Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
File: rxFguAPrImHBP4yK3JU9O1r7V8w.mft (raw, json)
Hash identifier: 6JDII+KMokzS0R7z9kH38aoPcPj6LHp5Kg4zmDF0mR0=
Subject key identifier: 96:8F:71:D3:55:FB:33:B2:06:BC:7E:E8:27:DE:D1:76:7B:06:22:84
Authority key identifier: AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
Certificate issuer: /CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Certificate serial: 019922C2F1252080E3F67E08924F8F741D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
Manifest number: 0190
Signing time: Sun 07 Sep 2025 06:00:24 +0000
Manifest this update: Sun 07 Sep 2025 06:00:24 +0000
Manifest next update: Mon 08 Sep 2025 06:00:24 +0000
Files and hashes: 1: rxFguAPrImHBP4yK3JU9O1r7V8w.crl (hash: PS5Q7NQxz5YKmKfXXIT+zZ421UrITQmvqjQrzlxABRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:f1:25:20:80:e3:f6:7e:08:92:4f:8f:74:1d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Validity
Not Before: Sep 7 06:00:24 2025 GMT
Not After : Sep 8 06:00:24 2025 GMT
Subject: CN=968f71d355fb33b206bc7ee827ded1767b062284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:bd:06:56:43:a9:2e:be:e4:ea:f4:c4:af:
0f:96:fd:7f:ae:92:1b:9b:ed:ae:89:0d:41:16:0d:
60:07:d3:64:3b:ee:57:d3:47:8a:f3:af:73:0a:e3:
0b:93:4f:4e:fb:63:5a:82:11:a0:c0:e7:af:c3:29:
23:c7:f3:b2:61:b3:0c:61:bf:3a:d7:03:51:62:a2:
eb:cc:d7:8a:ce:af:08:2d:28:42:02:a8:10:60:df:
c7:80:09:dd:13:64:74:f4:5e:cf:4a:80:c4:ef:ba:
93:19:a5:c8:4c:0a:23:2c:5a:dc:39:cd:98:8b:83:
d3:cc:5d:2d:fa:a4:33:50:67:9d:ee:86:58:e3:eb:
38:64:76:27:6c:51:81:f2:c4:c4:c0:6f:fb:05:87:
c5:da:09:ad:49:3d:62:56:4d:03:4f:9f:f1:9f:e3:
69:4b:e5:97:b7:a4:ab:2e:5e:b7:e7:5b:87:91:3d:
be:8f:58:48:35:fa:0c:97:e2:cd:56:7b:2d:ba:f7:
f1:5e:ef:3c:a5:0f:c9:b1:71:07:2a:a4:96:96:89:
29:ed:80:e6:2f:4e:5e:c4:34:8a:4f:df:e2:18:93:
0e:6e:c3:e7:e2:bd:95:9c:56:d2:09:b9:50:4b:39:
7c:85:92:da:c4:de:10:80:26:53:b2:ba:72:6b:98:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8F:71:D3:55:FB:33:B2:06:BC:7E:E8:27:DE:D1:76:7B:06:22:84
X509v3 Authority Key Identifier:
keyid:AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2e:7f:08:dd:02:86:82:fe:2a:22:cc:91:47:52:72:a9:6e:
78:c3:67:12:71:62:c9:1e:39:f5:f2:ce:be:78:86:da:9b:5b:
59:fd:bc:52:eb:83:27:1c:8b:da:b5:e7:16:4a:cd:42:09:81:
77:b6:f9:9b:27:87:11:09:a8:dd:2b:d1:a8:e2:6f:d0:85:d4:
0a:0e:da:5b:0f:54:2f:a0:e2:12:ae:76:f4:d4:36:fc:95:79:
50:5e:de:f1:a3:64:43:9b:8f:6a:11:61:f0:b5:a8:25:50:cf:
d7:6f:78:aa:bf:f8:13:fb:78:de:2d:90:62:1b:c7:2d:71:b3:
bf:ac:1a:0b:03:02:65:f6:99:59:f7:a5:8c:f3:7b:f3:48:dc:
dd:0a:07:a3:92:f6:3e:fd:f4:07:e2:5c:69:9e:b6:29:70:ed:
f2:4f:06:22:74:48:24:01:68:cd:43:fb:a7:a1:3c:04:d4:4d:
f8:76:a1:63:fe:13:f5:75:0d:fb:d8:42:e2:85:99:17:95:96:
43:af:82:5e:36:b8:8d:cc:fa:48:86:57:24:f7:7b:5c:19:f6:
16:25:89:eb:64:7e:b5:a4:72:17:ce:94:92:e3:4c:74:f5:f7:
5b:1d:f5:32:e2:da:05:f4:ce:88:31:75:18:b3:b9:49:0b:b8:
09:f5:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:20 2025 by rpki-client