Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier: lMU8hyUOVty6WU/ZY7VahC9ZpLDmKKSx5g2eLTEWqZs=
Subject key identifier: CD:0F:C1:20:5B:48:5C:B7:27:53:46:12:A4:12:2B:B6:AB:8E:8A:6A
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial: 019776E6505BDF5A7E9CBF61DA9F4EB49E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number: 1591
Signing time: Mon 16 Jun 2025 04:01:34 +0000
Manifest this update: Mon 16 Jun 2025 04:01:34 +0000
Manifest next update: Tue 17 Jun 2025 04:01:34 +0000
Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: md83lKBNCeLzaC2pttkA2ZxMo+vo5V7pNsZwETMrGJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:50:5b:df:5a:7e:9c:bf:61:da:9f:4e:b4:9e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
Validity
Not Before: Jun 16 04:01:34 2025 GMT
Not After : Jun 17 04:01:34 2025 GMT
Subject: CN=cd0fc1205b485cb727534612a4122bb6ab8e8a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:f7:15:6a:d2:50:5b:9f:4d:bd:c2:12:62:
62:9d:84:77:32:ac:4e:e1:8e:87:72:35:64:ac:54:
52:1b:e0:74:fb:f9:45:de:7a:de:97:6e:9b:b5:29:
08:b6:12:f6:4a:6c:95:ab:9e:90:94:5a:d7:01:d0:
00:56:a6:1e:79:75:2f:f0:3b:22:d4:ab:44:83:6a:
bc:67:f3:dc:4f:5f:36:e3:0b:55:cd:a1:b7:0c:04:
3b:bc:3d:4e:b0:f1:07:d1:96:63:79:cb:c4:db:1c:
eb:30:5b:a4:2f:7c:f7:9b:b0:cc:57:a7:da:a5:7c:
2a:b7:f8:07:56:98:a9:ff:25:d0:10:40:0a:94:32:
27:be:83:ce:1b:fd:f8:b5:c9:48:74:68:66:1d:4c:
96:0a:b2:e7:b1:78:ca:61:9e:ed:0d:1e:0a:a5:40:
62:a2:32:2b:18:cb:88:94:d3:6c:70:fd:b7:b8:71:
14:7a:50:8c:e5:cf:27:01:81:f1:b1:2f:af:e2:0e:
21:01:3d:25:b7:79:bd:69:39:b9:86:9b:d3:2b:b6:
f9:cc:0f:b4:2f:76:2d:b3:4d:9a:d1:c7:2b:30:78:
87:63:72:f9:c1:b4:83:cc:39:d7:df:bf:1b:f3:8f:
7a:3b:9c:ec:3f:55:5d:e8:ea:c9:0f:9e:bf:25:5d:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0F:C1:20:5B:48:5C:B7:27:53:46:12:A4:12:2B:B6:AB:8E:8A:6A
X509v3 Authority Key Identifier:
keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ad:16:fd:45:cc:61:b2:95:1b:e7:3f:1f:9f:93:49:04:a2:
95:96:2b:df:b9:03:4e:03:9d:9c:3a:89:55:7d:9c:6e:32:c0:
60:a2:6b:46:ad:62:de:3a:f5:bf:64:7e:7a:99:a7:5c:0b:bd:
fa:20:d7:68:70:88:5a:59:b4:64:c2:7e:9f:12:d5:48:00:e2:
76:a2:31:02:0d:56:b0:63:4d:25:b2:cb:4f:4f:d7:e5:e8:07:
25:2f:d4:60:cd:78:71:a5:a7:88:04:ce:bd:46:9e:20:81:83:
b3:c5:20:3a:91:14:bf:46:58:00:aa:39:5b:a8:ef:0a:2b:fe:
be:2e:6d:37:49:22:93:e4:9b:e2:11:5e:ac:4c:da:94:e9:23:
a5:9d:ee:43:74:96:22:38:2c:d5:aa:88:3e:fd:91:e5:e7:29:
50:27:f2:aa:9e:35:87:1d:ff:6c:88:9e:58:57:be:d2:41:f7:
8d:08:c3:37:0f:ce:4d:41:66:83:41:14:e8:3c:3c:d3:23:58:
48:75:3d:51:f2:74:5b:8c:0f:5b:cf:0d:04:6a:99:6d:ae:f1:
72:67:9b:93:30:81:bc:1e:00:4a:da:1c:31:fb:a9:68:5a:c0:
99:17:8f:84:32:6c:5a:e9:b2:1d:1e:f7:eb:a7:46:97:d6:01:
cb:85:72:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:14:59 2025 by rpki-client