Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: IwbHP6klgwYjvDZkfK3F7ztQg+XiveFL/fbyWSRVHxQ=
Subject key identifier: D2:00:E7:6B:39:32:52:91:2A:40:E0:7E:57:30:49:A7:61:3F:5D:B3
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 0197488C68A6C63A496777DEAA992ABC6DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 0932
Signing time: Sat 07 Jun 2025 04:00:50 +0000
Manifest this update: Sat 07 Jun 2025 04:00:50 +0000
Manifest next update: Sun 08 Jun 2025 04:00:50 +0000
Files and hashes: 1: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: 7DxzY9U/oawGQIvnvQeE09b67p764gw6cVm3QIT4h0o=)
2: vtzVAFS2sSXFMY4pT9LQwpwKXN8.roa (hash: IK29JkUi3ofZEZGY2PidWdMxcE655gfnkWlaKv3tisg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:68:a6:c6:3a:49:67:77:de:aa:99:2a:bc:6d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Jun 7 04:00:50 2025 GMT
Not After : Jun 8 04:00:50 2025 GMT
Subject: CN=d200e76b393252912a40e07e573049a7613f5db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:8b:a1:83:c5:76:88:78:7a:90:8d:0a:61:
5e:5f:7a:44:f1:05:66:93:67:7c:f6:30:ee:40:a3:
88:bc:50:18:6f:89:e2:83:dc:c1:85:48:d1:6a:fc:
ca:8a:d8:9f:ee:80:a1:0d:5a:ba:80:cb:ba:22:00:
9d:e2:47:e5:be:a0:3d:cd:5a:fe:8b:ff:ec:46:65:
fc:a9:fc:5d:d4:3b:ca:0b:45:73:5f:a3:76:04:a1:
53:de:8a:89:56:c9:a5:d2:c7:5e:53:ac:2d:4b:2e:
59:59:f6:6e:d0:02:a8:b7:79:d2:83:d6:e3:f1:3b:
92:64:a6:54:e6:d7:7f:0f:28:78:f6:16:32:5a:a8:
bb:b4:28:23:36:45:91:8e:89:8b:52:50:cf:b2:06:
12:0c:da:62:79:e3:a9:e0:36:57:d2:7f:36:e2:0e:
ef:1f:34:af:8d:3d:37:f8:f2:6c:00:04:34:41:97:
80:88:55:f9:7f:1a:76:40:f9:82:58:98:c7:a8:97:
e4:67:85:87:a8:d0:00:6f:cf:15:47:ec:cb:8e:31:
e7:db:29:79:9e:35:62:0e:a3:56:db:9e:51:8c:9b:
15:b9:2b:9b:61:fb:38:ee:67:54:aa:18:65:c9:07:
c2:fa:00:70:15:bc:bd:3a:92:61:3c:fd:66:22:66:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:00:E7:6B:39:32:52:91:2A:40:E0:7E:57:30:49:A7:61:3F:5D:B3
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:89:23:42:4c:0d:8d:5f:8f:56:b1:e8:7b:59:21:bd:54:ae:
e0:3e:be:c1:aa:e3:aa:a3:10:55:c0:0e:03:75:7b:e2:1c:5a:
d2:b0:b6:e0:5e:31:e9:e5:02:29:4b:58:e2:84:2e:41:41:33:
90:9a:63:bd:e8:98:76:b3:e8:0f:4f:e4:dd:02:74:ad:01:86:
41:2e:36:0e:66:73:36:91:a7:1a:5f:d4:ff:71:eb:82:e4:d7:
21:85:2c:f8:32:45:88:8f:91:00:13:f7:6f:60:e1:6c:45:b1:
30:1e:5f:cf:17:73:69:b6:7d:e9:a1:73:c8:c7:ec:67:4a:8e:
1f:36:d3:a3:f4:ca:89:f6:fc:51:59:87:ca:1e:3a:16:4f:af:
26:8d:72:1c:9d:8e:c5:58:2e:64:b3:b5:1c:93:f0:41:12:1c:
27:a8:c9:24:3f:21:d7:73:4c:ed:36:ef:c7:8b:87:c1:e3:6a:
7e:fe:1d:c0:93:00:1c:07:9d:a2:48:04:4e:1c:44:2b:92:4b:
97:93:81:34:76:3f:80:db:af:a8:02:60:79:cf:08:81:54:16:
ac:b7:d8:2a:f1:6a:49:1f:36:8c:ee:ce:06:a2:f0:b2:96:fe:
a6:03:dc:10:1f:6c:c6:50:f5:63:63:6f:20:44:86:3e:a3:84:
b4:cf:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:11:39 2025 by rpki-client