Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
File: sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft (raw, json)
Hash identifier: lZXgmvtHOLbH61j96WvGpPFVyBmrfCk5N/CFcGZMrts=
Subject key identifier: F4:2E:49:DE:46:58:20:8E:44:BD:07:B4:8F:78:13:A8:CB:25:D0:2B
Authority key identifier: B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
Certificate issuer: /CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Certificate serial: 01976D3E3619224181A0F517E066AC54298B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
Manifest number: 02E3
Signing time: Sat 14 Jun 2025 07:01:22 +0000
Manifest this update: Sat 14 Jun 2025 07:01:22 +0000
Manifest next update: Sun 15 Jun 2025 07:01:22 +0000
Files and hashes: 1: sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl (hash: PG44+p8fWYvVpVpAJqrL+541hI5zn7PvaTUljSVNk9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:36:19:22:41:81:a0:f5:17:e0:66:ac:54:29:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Validity
Not Before: Jun 14 07:01:22 2025 GMT
Not After : Jun 15 07:01:22 2025 GMT
Subject: CN=f42e49de4658208e44bd07b48f7813a8cb25d02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:2a:fc:d1:d3:2b:7b:ea:fd:71:55:cb:e6:
b2:80:f5:3b:c4:bd:80:af:a5:6e:c6:19:ee:45:be:
24:f9:cd:7c:d4:a1:8e:df:0f:9f:64:dc:29:b1:44:
c7:6a:4b:22:09:d4:1e:d6:24:36:e3:65:c0:ef:a3:
e5:ed:63:46:9d:25:81:92:f9:d4:e6:4e:e1:49:50:
c5:61:87:d2:a1:dd:cd:85:fc:02:dc:88:e0:b1:b5:
0f:07:8e:02:a4:90:e8:85:84:3d:5f:8d:79:5f:af:
ac:e6:0a:c6:8a:db:1d:40:9f:4f:3c:79:fc:c9:25:
28:5a:7a:75:fe:36:0f:4e:c4:ec:6c:c0:47:02:8f:
94:8c:17:e8:ec:03:b7:e3:cf:a2:54:f2:2d:7a:78:
29:62:4e:8d:22:4f:55:43:cc:a5:b8:95:fc:17:8f:
40:22:f6:a5:a9:10:2c:db:f5:e2:60:f7:0c:e4:7b:
fb:d6:a0:8b:81:0d:65:4c:b7:1b:17:93:bb:b9:c2:
cd:81:bf:48:6e:f9:90:1b:ef:4d:10:27:5e:4e:01:
ea:18:33:5b:65:be:8d:bf:8d:62:67:0b:79:d3:ee:
a1:bb:d5:a1:84:ba:01:09:bd:f1:ce:92:dd:8b:f6:
20:15:b6:f6:26:43:4b:d3:59:51:71:b0:58:20:8e:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:49:DE:46:58:20:8E:44:BD:07:B4:8F:78:13:A8:CB:25:D0:2B
X509v3 Authority Key Identifier:
keyid:B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:cf:0c:03:f1:33:49:db:b1:55:5c:14:25:48:04:f3:84:a9:
90:17:6b:1f:fd:08:2c:49:ce:b4:3a:ae:6e:c6:64:55:9f:23:
04:0d:88:3b:43:fe:f7:ec:d3:25:90:43:a5:fd:2e:d1:aa:45:
6e:0f:bd:88:6f:3d:fd:3e:42:19:d7:58:43:e9:7a:51:4b:f6:
57:6b:2f:b4:20:71:c1:28:e3:cd:bc:93:75:58:d4:08:05:9c:
2c:d9:6d:b0:31:29:d6:8e:7e:c2:ac:bd:fb:bc:a3:3d:03:8a:
a0:6e:28:a1:ce:0a:e0:2a:78:3c:2b:92:a9:66:bf:c3:cd:75:
d5:50:9e:d8:a2:a7:a1:3f:27:60:75:e4:4b:8a:04:15:78:29:
be:eb:f6:02:d2:08:19:98:eb:24:53:da:da:79:8f:9b:5a:6b:
15:70:47:5d:3f:16:15:b2:19:36:43:07:c6:e0:c7:41:a2:bd:
9e:4f:d5:25:c6:4b:fe:91:f1:6e:1e:bb:16:a0:25:18:a9:39:
bf:75:2e:f9:da:86:fe:4f:d6:71:7c:33:7e:70:57:03:cd:2b:
bd:04:ba:47:b2:27:a6:8c:73:67:a6:13:de:e5:b0:c2:12:d9:
3f:08:87:9b:dd:41:4f:29:0b:e7:1c:17:ee:7c:ee:64:38:1a:
4e:52:dd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:45 2025 by rpki-client