Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier: NgeDJi5FhMqzOqOlGV58N4SyvR2/RqXLcCyYLdoLFP8=
Subject key identifier: FE:90:A4:7C:67:AA:58:AF:90:21:4C:B3:D0:3D:59:41:71:B8:5F:FA
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial: 019847093AE94C323B408CDBE53620EF05E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number: 023E
Signing time: Sat 26 Jul 2025 14:00:43 +0000
Manifest this update: Sat 26 Jul 2025 14:00:43 +0000
Manifest next update: Sun 27 Jul 2025 14:00:43 +0000
Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: 9wZa9XV+2PF+6yUwvTf5hAG9m7SlwelAt5hPDGljtvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:3a:e9:4c:32:3b:40:8c:db:e5:36:20:ef:05:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Validity
Not Before: Jul 26 14:00:43 2025 GMT
Not After : Jul 27 14:00:43 2025 GMT
Subject: CN=fe90a47c67aa58af90214cb3d03d594171b85ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:cf:a9:39:83:68:5d:cb:9a:ce:be:5a:9c:
d4:23:25:b3:bf:6b:44:5e:83:44:00:3e:59:0d:37:
29:2d:2d:4f:f6:1f:a5:88:64:57:b5:4a:a6:84:d4:
68:70:05:2d:09:98:4d:3b:d9:a1:59:61:44:5b:d0:
5e:42:24:cc:9f:40:1d:b0:e1:16:76:b2:cb:0b:1c:
2e:a9:cf:fb:7f:b2:aa:09:a7:9e:e5:3b:e8:7c:70:
51:c0:ec:ce:85:63:b1:07:43:36:4b:f0:b8:65:96:
e0:4f:2b:54:65:75:47:d6:bf:4d:d2:de:5d:d9:0b:
9b:e4:16:d2:96:df:74:ec:77:ff:26:4f:bf:3c:92:
a6:a5:1f:a4:a8:cb:b4:9b:41:0b:a1:5a:13:68:83:
30:5e:e6:4d:e4:29:6f:15:41:9d:46:fc:55:89:0d:
74:68:be:ee:5f:ec:aa:82:00:f9:bb:f5:91:e0:e6:
fb:4f:b8:d3:68:59:b5:f7:ca:bf:65:fd:60:be:7a:
b6:62:58:60:e8:20:94:4a:d9:bd:f8:5f:a3:04:17:
b2:33:95:2d:d7:6a:60:36:94:e0:20:c2:30:11:dc:
99:d0:0e:24:b7:31:73:f8:b0:2c:ba:76:14:af:2b:
dd:40:48:f2:18:b6:de:98:b0:54:b3:de:61:7a:64:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:90:A4:7C:67:AA:58:AF:90:21:4C:B3:D0:3D:59:41:71:B8:5F:FA
X509v3 Authority Key Identifier:
keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b0:fd:bf:c6:0a:42:59:19:2f:1c:5f:cb:a6:86:1f:bf:66:
3e:bc:e8:12:70:a4:4e:8e:d7:ef:e9:46:b6:87:65:e1:05:92:
60:8d:2c:cc:f8:7a:f4:42:d4:63:52:8a:81:0d:7e:57:1e:0c:
39:a5:3f:39:9d:e0:55:91:d2:7c:41:24:24:1a:17:c1:ac:d2:
f4:fd:bf:e3:32:fe:fd:b6:b7:25:f5:34:d9:91:a7:51:a0:47:
4b:e7:bc:39:c3:b9:0a:34:00:70:16:7d:86:17:04:fa:57:6e:
af:9a:ce:c2:11:7e:05:a1:7d:1b:2b:24:cb:fb:f0:62:b2:85:
34:f1:83:c1:86:3b:5c:33:cf:66:d2:04:37:b6:9a:d1:87:17:
26:5c:b6:b2:7d:72:c9:81:95:1a:77:b8:da:aa:75:65:f6:04:
67:3c:08:df:95:76:28:90:a1:c9:23:e9:68:a1:12:67:03:2d:
8f:91:09:f2:15:7f:ac:b7:a2:46:53:72:1a:fd:98:4f:4d:90:
dc:56:1b:a6:4a:df:c1:17:ec:61:f0:07:41:4c:db:18:c0:1b:
93:c6:e5:30:41:27:f4:05:90:4f:f3:7c:ad:b2:73:d6:48:ea:
e6:0e:e1:2c:10:c6:3b:42:e0:ff:2c:36:d8:5f:52:81:1c:b2:
61:a5:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:44:41 2025 by rpki-client