Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: XJFoNq4mRVYtX5xC01J0rExUo7jjDnNjDJyty7cqAnI=
Subject key identifier: 7F:36:8A:3C:55:ED:23:13:A7:B2:29:3D:97:C5:8B:6C:36:87:70:D4
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 01984966308FC582AE24099C457797003769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:01:30 +0000
Manifest this update: Sun 27 Jul 2025 01:01:30 +0000
Manifest next update: Mon 28 Jul 2025 01:01:30 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: v52MfPjzKdTCTGW2+ph9BUTHJQzT0nz9qFnAHjB690U=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:30:8f:c5:82:ae:24:09:9c:45:77:97:00:37:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Jul 27 01:01:30 2025 GMT
Not After : Jul 28 01:01:30 2025 GMT
Subject: CN=7f368a3c55ed2313a7b2293d97c58b6c368770d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:b5:27:29:df:a2:e3:dd:af:91:7a:9d:84:
f4:fd:4b:08:89:46:55:11:41:bc:f5:aa:55:68:65:
0f:13:8f:a6:56:d6:2b:ad:ab:58:1f:1d:6e:45:c2:
4b:79:d3:9f:b7:fa:ab:6b:7e:10:55:f7:fa:13:99:
55:c0:ff:37:fb:87:34:8b:b6:de:0d:80:db:aa:5a:
dc:22:2e:89:83:da:3d:48:bf:5c:5d:67:8e:c1:b5:
14:bf:a5:73:d1:62:99:f1:5d:a8:59:0f:b6:fe:08:
13:23:f4:67:c4:86:4d:c0:95:09:82:60:2f:a3:e5:
6b:27:86:13:30:99:b4:88:37:80:a7:d6:9d:02:42:
e3:80:99:d0:df:18:bf:9d:e7:fe:bc:35:46:27:96:
3c:1f:d4:87:ef:8a:10:47:e7:93:e9:2c:0e:6d:11:
95:f7:3a:bf:54:99:be:e9:52:e4:52:01:a9:5e:03:
a5:64:5e:ca:09:f1:c2:c4:aa:ec:12:04:b6:d1:7b:
29:f8:cd:20:07:3d:e0:67:d3:23:17:94:5a:1e:9a:
d2:c1:14:b4:f4:93:d6:c9:e7:36:02:ee:bb:e6:ca:
e1:cc:da:4a:d1:e5:09:2d:7f:41:f1:14:2f:62:da:
0c:3b:6e:14:8c:26:38:5f:e0:2f:68:b4:79:10:9f:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:36:8A:3C:55:ED:23:13:A7:B2:29:3D:97:C5:8B:6C:36:87:70:D4
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:17:e8:57:63:1d:21:03:5b:de:cd:0f:2a:59:e5:a5:11:cf:
46:ce:c7:77:de:4b:64:bf:9e:5f:c8:17:02:9d:63:91:46:2c:
86:76:5f:91:c3:21:58:dc:49:e6:ae:74:f9:99:ac:d0:48:41:
4b:58:2b:c2:fc:73:ae:0b:3e:88:88:55:27:54:0a:29:1f:64:
ab:d9:d5:64:3a:03:82:7b:5b:31:b1:23:f0:e0:60:57:dc:3f:
fd:cb:34:fd:58:59:02:de:f8:63:4e:94:4a:63:13:2a:9f:7f:
cd:51:31:27:23:a8:8f:b7:5b:01:cc:9b:be:9e:32:47:14:a4:
00:2a:24:88:97:2f:aa:38:ad:15:34:70:fd:d3:05:1b:18:52:
08:ef:10:89:db:58:f4:dd:e0:27:8f:9e:24:2e:68:45:1d:71:
3c:09:78:9a:81:26:64:ba:31:12:dc:9c:00:a3:86:8e:03:bc:
5f:68:1d:0d:33:bf:89:d3:a8:17:ab:32:16:15:a0:55:b7:af:
f0:b6:4a:3c:da:ac:14:0b:9e:8a:27:f5:47:89:42:3d:03:6e:
2a:1f:e6:cc:fe:2b:90:88:32:80:c7:48:25:1c:5d:3d:bd:58:
dd:3b:f3:6b:d5:cf:7e:04:ea:bc:99:a9:61:8d:c1:78:43:ad:
19:5d:48:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:25:36 2025 by rpki-client