Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: tXVM0J2Wcxo4ziochaTGLfwGtWkNdXij4I8sJR1aaM8=
Subject key identifier: 32:E0:45:1F:00:20:7A:7C:89:C5:9F:43:2C:85:DE:29:C3:05:3C:C2
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 01984E8B7F192412537BB637B28AAAC42883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 124F
Signing time: Mon 28 Jul 2025 01:00:21 +0000
Manifest this update: Mon 28 Jul 2025 01:00:21 +0000
Manifest next update: Tue 29 Jul 2025 01:00:21 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: 36IHVwJzGSJmDHyqZmfgL2EFPnJzDpeJTRsXrqDQA6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:8b:7f:19:24:12:53:7b:b6:37:b2:8a:aa:c4:28:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: Jul 28 01:00:21 2025 GMT
Not After : Jul 29 01:00:21 2025 GMT
Subject: CN=32e0451f00207a7c89c59f432c85de29c3053cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:87:13:57:fa:de:52:05:c2:c8:ef:7a:ba:
f5:ff:5b:df:10:24:01:27:ef:09:e0:38:51:02:ea:
81:2a:76:28:da:a0:36:06:b6:de:22:2f:0f:1b:5f:
93:e8:c1:42:a0:bd:a1:89:ed:77:61:77:6b:ae:38:
70:59:dc:08:6f:5f:49:7f:a9:a8:4f:de:71:71:d2:
07:8b:20:5f:36:cd:7f:9a:52:6e:1a:3e:3d:df:53:
be:61:22:e2:61:67:84:fb:4b:3d:8c:cb:8c:97:8e:
d7:98:80:68:f1:d8:04:05:53:d9:2d:5e:58:28:e3:
af:92:14:6e:88:93:bb:02:71:67:1c:27:9b:9d:f7:
a6:a7:eb:55:77:8a:32:ba:d7:a1:1d:34:7a:70:c6:
cb:59:19:35:22:f7:23:61:3b:18:73:6a:17:e0:46:
97:be:d0:8c:41:fe:68:bf:15:f7:b3:f9:e6:57:d0:
5d:86:ce:81:14:90:d2:60:d3:4b:64:dc:55:e5:ba:
9f:81:0a:87:5b:26:03:a8:9f:ce:74:80:39:35:ac:
90:e1:27:6c:d3:03:cf:68:fc:52:68:d3:8c:7a:1a:
df:d6:39:00:81:a1:dd:ea:c9:01:c2:45:30:df:3c:
0a:23:d0:36:39:98:68:b1:ab:32:db:63:60:ee:7c:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:45:1F:00:20:7A:7C:89:C5:9F:43:2C:85:DE:29:C3:05:3C:C2
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:8e:64:b0:95:56:f3:ee:d4:28:7a:95:27:50:74:35:07:
0a:cd:7b:36:24:51:39:a6:25:6c:06:64:48:75:0e:4a:6c:01:
e7:66:c0:50:06:4b:9c:40:7a:63:a7:ff:4f:d0:2c:c4:a9:30:
08:fb:e3:09:1e:03:5e:1e:4b:32:a7:62:5e:17:f2:3d:e9:69:
79:78:37:86:27:44:87:d8:9b:a0:b9:89:9c:06:a9:5c:c3:3d:
9c:00:a4:f0:60:04:8a:d1:cd:b1:9b:7a:cc:32:47:37:b8:a4:
c0:29:b5:13:78:4f:f7:09:9b:b2:32:96:e2:21:7f:04:c3:69:
24:65:95:08:fe:40:3d:5a:c7:85:30:08:85:b1:49:5d:c2:1e:
a1:d1:d1:43:bf:11:dc:44:3e:9d:fc:c5:8e:c3:16:ed:9e:ee:
60:cc:64:64:4f:67:0e:12:66:76:4c:d7:2a:ae:4f:e8:ba:e3:
e2:94:be:4d:ef:94:84:3d:06:e6:84:4e:87:8f:ea:79:d9:79:
86:7c:29:6b:85:d6:7b:15:f1:9d:d8:11:c5:11:ec:4b:72:43:
79:21:5f:70:91:d6:fc:4a:fb:c4:c5:eb:62:34:48:e8:39:74:
24:10:56:39:e8:5c:b7:7b:91:e0:0b:e0:46:fd:bc:19:62:7a:
93:67:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 04:24:52 2025 by rpki-client