Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: IK1Y9LbCbW3uCO1s9FeQ/ma/47ZEULFj75YxyOdGhds=
Subject key identifier: 41:84:87:4A:3B:84:D6:BA:CE:CD:B3:86:51:71:7B:18:6E:49:A5:85
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019827B575823548D146EC21320FDF4BAC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 1D
Signing time: Sun 20 Jul 2025 12:01:00 +0000
Manifest this update: Sun 20 Jul 2025 12:01:00 +0000
Manifest next update: Mon 21 Jul 2025 12:01:00 +0000
Files and hashes: 1: HRoRP4XhhYpU785BEKhZ1q4e20g.roa (hash: G6jwo30XwlnomMCEKD4f2VAkjCPOzmiVIHus+OyycRI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: 2QH3QA0H7ukSZpZz0y+o31Z64wztWMKWEzOJvBFcwus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:75:82:35:48:d1:46:ec:21:32:0f:df:4b:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Jul 20 12:01:00 2025 GMT
Not After : Jul 21 12:01:00 2025 GMT
Subject: CN=4184874a3b84d6bacecdb38651717b186e49a585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:4d:bf:ad:71:75:b9:ef:81:a6:46:32:ca:
4c:c0:b6:49:ee:df:37:06:99:ce:df:64:1d:97:94:
a8:9f:28:d6:8c:7b:e6:cd:3b:39:3f:cd:ef:c4:e7:
21:7f:a3:6a:69:4f:b9:23:53:c8:b8:39:c8:ad:e1:
1b:ea:6d:46:e8:f8:78:60:86:44:f9:97:75:dc:c3:
f7:d3:11:d7:d7:c7:dc:67:0d:ba:f3:57:74:a7:54:
59:83:44:36:fb:c4:b0:2f:ba:1e:d1:0a:28:86:ad:
53:67:79:b7:3d:8b:2a:d2:17:79:77:e2:8e:4a:25:
08:9c:3b:48:12:9b:0e:d4:d9:8a:a7:aa:4f:b5:fc:
e6:17:6a:b8:ee:2a:e1:a7:f4:7c:48:f7:a4:ea:02:
54:30:98:66:7e:ca:72:a4:c0:f9:62:71:d3:9a:6a:
0c:c6:8d:bb:61:d1:9d:5c:f8:bd:06:e9:59:48:6b:
37:eb:cf:58:05:fb:27:f3:35:86:ec:aa:81:e5:eb:
e8:73:3b:63:50:b3:c5:e7:fb:64:4c:8d:db:3b:18:
4d:cc:24:9e:7a:c6:87:d0:8d:3f:99:e2:e4:3d:5a:
67:6a:09:10:b4:3b:4e:31:bb:f9:5d:d8:d0:e1:75:
90:e1:7e:eb:4d:d5:42:15:ad:5c:ea:21:a3:be:00:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:87:4A:3B:84:D6:BA:CE:CD:B3:86:51:71:7B:18:6E:49:A5:85
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ce:7c:2b:2a:9a:e5:4d:88:2c:5f:c9:26:f1:46:8a:0d:13:
64:72:0d:6c:fd:87:21:a4:01:f8:fb:f4:d7:b4:eb:11:34:f9:
37:2e:0c:28:41:2c:cd:50:b9:ce:7d:98:e4:03:c7:f5:74:f3:
6d:cf:ed:fe:70:72:4c:32:b2:4a:cd:1c:51:6e:ab:9e:f9:b4:
3f:56:94:97:a8:25:c2:a4:64:f4:a3:67:b9:d1:ae:4c:31:48:
ed:53:43:38:6b:b5:a7:df:66:4f:35:a2:fe:37:f0:ea:09:dc:
32:c3:60:4d:f9:c6:b0:a3:ea:bc:ea:ee:f4:ce:db:39:61:42:
1f:34:12:dd:22:44:48:9b:bc:c1:c1:a2:52:03:c9:e8:b8:8a:
d2:d0:74:e8:fd:27:1c:d3:e8:83:4c:fb:80:1e:6d:d7:83:25:
73:3a:28:26:9f:a1:87:6c:62:3c:75:f4:42:85:47:21:ca:b8:
1a:ea:1b:44:1c:80:76:2f:20:ad:1f:9a:1f:6e:f5:f5:57:19:
ca:9a:a7:2e:0f:2e:80:64:b3:59:d8:53:70:8f:f2:97:bf:a7:
b3:f6:83:0c:38:5f:64:2c:b6:60:1b:3c:b5:96:02:fe:33:f0:
5f:bc:e1:87:89:4a:c5:bf:47:f9:b0:0d:f3:6c:47:bf:ee:27:
9a:3a:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:29:21 2025 by rpki-client