Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: xSeH0k5cgrUAlKtjYTOMr/Xsmgq6UZPHwbo7NA1JGdU=
Subject key identifier: BE:07:1B:48:48:54:42:99:A7:AE:2C:5B:65:C2:41:58:10:C1:A3:D1
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 01976772951677537EB7C7ECDAA3C198332C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 07A1
Signing time: Fri 13 Jun 2025 04:00:51 +0000
Manifest this update: Fri 13 Jun 2025 04:00:51 +0000
Manifest next update: Sat 14 Jun 2025 04:00:51 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: AatKDob+99qQShu7+JgnWQXAkGklTML4wsUVDIXaIYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:95:16:77:53:7e:b7:c7:ec:da:a3:c1:98:33:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Jun 13 04:00:51 2025 GMT
Not After : Jun 14 04:00:51 2025 GMT
Subject: CN=be071b4848544299a7ae2c5b65c2415810c1a3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:22:97:e3:44:ff:c5:cc:43:f0:79:c8:7a:37:
37:af:da:38:d7:70:eb:fa:d7:7b:2a:f6:1f:c1:bb:
55:3c:d4:b0:a0:3f:49:d5:a9:5c:38:3f:15:69:40:
00:c8:4e:8f:9f:bd:53:f2:7f:fa:75:ef:d0:68:13:
bd:49:17:3b:4b:68:af:8d:25:a5:38:2d:91:50:69:
60:2a:f7:4d:18:59:e2:8a:06:3b:c2:06:f0:85:12:
b7:eb:9b:8d:a3:2d:01:19:1c:33:52:40:98:ae:ba:
f6:f1:17:15:f3:86:87:04:ea:99:59:4c:b4:57:9c:
47:75:f1:20:de:26:25:c6:ec:41:8c:db:4b:37:52:
14:e8:fa:75:fa:b9:e4:42:bb:05:ac:fb:a2:07:ae:
81:68:74:b1:6f:6a:c4:5b:bb:88:7d:8b:3b:e9:e2:
c4:b1:39:74:cb:b2:a6:f7:2d:1a:ec:cc:91:32:04:
34:2a:cd:d7:83:f3:86:0a:24:72:87:05:2c:10:2d:
01:f7:04:08:97:1e:95:ad:34:ad:5a:15:77:df:18:
7e:12:e9:1a:58:4f:da:1e:08:bb:3d:12:c2:97:f8:
79:95:3c:c2:5e:83:49:a5:34:ad:e0:de:6d:d5:e9:
94:61:0c:90:da:33:69:4d:a4:6d:0c:5d:c7:d7:91:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:07:1B:48:48:54:42:99:A7:AE:2C:5B:65:C2:41:58:10:C1:A3:D1
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0f:3a:4b:5e:1b:e0:12:2b:94:4c:b3:3f:b8:8e:54:a7:01:
bc:8b:33:3a:f7:91:62:0f:e8:39:27:00:e7:8e:d2:45:2e:f3:
85:ff:9b:f9:1e:48:66:0e:3c:4e:69:43:0e:93:74:1b:82:8a:
f1:d7:61:82:11:a2:d6:fb:e4:68:f6:69:8e:97:3b:01:d6:02:
2e:fa:b3:ed:41:14:ad:6d:e6:c4:83:25:13:f7:63:81:b9:da:
fa:14:c1:69:bd:1c:5c:b3:2a:fd:f0:3f:95:0f:73:c1:03:64:
f0:d3:6e:c5:3c:44:1c:4e:8d:d4:e4:d7:ca:44:7c:f5:a2:fe:
36:d7:38:12:d9:50:be:52:de:8a:dd:03:40:ec:84:85:53:2f:
f0:99:05:49:46:ae:61:1b:81:85:55:2c:b9:fb:34:35:23:4d:
bb:52:f7:e0:ce:06:2e:c4:b5:e1:e8:e9:c4:0e:b1:8c:1a:5b:
6d:0a:ed:20:c7:70:02:c8:3b:4a:d5:ea:60:58:5e:b6:94:d6:
db:9e:34:d4:1b:07:14:0e:2f:dd:dc:5a:89:58:44:90:71:5f:
90:37:e8:1b:3a:43:3e:2c:a2:ad:fd:b7:1d:ff:0e:08:08:cc:
8f:10:1d:b5:45:79:15:b9:12:3f:49:30:67:ab:e8:3a:dc:2c:
49:6e:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:48:59 2025 by rpki-client