Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: t4abVam1OgIjQCS73bZOhCLHmqDVj6ZJG6ezE3X8TKw=
Subject key identifier: 28:FA:15:55:4E:6D:B3:DD:4D:C0:E3:06:7D:9B:ED:69:61:A4:86:2D
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 019748C350EA5AD01F2D5083ACFBBAB9B644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 07CA
Signing time: Sat 07 Jun 2025 05:00:49 +0000
Manifest this update: Sat 07 Jun 2025 05:00:49 +0000
Manifest next update: Sun 08 Jun 2025 05:00:49 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: NA87oOU0B9CpnptCBqp20iS7DozzKHx35fQbVzRhlZ8=)
2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:50:ea:5a:d0:1f:2d:50:83:ac:fb:ba:b9:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Jun 7 05:00:49 2025 GMT
Not After : Jun 8 05:00:49 2025 GMT
Subject: CN=28fa15554e6db3dd4dc0e3067d9bed6961a4862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:67:96:f0:e8:79:f1:03:51:dc:22:8a:c0:
30:c3:a9:50:e6:64:54:bb:25:5a:bc:7d:78:37:ca:
b3:00:f9:d4:80:2f:58:6e:ca:eb:40:97:77:e5:ca:
95:0c:ef:f7:6b:0e:52:ed:84:43:bf:8d:65:ea:40:
d1:03:89:a6:38:98:c3:97:f3:9e:07:52:88:18:cf:
4c:f7:2c:51:bc:c1:4d:dd:46:20:b6:ba:b2:61:d8:
a6:61:1e:10:09:26:e8:76:42:6a:e8:d7:ab:f6:2c:
0f:fc:3f:e3:5d:b7:44:79:56:d4:e3:cd:c1:07:9b:
4a:f4:cc:a8:1b:f9:c2:4e:e2:62:5e:be:3d:ff:98:
9f:2c:ed:f1:25:3f:80:05:6c:69:0e:39:c4:cb:83:
37:f2:88:12:2c:0f:4d:9a:fe:da:db:d0:66:45:41:
52:88:bd:f4:1a:58:77:ed:14:33:db:87:63:1b:6f:
21:1b:27:30:93:76:72:bf:5b:a2:42:d6:d2:e6:2d:
67:9c:90:d3:c8:be:c4:9e:19:69:98:89:51:97:4b:
ef:22:42:eb:5c:12:96:74:da:1a:a7:1f:c6:7c:9a:
75:fc:0e:64:59:31:be:79:74:73:b2:74:d3:d5:dd:
09:b6:fb:88:66:8b:a0:93:bc:7f:94:f9:30:0e:d5:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FA:15:55:4E:6D:B3:DD:4D:C0:E3:06:7D:9B:ED:69:61:A4:86:2D
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:78:ce:2f:5f:a5:ec:99:50:84:44:f8:d5:ed:f6:a1:9a:26:
8e:e1:2f:c5:1f:13:7f:b4:76:67:a4:55:52:12:1e:4c:87:a0:
7d:04:79:10:f6:0e:ff:c9:ea:5a:71:f8:e3:e8:91:c7:33:73:
c2:92:4d:50:28:2b:db:b3:86:d5:6e:8f:a1:78:ac:71:e7:d3:
31:bc:7b:ef:c4:a1:fb:92:7d:ed:f6:8d:3c:5f:65:6b:e7:cf:
a4:11:5a:a5:dc:a8:03:76:d6:75:c7:48:dc:1d:d2:a4:42:48:
e0:8b:b6:00:19:1b:f9:ff:a4:c6:da:e9:49:66:47:db:1f:79:
81:56:0a:1e:31:e6:44:72:2c:86:06:51:8e:22:ab:a2:92:d8:
c5:24:2d:73:22:d6:ef:2c:63:8d:62:bb:05:05:88:29:9f:0f:
8c:d2:d0:8b:5b:a0:b2:ae:45:d2:7b:26:9f:d9:f1:a1:c9:39:
77:0c:a2:4e:96:91:94:c5:aa:c0:23:3f:67:59:44:78:d9:e0:
d9:9d:00:c4:64:02:be:d1:fb:ad:96:7d:66:1f:a7:57:45:6f:
8f:43:32:e9:0d:2f:69:e9:8e:08:dd:d3:25:46:bc:8f:a5:bb:
cf:a0:20:f6:2a:c8:2b:5b:68:d9:94:d9:bb:0b:34:b3:83:86:
a3:78:7d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:24 2025 by rpki-client