:24:
64:7e:95:7a:b2:41:f8:97:b7:1f:2f:a9:cb:1d:a2:
8a:c3:be:b8:0b:74:fb:d0:fc:de:5c:a2:9e:7e:a0:
72:86:26:e9:8c:03:95:0d:77:0a:51:57:19:5b:a9:
ce:19:ca:1b:6b:e1:06:d2:a7:d5:77:56:2f:26:42:
59:cb:dd:6e:9d:05:5c:20:76:29:56:8f:05:be:85:
c8:f2:36:a2:81:99:2f:4e:41:1f:af:6e:05:e6:68:
06:18:44:b4:51:b9:95:b3:bd:2c:c7:16:08:81:a1:
0b:75:e0:b3:be:79:cd:0d:15:4e:46:ec:04:a7:34:
32:4b:43:5a:f3:7c:a0:63:bc:52:95:45:c8:d4:71:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:6F:59:39:68:AE:3C:7A:8E:88:44:C4:AF:0E:D4:98:AB:54:2D
X509v3 Authority Key Identifier:
keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a2:6f:73:3e:40:3e:ca:d5:6f:7d:1f:ec:46:d4:e1:4b:a4:
a0:8d:be:af:a8:86:10:3a:c8:2c:33:fa:f2:34:00:6f:89:8e:
69:97:b4:ab:6a:a9:d2:99:94:27:b0:21:c0:80:5b:8e:62:0d:
38:fd:36:a0:f3:4f:9f:5c:d6:8b:21:88:b1:e2:9e:4d:91:5a:
ec:45:e6:7d:b2:54:68:a2:7c:3b:01:d9:24:4d:9d:9a:6f:a0:
ee:5e:27:8f:56:4e:ab:62:46:b9:3e:04:88:bc:cc:99:b0:91:
32:14:03:90:97:9d:b5:bc:35:57:d6:e0:46:00:33:43:60:a2:
16:f4:0a:16:71:62:e3:74:ed:74:28:94:35:b5:c7:ae:30:1f:
62:4e:1c:b8:53:20:3b:4c:a7:dd:a2:71:3a:37:49:48:bd:4a:
2b:0a:d4:4b:a9:6e:36:7d:b7:b9:6a:e0:ed:59:0a:17:40:02:
ec:44:aa:e2:56:b4:ab:59:15:13:d6:c9:3e:0b:ee:ca:57:e0:
98:cc:0b:50:65:1a:b7:b5:f9:fa:67:cf:5c:de:69:fe:d5:9a:
f9:c7:ee:71:d8:52:25:02:e6:35:d7:41:9b:b6:22:fc:2d:4f:
41:18:84:5d:7d:88:38:1c:bc:0b:fc:ea:ee:b0:80:a4:30:35:
c5:49:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:16 2025 by rpki-client