Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
File: mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft (raw, json)
Hash identifier: Gx3V262WctZdhABhpiBnA71erfq3asG0sI5SCXHJ0o0=
Subject key identifier: F7:01:A2:38:48:FF:6C:D9:B3:0B:28:A8:97:74:3A:75:64:91:9C:42
Authority key identifier: 99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
Certificate issuer: /CN=9972148c7362c2c9399bb3af741592c42516c547
Certificate serial: 01976C98A9C905BCDBE62A51629C617A3231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
Manifest number: 10CA
Signing time: Sat 14 Jun 2025 04:00:33 +0000
Manifest this update: Sat 14 Jun 2025 04:00:33 +0000
Manifest next update: Sun 15 Jun 2025 04:00:33 +0000
Files and hashes: 1: mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl (hash: wGAulpGrXnDbUV2pS4JaZrDt2+lhi1bPIEW7CAWwONQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a9:c9:05:bc:db:e6:2a:51:62:9c:61:7a:32:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9972148c7362c2c9399bb3af741592c42516c547
Validity
Not Before: Jun 14 04:00:33 2025 GMT
Not After : Jun 15 04:00:33 2025 GMT
Subject: CN=f701a23848ff6cd9b30b28a897743a7564919c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:32:1e:3e:38:65:bc:91:dd:36:65:54:cd:
a2:79:56:68:e0:19:5a:ed:4d:f6:2e:a1:fe:bf:87:
bf:bc:42:86:35:c7:36:03:c7:8c:b2:49:3c:a4:f9:
00:5d:34:9d:45:49:21:f5:68:47:d7:41:f7:ef:e8:
fc:14:70:3c:1a:f7:1d:09:2a:83:51:de:50:57:58:
b5:bb:93:ab:53:6b:d4:7a:41:b6:0b:e8:24:6a:3e:
28:e6:5c:b0:d4:63:16:94:20:48:b2:2b:ed:41:d5:
0e:da:6f:4f:53:d2:59:a0:48:ea:f1:27:b3:ec:05:
29:19:2f:56:6c:77:19:b3:10:f4:a3:20:49:8a:39:
4b:98:6e:e2:76:3a:34:8c:52:ba:e6:a8:66:95:47:
7c:59:be:60:ae:4e:b1:b9:d0:eb:9f:f3:4d:53:8d:
d8:f6:10:3b:21:32:a9:4d:43:54:8f:ae:e7:58:99:
e8:70:83:11:5b:8a:10:60:07:01:78:5f:ad:38:c5:
ca:0a:22:ee:e6:fb:dd:61:6a:5a:1d:c3:6b:aa:4d:
d0:a0:63:1d:a6:55:31:06:9d:2e:8e:ef:cf:6d:e2:
5c:87:b9:a4:da:21:53:cd:46:e7:a8:ec:2c:c6:f0:
2e:df:a3:c1:8a:e0:84:df:ea:e4:48:8a:02:d6:bb:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:01:A2:38:48:FF:6C:D9:B3:0B:28:A8:97:74:3A:75:64:91:9C:42
X509v3 Authority Key Identifier:
keyid:99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0b:45:cb:28:d8:4c:ef:e8:41:a5:08:1b:1a:9a:56:d9:de:
b1:67:a0:fa:21:9b:1a:66:36:53:bc:fe:2c:29:3d:97:21:3d:
71:d7:df:dd:49:e1:bf:67:d0:ef:91:3f:2c:93:7a:9d:b3:c3:
94:e2:00:be:5b:ff:52:cf:89:0a:9a:66:12:c0:83:98:3a:0b:
51:bc:70:e1:92:fb:76:da:7f:a1:e2:05:da:8a:19:a3:08:d6:
df:1e:89:4a:9b:35:95:41:07:e0:55:a6:71:c6:19:d6:66:3a:
f4:1d:d5:b9:ae:8c:4d:13:35:3f:01:db:02:58:66:6b:7d:2a:
3c:47:be:44:dd:31:0b:0a:b2:75:8e:83:0c:03:06:6c:35:64:
d2:2a:c6:56:c8:4b:7d:c9:1b:ce:22:95:03:fc:b4:35:dc:93:
ff:69:41:78:13:a0:ca:fd:c2:c9:73:27:5b:33:b7:90:2f:49:
18:dd:e6:56:3b:da:af:40:5c:a3:54:f5:fa:03:69:c9:f1:df:
b7:83:e9:52:5f:fc:d9:f5:ec:eb:dd:7c:07:2b:26:e7:2a:b9:
48:52:9a:10:42:9b:39:c1:19:02:a9:21:93:26:d5:59:54:28:
3a:f9:f2:67:94:88:b0:ff:89:c0:60:3f:c2:ad:ea:4e:1c:e8:
28:ad:11:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:39:54 2025 by rpki-client