Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
File: Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft (raw, json)
Hash identifier: sp3PWYEvK23MTnQZVcK19vw8JB61gYbWUg220UTqyJg=
Subject key identifier: B4:39:4F:0F:DF:07:36:C7:3A:59:A2:56:F0:76:63:55:C5:87:EF:8E
Authority key identifier: 33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79
Certificate issuer: /CN=3318f57af07c4df5985e4a720b80c89b97e90a79
Certificate serial: 019827EC67E15EDCE8509CA4FCF5DA849272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
Manifest number: 11
Signing time: Sun 20 Jul 2025 13:01:01 +0000
Manifest this update: Sun 20 Jul 2025 13:01:01 +0000
Manifest next update: Mon 21 Jul 2025 13:01:01 +0000
Files and hashes: 1: Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl (hash: jn3IHQwL2+NfosOUEFAPgUkcF7gTnnAsQ7xDtjc3Hrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:67:e1:5e:dc:e8:50:9c:a4:fc:f5:da:84:92:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3318f57af07c4df5985e4a720b80c89b97e90a79
Validity
Not Before: Jul 20 13:01:01 2025 GMT
Not After : Jul 21 13:01:01 2025 GMT
Subject: CN=b4394f0fdf0736c73a59a256f0766355c587ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:30:1d:ce:7d:33:19:a4:a1:e3:13:cc:1b:83:
71:6f:87:91:25:1b:29:16:b4:3d:06:be:ee:16:1b:
c6:c5:11:a8:83:f2:88:a4:57:67:55:04:25:c3:49:
38:34:38:54:78:aa:7b:b0:84:2e:d3:9f:cf:f6:26:
13:59:74:c1:78:37:27:4d:0a:6d:c8:cf:54:8c:c1:
ef:e7:bc:3f:df:d9:00:14:22:2a:b2:db:ba:ab:bf:
af:80:fe:e3:9f:85:9e:55:7e:4f:19:54:e6:10:44:
1c:be:18:03:28:f9:50:a2:da:64:3d:6a:7a:57:a7:
fd:73:bc:05:94:2a:e7:d2:03:25:54:44:9e:d7:7d:
e5:a6:39:ed:0d:70:ce:5d:37:65:86:e4:92:ea:65:
b6:2f:52:9c:e0:39:c3:92:16:cc:8e:bc:cf:a8:49:
41:10:b6:b5:23:98:5c:a7:f3:d2:41:6c:75:78:0d:
9a:ce:ba:7b:89:70:11:82:e5:98:5e:d4:a6:5d:38:
be:e6:a0:8b:80:98:78:20:39:0e:ff:24:00:58:b3:
26:67:1e:a1:e7:6b:39:3e:a9:02:3a:37:e5:75:21:
15:e9:ad:83:93:2c:89:ac:d4:d9:d1:37:5a:4c:71:
70:26:86:ed:b4:ac:63:4e:01:e5:db:ea:ba:a7:8c:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:39:4F:0F:DF:07:36:C7:3A:59:A2:56:F0:76:63:55:C5:87:EF:8E
X509v3 Authority Key Identifier:
keyid:33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ef:3b:ab:f9:08:e6:48:29:18:48:b1:3a:51:46:f1:bd:ef:
8f:a2:86:e0:b6:09:a5:c1:80:ff:23:43:ad:f8:90:cd:cf:95:
ac:f9:24:c5:73:ff:14:a1:5c:d9:9f:45:f4:b3:40:fb:3b:fb:
d8:0a:26:56:57:94:25:a6:ac:c2:de:b9:92:ca:74:de:3d:1d:
95:67:2d:c2:56:ec:1d:25:83:69:b7:d3:4f:ac:6b:51:76:ab:
43:ec:81:11:4b:4f:df:eb:5b:de:44:e2:4c:ec:8a:a5:31:2f:
b6:8f:e1:05:44:77:56:55:a1:57:97:4c:cc:e3:fb:e2:aa:6f:
3b:aa:06:6c:88:0a:e7:3c:47:77:6f:59:fa:9b:db:3f:37:4b:
1f:76:98:65:8d:81:b6:46:9c:82:07:63:43:ce:30:77:1b:6b:
12:9d:9d:f5:1a:d7:e9:71:13:1f:86:35:7b:bf:36:73:94:d9:
9d:b4:a1:1a:c1:a8:c7:48:8f:93:76:a7:26:b2:7c:de:98:4e:
d6:3c:d2:09:ef:fa:57:8d:cb:21:0a:32:0d:d5:64:99:49:23:
2b:b5:85:39:4f:da:69:bf:a0:fb:55:48:c8:41:c6:e0:53:cb:
2d:99:f4:d6:2e:ef:a0:a8:fb:a3:a9:87:e7:4c:24:fd:2d:e1:
22:f7:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:16:45 2025 by rpki-client