Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: Tjw0olwXbKIt/5jfLQlMtZkbM9M/bs43QmY9YnwK9nY=
Subject key identifier: C5:0C:0C:D8:E1:EF:3A:2A:2F:27:78:AA:1E:34:A4:8A:9C:E7:17:C6
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019873E373CBA7529C976CDFAE990FE14C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:22 +0000
Manifest this update: Mon 04 Aug 2025 07:02:22 +0000
Manifest next update: Tue 05 Aug 2025 07:02:22 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: lQP/aWQcZ/FlMXnSb3Cbrt+w31HClBIQybJRpXwtSHA=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:73:cb:a7:52:9c:97:6c:df:ae:99:0f:e1:4c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Aug 4 07:02:22 2025 GMT
Not After : Aug 5 07:02:22 2025 GMT
Subject: CN=c50c0cd8e1ef3a2a2f2778aa1e34a48a9ce717c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:63:2c:9f:05:a9:dc:07:cc:69:23:07:e4:
87:69:27:a8:fb:d9:93:95:b2:9b:28:6d:da:6b:64:
77:93:cf:ae:ff:73:6b:b3:45:76:9b:12:57:de:c0:
df:8c:5f:a0:99:84:7a:86:98:2f:22:66:c6:48:f6:
31:1a:e7:ed:f2:96:df:bb:9b:88:5c:ac:a9:b4:87:
9d:7b:50:27:90:61:1d:31:95:5a:b0:71:7f:68:ee:
4a:a8:67:c5:b7:f5:58:23:03:17:02:c0:32:40:f7:
aa:83:a4:7a:15:29:24:b8:f9:26:df:5a:1d:d5:98:
8e:68:f8:b2:ec:89:1f:03:26:16:db:18:88:fd:9c:
8d:02:fb:64:3b:a2:77:22:0d:6e:f1:6e:72:52:89:
a3:1b:44:c4:cb:71:1c:82:d6:d8:c3:ba:2b:37:7f:
4f:33:c7:4e:06:bf:32:e7:de:1f:67:be:cc:a8:68:
3e:e2:31:ef:50:8f:98:a6:1e:6b:20:9f:94:e2:cb:
25:48:48:c4:ac:6d:a3:b7:d1:39:60:85:51:a0:97:
04:56:b8:3f:b9:33:19:80:05:3c:cd:0f:2f:f9:a6:
b2:87:41:b2:3c:69:ec:e0:fe:f1:84:92:97:ae:a9:
3b:51:c0:d6:0c:c1:a9:a2:21:b5:f9:ea:89:7a:19:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0C:0C:D8:E1:EF:3A:2A:2F:27:78:AA:1E:34:A4:8A:9C:E7:17:C6
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1f:94:06:15:75:f6:23:45:28:7f:d5:ad:21:43:7b:7a:de:
6d:f7:1f:97:79:cc:6f:00:aa:2d:bd:26:a9:dc:65:77:28:a1:
22:e8:c5:7a:38:1f:64:3f:2b:da:df:d0:30:2c:9f:4a:52:14:
c0:21:69:14:67:e0:8c:45:80:00:94:61:13:f5:34:62:cf:e2:
a1:3d:ff:61:c2:ad:a1:ad:1c:cc:75:8f:7e:d4:23:3d:2d:5a:
b1:7d:ae:07:97:1a:02:11:12:75:0e:35:80:a2:21:da:53:a7:
0d:77:77:25:2a:f9:70:5b:0a:ff:64:ed:c8:96:34:4a:e9:16:
c0:04:81:bb:90:b5:46:f7:a0:70:db:86:6d:08:0b:79:96:8e:
ca:b9:30:59:0e:8e:63:c8:1b:3b:3d:f4:50:47:93:ed:e9:3d:
9f:cd:97:9f:1e:e9:4b:7c:0b:5c:cf:61:4c:5f:d9:52:91:09:
e3:9d:ae:79:05:c0:e8:ae:e6:4a:2b:1f:7d:20:32:9a:e6:ba:
a7:31:5b:72:d7:ee:e4:52:ad:1e:62:74:91:de:8e:c5:7b:5d:
a1:55:46:3e:8c:30:4a:74:35:1d:db:cb:cb:29:68:57:c1:03:
73:eb:4b:f9:ed:25:65:53:15:77:cd:93:b3:62:8e:40:55:98:
f7:4a:5d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:23 2025 by rpki-client