Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
File: rxFguAPrImHBP4yK3JU9O1r7V8w.mft (raw, json)
Hash identifier: 5sr2cv0mxozUP1mN5sW3yrttqTkJosEjXB5tiqkv5HY=
Subject key identifier: DA:92:6D:50:CB:B9:F7:72:C6:0E:AD:12:50:82:07:DD:D6:A2:11:40
Authority key identifier: AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
Certificate issuer: /CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Certificate serial: 0197499F3610D6ACD91C7EE90BD8F286CB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
Manifest number: 9B
Signing time: Sat 07 Jun 2025 09:01:00 +0000
Manifest this update: Sat 07 Jun 2025 09:01:00 +0000
Manifest next update: Sun 08 Jun 2025 09:01:00 +0000
Files and hashes: 1: rxFguAPrImHBP4yK3JU9O1r7V8w.crl (hash: RokiLebqCvaCZj4wwxPWHA1EFamkeLDbWFqCuM1pX7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:36:10:d6:ac:d9:1c:7e:e9:0b:d8:f2:86:cb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Validity
Not Before: Jun 7 09:01:00 2025 GMT
Not After : Jun 8 09:01:00 2025 GMT
Subject: CN=da926d50cbb9f772c60ead12508207ddd6a21140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:3a:39:c0:8d:91:cf:e6:66:bf:1d:35:74:
07:31:7a:5a:4d:42:42:35:ef:ce:07:31:87:6b:0b:
69:fa:c5:27:99:8e:14:25:6c:4a:9d:d8:3f:5d:9c:
a8:e4:f3:f9:b5:70:dc:e9:42:98:89:b7:cc:fe:ab:
9f:22:11:a5:fc:b9:e8:32:98:03:fb:90:9b:c8:42:
97:1b:b2:64:8c:b9:fe:c1:58:77:1e:71:d2:94:94:
da:2b:67:08:1f:ce:93:aa:92:47:f5:03:42:e0:04:
e1:dd:fa:fe:1f:3e:6c:06:2c:cd:f3:0e:88:3c:c4:
f4:17:03:d6:2e:94:6b:23:9b:e8:56:f2:6e:e9:c9:
90:86:27:c5:09:4d:72:32:9f:9e:eb:df:c6:e9:1f:
77:93:8d:1c:c7:64:ef:ee:eb:a6:15:da:b3:1a:18:
ad:56:b7:e2:e1:84:a3:0c:b8:21:1c:7b:9e:80:39:
2e:7c:4d:4e:6a:da:44:54:fc:bd:a4:17:1f:b6:e3:
a2:05:87:03:dc:a0:60:0b:a5:30:fb:68:9d:62:eb:
3a:ae:aa:c9:0a:87:cc:ec:b2:75:53:c4:f1:78:04:
ff:02:7c:73:2f:3b:90:33:d6:0e:2a:06:bb:7e:2c:
58:ab:52:ad:e5:5e:63:6a:b6:b8:7c:89:b8:4e:38:
14:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:6D:50:CB:B9:F7:72:C6:0E:AD:12:50:82:07:DD:D6:A2:11:40
X509v3 Authority Key Identifier:
keyid:AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:14:b8:77:c0:fd:62:76:4c:e8:92:ec:e2:2c:e0:db:0b:fd:
82:fe:9b:82:c2:53:df:e7:b2:98:de:44:8b:b7:fa:00:9b:e6:
bf:74:a6:bf:5a:73:cd:3f:c6:cf:79:3c:29:f8:16:f6:da:1a:
ab:7b:b9:1f:e5:9a:83:a6:8b:31:63:8c:3f:30:f5:fb:a8:4f:
18:b3:f0:a1:1b:72:b3:1c:2c:96:02:9f:06:00:1c:9d:e7:0b:
59:7e:59:03:42:5c:5e:c8:fe:64:d4:a7:41:fc:9b:c8:85:6e:
1b:70:22:ed:32:5c:a2:97:70:b6:60:0c:62:1a:cc:bf:d6:ba:
ed:24:8f:e9:dc:93:1f:55:8c:8b:97:94:2f:17:ae:24:d5:68:
48:3a:12:ed:90:2a:8b:ce:d4:f3:cc:5b:d0:b9:a2:60:ff:57:
3b:b6:dc:da:c3:78:34:fe:be:01:63:5c:96:fe:9b:c0:b2:f0:
c1:d1:bb:29:b0:24:92:99:67:43:5e:11:5e:a6:a0:46:9e:84:
27:bd:f4:50:4b:a5:76:8d:0f:96:0a:39:84:21:ce:e2:05:e6:
2b:9a:81:c6:c4:bf:e5:c9:d1:4d:ce:98:7e:d6:84:a7:1c:aa:
27:02:65:b7:3d:4b:d5:54:44:5b:70:91:19:da:15:f0:d1:51:
ec:9b:95:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnzYQ1qzZHH7pC9jyhssUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTE2MGI4MDNlYjIyNjFjMTNmOGM4YWRjOTUzZDNiNWFm
YjU3Y2MwHhcNMjUwNjA3MDkwMTAwWhcNMjUwNjA4MDkwMTAwWjAzMTEwLwYDVQQD
EyhkYTkyNmQ1MGNiYjlmNzcyYzYwZWFkMTI1MDgyMDdkZGQ2YTIxMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO86OcCNkc/mZr8dNXQHMXpaTUJC
Ne/OBzGHawtp+sUnmY4UJWxKndg/XZyo5PP5tXDc6UKYibfM/qufIhGl/LnoMpgD
+5CbyEKXG7JkjLn+wVh3HnHSlJTaK2cIH86TqpJH9QNC4ATh3fr+Hz5sBizN8w6I
PMT0FwPWLpRrI5voVvJu6cmQhifFCU1yMp+e69/G6R93k40cx2Tv7uumFdqzGhit
Vrfi4YSjDLghHHuegDkufE1OatpEVPy9pBcftuOiBYcD3KBgC6Uw+2idYus6rqrJ
CofM7LJ1U8TxeAT/AnxzLzuQM9YOKga7fixYq1Kt5V5jara4fIm4TjgUKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqSbVDLufdyxg6tElCCB93WohFAMB8GA1UdIwQY
MBaAFK8RYLgD6yJhwT+MityVPTta+1fMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhGZ3VBUHJJbUhCUDR5SzNKVTlPMXI3Vjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mN2YyMTQtMWRiMi00MzZhLTk1YzYt
NjQzZjBkYTg0OWZhLzEvcnhGZ3VBUHJJbUhCUDR5SzNKVTlPMXI3Vjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mN2YyMTQtMWRiMi00MzZhLTk1YzYtNjQzZjBkYTg0OWZh
LzEvcnhGZ3VBUHJJbUhCUDR5SzNKVTlPMXI3Vjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBS4d8D9
YnZM6JLs4izg2wv9gv6bgsJT3+eymN5Ei7f6AJvmv3Smv1pzzT/Gz3k8KfgW9toa
q3u5H+Wag6aLMWOMPzD1+6hPGLPwoRtysxwslgKfBgAcnecLWX5ZA0JcXsj+ZNSn
QfybyIVuG3Ai7TJcopdwtmAMYhrMv9a67SSP6dyTH1WMi5eULxeuJNVoSDoS7ZAq
i87U88xb0LmiYP9XO7bc2sN4NP6+AWNclv6bwLLwwdG7KbAkkplnQ14RXqagRp6E
J730UEuldo0Plgo5hCHO4gXmK5qBxsS/5cnRTc6YftaEpxyqJwJltz1L1VREW3CR
GdoV8NFR7JuVgg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:10 2025 by rpki-client