Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
File: RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json)
Hash identifier: MHKTEMG9AaGBqQA+/P3TP00g2HNyr/xvMdNHUb+wrY4=
Subject key identifier: A8:5A:66:9B:86:DA:DB:3A:CB:89:DA:29:AE:3E:21:C5:2C:CF:48:AF
Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Certificate issuer: /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Certificate serial: 0197496837000871A720FDAAA5FAFAB9ED1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
Manifest number: 0331
Signing time: Sat 07 Jun 2025 08:00:55 +0000
Manifest this update: Sat 07 Jun 2025 08:00:55 +0000
Manifest next update: Sun 08 Jun 2025 08:00:55 +0000
Files and hashes: 1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: 6YsY+T+T9mfkQ52zfzmvuBkFcnGHldIG6VPPTV9s224=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:37:00:08:71:a7:20:fd:aa:a5:fa:fa:b9:ed:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Validity
Not Before: Jun 7 08:00:55 2025 GMT
Not After : Jun 8 08:00:55 2025 GMT
Subject: CN=a85a669b86dadb3acb89da29ae3e21c52ccf48af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:dd:be:62:5b:1b:d5:78:39:ec:a6:76:d1:
99:4b:56:87:76:31:82:a8:36:87:06:84:6f:70:01:
23:89:29:4f:39:72:05:78:3d:38:c4:7d:d5:6a:f4:
a0:dd:83:aa:c4:06:57:5f:c6:64:52:e8:59:38:2e:
e3:73:34:ca:b4:87:92:06:4b:84:bb:b0:34:f9:00:
3d:6d:9c:b8:9e:4c:bf:33:59:2e:00:8d:54:63:ad:
62:11:03:90:03:34:c4:44:b1:ab:ea:a7:a0:57:bd:
c6:12:ca:4a:f7:e9:70:25:61:c5:ee:83:cf:cd:b9:
96:32:2e:ce:13:1c:d2:1c:a6:29:b0:64:00:1d:20:
7b:d3:b4:05:17:f6:a0:fb:67:a9:9f:7c:ac:eb:43:
12:23:67:4f:38:14:6c:cd:89:eb:96:ae:9b:63:49:
ce:85:39:b5:c6:af:04:72:07:32:78:43:48:9b:b4:
db:27:a0:ea:eb:4b:77:28:84:6b:b0:cd:5f:8f:6e:
f2:3d:e5:36:ad:cc:a9:fc:bc:4f:d8:33:0d:d0:fe:
f2:15:86:55:97:4e:f7:36:c5:ef:54:7d:ed:20:e3:
22:66:7d:6d:70:37:cb:b2:43:4a:4c:f6:18:ba:4b:
f6:3e:bf:14:b0:11:9e:cd:10:1e:65:47:a9:5e:59:
18:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5A:66:9B:86:DA:DB:3A:CB:89:DA:29:AE:3E:21:C5:2C:CF:48:AF
X509v3 Authority Key Identifier:
keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:be:60:0f:d3:fd:97:f6:43:aa:33:a2:3b:57:0f:b6:f0:37:
9f:93:df:9d:ed:aa:53:2e:fc:e8:44:f9:ed:f6:d1:85:58:ad:
85:55:da:1c:e5:fe:40:ef:7b:2a:ab:7e:7e:18:8e:ba:1e:d2:
5f:0c:70:9e:14:ec:2c:cb:b6:e1:34:df:51:71:72:8c:ae:79:
ed:52:16:37:1c:b4:3c:ca:57:0a:83:9c:34:d5:46:96:9f:9d:
96:af:7f:f3:9a:ba:23:42:93:9e:92:8f:d1:e9:e6:e9:bb:e9:
85:48:86:ef:c1:6a:fb:e4:af:54:66:47:13:31:95:4d:bb:c0:
c1:50:81:49:9b:7d:a8:82:45:ef:ea:d9:73:a0:74:69:42:10:
e6:e1:73:05:52:e1:98:f6:4e:de:36:58:4f:ed:c4:ac:a2:1c:
d8:05:0b:2a:de:80:9b:73:5a:8a:5b:81:4c:8f:61:24:c4:c7:
d1:f6:9c:57:3a:8c:fe:5d:0f:bf:c8:57:7d:5c:27:cb:c3:05:
c6:a7:ce:59:b3:6e:b9:6e:ca:12:a5:06:ae:69:fd:d8:0a:4e:
5e:5d:32:50:3b:9c:0d:75:be:e8:8a:d4:62:1c:07:14:5a:53:
38:cb:b9:1a:ac:cc:82:26:c1:b7:da:72:c8:ef:0d:38:9b:d3:
8d:17:a7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:30:26 2025 by rpki-client