Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: SJgSv1bU18RH+J0Nt1ZEheqfMfcJlSnhBK8u+1me0Y4=
Subject key identifier: 2E:BD:0A:2F:B0:70:9A:44:EC:0C:BE:3B:35:B6:83:5A:C1:D2:63:4F
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 01975FB8BB5CC72EF737ECAB3E96AE7761A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 079D
Signing time: Wed 11 Jun 2025 16:00:31 +0000
Manifest this update: Wed 11 Jun 2025 16:00:31 +0000
Manifest next update: Thu 12 Jun 2025 16:00:31 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: QQtoj5WgFu+hguZyEhGq/HtiOK8m1pha288pVp15oGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b8:bb:5c:c7:2e:f7:37:ec:ab:3e:96:ae:77:61:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Jun 11 16:00:31 2025 GMT
Not After : Jun 12 16:00:31 2025 GMT
Subject: CN=2ebd0a2fb0709a44ec0cbe3b35b6835ac1d2634f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f1:fb:3a:c7:e5:34:43:ca:21:34:cc:65:e5:
1c:f0:71:43:91:65:2a:c3:7f:8b:24:c6:5b:ff:b8:
37:aa:18:04:67:f1:6a:e1:c1:41:3a:6e:32:cf:c6:
b8:8c:aa:7d:07:90:45:87:7a:62:fb:72:6e:4a:59:
88:2a:fb:79:1a:43:b5:ce:37:24:67:6c:2d:9b:ac:
79:39:79:0e:94:0f:c1:cb:54:20:ac:ed:d7:2b:10:
15:52:7c:bf:a9:22:ab:94:08:ce:6a:26:7d:98:0b:
8d:81:bf:9a:44:28:58:01:8d:33:7f:7c:57:27:be:
68:46:6f:02:40:6a:9e:06:51:4d:96:7f:0e:47:02:
96:db:65:cc:40:d0:b5:c7:b5:e6:f3:78:02:b7:77:
87:c3:75:83:1c:78:9a:28:a5:37:71:20:d8:b8:d2:
6a:85:75:f8:98:1e:cb:00:ae:98:dd:87:d2:ac:ea:
5d:17:7a:3b:f5:4c:06:5a:03:52:e2:60:5d:45:51:
7d:d8:d2:6d:8d:63:8c:05:8d:7d:d0:97:8c:24:eb:
27:29:9d:74:00:78:3b:75:f2:52:21:22:a5:8e:b8:
c6:21:68:99:57:64:61:42:35:64:d4:f6:1f:62:fb:
83:18:f2:10:e8:87:43:b6:87:22:c9:46:04:84:e8:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:0A:2F:B0:70:9A:44:EC:0C:BE:3B:35:B6:83:5A:C1:D2:63:4F
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6d:06:e0:2d:c8:c9:cc:f2:6d:7f:a6:ed:7f:10:ba:c8:85:
fb:60:d2:43:9d:3c:65:12:db:e8:5d:f3:2a:7f:10:cb:7c:b7:
49:54:34:36:88:9b:b3:bf:21:96:da:f9:5e:1e:ad:d4:9d:27:
a7:8e:7c:3c:01:94:6f:7f:5c:28:28:08:79:5b:4a:b4:34:9f:
2e:c5:9a:a8:7f:ed:0e:96:26:ef:fa:ce:a2:47:f9:7c:71:27:
e0:fe:e2:96:60:80:6c:76:87:41:a1:4e:aa:79:01:2f:8c:9f:
4e:1e:aa:9b:88:7c:43:7e:37:58:d3:00:83:63:3a:e5:ab:90:
71:0b:f4:14:db:09:e5:a8:d2:f6:33:8e:82:97:84:ec:bc:f3:
13:0b:fc:b3:fa:93:6e:78:b7:80:a4:6f:36:28:db:80:fc:bb:
98:91:58:d0:cb:e6:ad:a6:c8:c3:81:bb:b8:98:4a:51:0f:92:
7a:6d:7d:92:c4:ef:25:c7:43:21:5d:c3:f4:99:62:99:21:99:
df:27:9a:41:bb:f8:5c:44:0e:52:49:4d:12:56:a1:6e:cf:d9:
8d:43:f9:8b:b6:4d:a6:08:df:79:2d:46:b6:d0:2a:0f:75:42:
4a:88:c8:2b:24:6f:97:9d:fe:fd:db:77:5a:9f:d2:ba:85:93:
8d:48:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:50:54 2025 by rpki-client