Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
File: a1xW3Y1JexBoE6IloYFxST7jKoU.mft (raw, json)
Hash identifier: +pQAXGp8N3QhH9WchiXRxKrvG+VpsU14sfCZFxqmsF0=
Subject key identifier: 08:5F:8C:96:66:B0:F8:CF:4E:C5:81:A1:A4:02:58:42:09:F8:61:74
Authority key identifier: 6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85
Certificate issuer: /CN=6b5c56dd8d497b106813a225a18171493ee32a85
Certificate serial: 019827B5463CD3365168ADA6BD04BA6D9B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
Manifest number: 30
Signing time: Sun 20 Jul 2025 12:00:47 +0000
Manifest this update: Sun 20 Jul 2025 12:00:47 +0000
Manifest next update: Mon 21 Jul 2025 12:00:47 +0000
Files and hashes: 1: a1xW3Y1JexBoE6IloYFxST7jKoU.crl (hash: AHrlaESY4wbfsoE8UKewTylGVFv6s2SKlbbXWZeiNso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:46:3c:d3:36:51:68:ad:a6:bd:04:ba:6d:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5c56dd8d497b106813a225a18171493ee32a85
Validity
Not Before: Jul 20 12:00:47 2025 GMT
Not After : Jul 21 12:00:47 2025 GMT
Subject: CN=085f8c9666b0f8cf4ec581a1a402584209f86174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:f6:76:bb:a5:ee:2a:f1:ae:a6:84:e0:c5:
37:c4:52:48:ea:1b:a7:31:24:4b:05:c8:45:59:91:
68:aa:2a:28:ed:9c:64:81:09:b3:db:5c:e4:96:06:
fa:6e:1e:1f:8a:18:ce:82:6a:21:d2:76:18:5e:67:
98:b5:ef:33:c4:ca:4b:19:51:02:f1:50:49:3b:a1:
06:5e:44:88:8c:58:e1:8e:00:d1:fc:c3:38:26:60:
d6:d2:e8:28:0e:ad:72:b3:91:f2:e9:8a:26:e9:34:
fc:ad:8f:87:2c:7b:55:62:6e:f2:79:e3:fa:d3:72:
1e:e2:64:08:6c:fd:ab:06:dd:c5:8d:0f:cc:34:75:
da:ab:3f:c9:28:70:f5:33:4a:62:6d:47:91:cf:e0:
4f:35:5e:3b:2e:89:24:c1:bf:a3:58:21:3e:3b:93:
c8:21:f0:8a:62:89:54:eb:c2:d6:70:29:40:3c:d6:
06:f3:15:cb:1c:31:ff:27:b8:d3:f4:d1:69:4e:0d:
31:b0:07:33:72:09:4f:60:b0:37:f9:59:24:6c:80:
fa:a4:21:46:22:59:14:db:b5:e7:55:64:a1:f4:03:
7e:1d:ae:93:34:ab:09:52:f0:88:05:25:d9:66:7f:
e0:71:c3:27:f6:3b:50:ef:f8:9c:6c:18:d6:fd:5d:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:8C:96:66:B0:F8:CF:4E:C5:81:A1:A4:02:58:42:09:F8:61:74
X509v3 Authority Key Identifier:
keyid:6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:31:96:2f:bb:44:b4:5f:80:ed:24:b5:17:0d:eb:00:b5:6e:
f9:59:b3:a8:58:96:ad:26:d0:c1:62:86:38:cf:56:60:f7:b7:
30:e7:39:79:91:6a:96:a7:71:a8:e0:7b:71:d4:d1:2f:e6:5b:
23:f1:12:66:a8:37:88:62:03:39:3c:a8:b4:fe:4a:b0:8c:ad:
f0:32:29:98:db:0b:67:7f:a5:71:63:d2:20:e3:91:27:0e:79:
95:c1:12:eb:6a:44:1a:9e:a9:77:f2:88:6d:86:6e:f3:28:18:
8d:e0:a2:51:a2:7e:28:78:33:7f:0e:37:ab:4a:d6:23:3d:3f:
a9:ef:8a:5a:c8:b2:95:fe:fc:77:1c:a3:ef:3b:0d:d4:6f:d9:
15:17:66:18:5a:fd:0b:22:1a:84:c5:41:df:32:3c:ee:d6:cd:
72:23:ec:31:a4:0c:c0:02:92:f6:a1:f4:4b:3d:29:03:82:43:
55:1d:59:58:59:39:c0:06:96:ed:6d:98:b4:0f:f6:52:17:b3:
d7:c8:0b:24:bd:e9:95:bd:d6:28:d7:bd:40:58:6a:ae:37:b5:
83:2a:d2:1d:04:44:3f:a2:59:d1:75:2f:6a:ce:42:94:b2:63:
82:35:5c:bd:2e:34:59:f7:94:6d:f3:79:c6:dd:07:55:fa:a4:
73:d9:f4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:21:18 2025 by rpki-client