Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: 6TcXjZXIEskSYdc3YkRHZrz4gxnx2pPqFvW3BJ4bNeQ=
Subject key identifier: F2:43:0F:A4:5C:7D:CC:22:5E:F4:8C:A8:2E:75:97:32:88:B5:66:5D
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 01984852DBF3FCA804CE48C76F8B127288FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 04FA
Signing time: Sat 26 Jul 2025 20:00:46 +0000
Manifest this update: Sat 26 Jul 2025 20:00:46 +0000
Manifest next update: Sun 27 Jul 2025 20:00:46 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: fWFoFY5O9olS1HhWZVKxKgpKoPFvNdwSKzq+X2R5zfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:db:f3:fc:a8:04:ce:48:c7:6f:8b:12:72:88:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: Jul 26 20:00:46 2025 GMT
Not After : Jul 27 20:00:46 2025 GMT
Subject: CN=f2430fa45c7dcc225ef48ca82e75973288b5665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:5b:c7:75:54:df:82:ba:2a:e6:6f:a0:45:
06:67:f9:42:3b:01:39:cd:ff:9a:d6:92:72:74:c8:
f1:bc:df:41:19:3e:9f:9d:c3:7e:bc:f1:1d:97:38:
8f:74:6b:cb:d2:62:ed:9b:32:6a:e7:ea:b5:9e:bf:
e6:45:54:35:2d:9a:24:ea:40:ee:06:99:9f:84:b8:
ef:b0:e7:cd:d9:ea:0b:07:3a:e7:b4:ba:01:7c:b5:
32:4c:e6:1a:39:2f:45:95:2d:70:dc:e4:f5:42:ec:
f7:7c:55:2e:02:7f:49:bd:ca:a0:23:e4:c0:d4:4b:
49:62:45:6f:c7:40:33:6c:94:77:bd:db:3a:b6:e0:
60:90:7b:48:ed:b1:a0:e4:b8:b2:1a:95:50:f2:d0:
9f:81:aa:d8:39:84:4b:53:24:eb:62:78:c8:05:96:
52:5f:9a:fc:10:fd:ba:11:a9:d8:02:25:c8:b9:5d:
24:0a:c5:7c:10:67:49:64:96:00:bf:4b:1f:ba:82:
ce:ee:2f:a7:f2:39:96:b0:50:c1:e6:0a:38:56:a1:
32:90:b4:eb:f3:b1:fd:76:db:20:b4:f4:da:34:32:
f9:54:fe:6e:49:80:e3:d3:f1:86:0d:53:ba:0f:5f:
55:19:6b:a7:a1:86:aa:57:56:f7:5a:ae:94:fa:15:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:43:0F:A4:5C:7D:CC:22:5E:F4:8C:A8:2E:75:97:32:88:B5:66:5D
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:16:ec:fc:80:7a:0f:3c:2d:a2:ed:2c:be:e9:0f:80:15:f6:
4f:80:f9:ab:e0:85:41:f1:71:75:a6:b0:db:6e:20:2e:02:7e:
a1:60:05:30:05:6e:59:22:71:6c:72:f5:cf:9f:c1:77:cc:b9:
02:bd:2a:a0:05:91:23:90:6c:5d:33:34:f2:68:97:08:ac:ed:
2f:67:a1:5b:19:88:01:06:8d:a5:91:ce:db:f2:4f:4a:06:26:
1b:aa:df:5e:15:e4:97:7e:e6:66:da:32:d8:41:93:a6:18:48:
1d:39:c9:31:72:7b:ba:31:71:ac:37:43:e1:fe:46:68:04:c6:
94:2a:77:83:9c:77:47:23:24:fd:ee:ac:32:62:7a:a5:af:ba:
52:7a:ed:60:99:a0:9d:aa:95:e7:ff:31:95:87:9d:a9:c8:eb:
96:7e:06:df:53:50:c4:8f:c7:cb:fa:a1:70:d8:5f:91:cd:da:
0f:9e:5c:0e:b2:d0:2d:62:46:72:2a:34:82:f4:50:51:1e:aa:
e8:07:00:12:f4:76:7a:c8:6e:62:38:91:9c:18:f0:b7:e9:8b:
52:df:4c:79:ca:2f:3e:be:88:fa:75:62:37:c7:ee:f3:07:be:
9b:0f:ec:30:69:76:47:1c:e5:46:dc:58:c3:12:11:8a:5a:72:
2b:40:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:56:43 2025 by rpki-client