Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
File: a1xW3Y1JexBoE6IloYFxST7jKoU.mft (raw, json)
Hash identifier: fZxMRkTJrMczq0ZxBmcIjFDJ6rzDHuVMVLg4sCNIdpw=
Subject key identifier: CE:BF:CD:AC:4F:83:D6:C6:C1:77:D9:4D:77:3D:78:0E:EC:24:84:0E
Authority key identifier: 6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85
Certificate issuer: /CN=6b5c56dd8d497b106813a225a18171493ee32a85
Certificate serial: 019922C330264598C552E0C7D4F24A7B03A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
Manifest number: B2
Signing time: Sun 07 Sep 2025 06:00:41 +0000
Manifest this update: Sun 07 Sep 2025 06:00:41 +0000
Manifest next update: Mon 08 Sep 2025 06:00:41 +0000
Files and hashes: 1: a1xW3Y1JexBoE6IloYFxST7jKoU.crl (hash: rmTzZM2VnSpylEl0tjKO1H6ZnH4ssmyFefgid/B2Qh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:30:26:45:98:c5:52:e0:c7:d4:f2:4a:7b:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5c56dd8d497b106813a225a18171493ee32a85
Validity
Not Before: Sep 7 06:00:41 2025 GMT
Not After : Sep 8 06:00:41 2025 GMT
Subject: CN=cebfcdac4f83d6c6c177d94d773d780eec24840e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:13:f0:1a:67:21:1a:db:8d:d7:0b:8b:66:a1:
60:89:20:35:2d:f1:0d:fe:03:9d:8b:7d:e8:a8:8d:
02:46:fe:d5:9e:72:dc:77:a0:de:33:b9:7e:4c:73:
98:c5:50:82:b9:8a:60:a8:c0:8d:77:0b:eb:0d:5c:
86:2f:f0:ce:32:30:f0:7b:13:2c:20:9d:23:e4:b9:
f7:7b:91:53:38:ba:11:da:79:ef:4f:fc:5c:c9:e3:
6f:e5:6f:40:3b:ac:86:32:29:ed:8c:57:18:7c:35:
74:44:72:d9:4a:27:d9:87:bc:44:c4:b3:a3:04:01:
06:b0:91:7f:42:de:8c:50:76:86:98:e7:bf:ca:93:
e8:c6:16:2a:7d:a7:30:ef:0e:3b:98:af:ad:a8:1e:
cf:7c:a9:8f:10:ef:52:6c:13:7d:9b:38:29:e7:d9:
55:f7:ec:80:de:d7:61:29:80:09:e1:bd:95:33:8c:
0b:1b:cc:e1:f0:96:a4:98:ec:c9:5a:08:67:f4:2d:
ad:f3:5c:15:d6:53:1a:3b:79:aa:22:a1:ce:1b:bc:
f2:0e:bc:6e:2b:4e:98:ad:f7:b3:db:cd:c0:e7:b7:
3b:aa:50:20:99:74:d3:8e:56:27:5e:5b:5e:6b:5a:
f0:a8:76:95:3c:ef:6d:43:8a:4a:30:92:02:ed:bd:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BF:CD:AC:4F:83:D6:C6:C1:77:D9:4D:77:3D:78:0E:EC:24:84:0E
X509v3 Authority Key Identifier:
keyid:6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:52:c1:69:46:ea:03:13:7d:7a:fc:fb:30:ac:cf:48:fa:53:
64:56:d5:67:c3:75:e9:d7:bc:24:5c:73:41:2a:fc:54:25:cf:
32:67:7d:16:be:d6:02:4d:a0:95:da:a2:1c:9b:f6:f0:cd:e4:
e3:a4:10:44:b7:3c:03:02:20:8c:14:fb:a9:b8:6c:25:dc:8b:
2d:37:ac:b3:8d:3c:4b:42:81:9c:99:93:f2:a4:d1:b3:46:d6:
e4:a8:97:e0:ae:22:51:ac:ee:67:18:54:be:3b:19:e4:3a:4a:
eb:c6:ec:8e:20:7c:7d:31:ef:14:cb:69:e9:20:19:0d:0b:ca:
63:46:2e:50:1e:dd:d4:88:20:46:da:9d:7c:48:75:c6:7c:d8:
99:30:0e:3a:91:8f:d4:d1:45:83:25:7f:b2:16:4b:98:8a:e3:
2e:a2:29:3e:c8:f9:eb:4c:82:2c:c4:3b:91:eb:a8:c5:cb:05:
2d:2d:e5:2c:68:35:fd:d8:47:ad:d0:eb:c1:73:0d:88:c5:26:
bf:00:94:0f:cc:3e:a1:5f:0e:90:23:e8:fc:e1:5e:ba:94:f7:
2b:97:91:9b:ea:eb:86:e0:5d:28:59:b0:9d:7c:37:19:82:5d:
9d:b8:fd:8c:95:50:5d:62:c4:eb:53:bb:99:31:9e:77:f2:b6:
15:56:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:27 2025 by rpki-client