Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json)
Hash identifier: QjzJNwfsPxFnKt4xoHlkkHL3Lra9wRR/x1NGS+Ph1ms=
Subject key identifier: E6:57:C5:AC:C4:87:23:29:88:2A:A8:48:32:AD:3F:B3:C1:D6:CF:E8
Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Certificate serial: 0199228C5088E6E9BAAE97BC5218E218CFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
Manifest number: 0756
Signing time: Sun 07 Sep 2025 05:00:44 +0000
Manifest this update: Sun 07 Sep 2025 05:00:44 +0000
Manifest next update: Mon 08 Sep 2025 05:00:44 +0000
Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: tJGlO3y+ghGGW84rU5OaHfxklufUOXcjamcVTx5iL1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:50:88:e6:e9:ba:ae:97:bc:52:18:e2:18:cf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Validity
Not Before: Sep 7 05:00:44 2025 GMT
Not After : Sep 8 05:00:44 2025 GMT
Subject: CN=e657c5acc4872329882aa84832ad3fb3c1d6cfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:26:52:78:52:5d:e8:86:b6:da:7e:05:6f:
3e:44:79:c0:ef:4b:5b:1c:26:c3:a3:fb:df:5b:62:
aa:f0:8f:dc:76:6c:2b:67:5e:3c:a0:30:c7:d5:a7:
5e:11:bf:4a:26:e0:13:0f:ea:3f:d0:90:54:38:07:
7d:8d:35:cf:ee:ad:0e:20:54:4c:13:1c:13:9b:fb:
ea:7a:0e:2f:09:7a:ed:ac:0f:69:f8:55:48:df:bd:
41:9c:2f:e6:7b:5a:06:f0:f2:05:e7:c3:7e:47:a1:
11:ee:17:c9:dd:72:89:57:d3:db:3b:5c:14:23:80:
96:c8:79:05:fc:a3:0e:7e:ab:c4:32:8a:e2:cd:96:
1d:63:8a:76:d6:cc:3b:ad:74:51:ff:49:90:66:fe:
5f:22:04:87:94:af:21:8f:3e:59:72:53:b0:2e:ec:
ad:f3:6d:8e:f4:01:52:4b:b5:58:36:0b:72:bf:81:
a0:81:f9:b4:f8:ac:1c:32:cb:ab:d1:b7:11:1d:c1:
46:e2:7b:5d:4d:16:2f:a5:e8:1a:29:fc:53:7e:88:
36:84:a7:b2:83:ea:2c:9b:33:86:ee:78:16:e8:f7:
0b:e7:a8:a7:16:94:fa:c5:48:fa:1d:0f:54:81:69:
fb:9f:e3:e5:23:13:58:79:ae:75:44:66:a3:86:76:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:C5:AC:C4:87:23:29:88:2A:A8:48:32:AD:3F:B3:C1:D6:CF:E8
X509v3 Authority Key Identifier:
keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:48:7d:e3:74:fe:a0:24:04:b3:b1:38:f7:70:0f:6c:dc:f2:
22:98:f8:b5:13:da:cf:a3:67:f1:44:90:1f:b4:2c:54:9f:f2:
73:b0:ea:cb:83:53:17:2e:53:17:82:e2:bd:00:dc:12:85:8c:
80:d7:7d:54:39:74:83:4d:d3:d6:7a:e9:c9:38:c5:9c:d6:2d:
8c:90:e7:2e:d5:0b:bf:00:a9:21:4d:d8:d2:dd:78:4a:78:fa:
ba:85:a9:94:26:0b:cf:09:87:5e:cb:19:26:14:08:e6:d0:9f:
b5:45:83:03:da:a7:ed:ef:10:5d:90:32:4a:bf:d3:6f:f4:ca:
a3:56:ea:e1:64:91:41:fb:f5:8b:23:d3:90:cc:ea:0c:f1:1d:
00:88:00:70:18:7f:43:1f:90:46:6a:4f:3b:fa:71:0d:5f:32:
38:f8:9c:61:22:13:1e:c2:e4:a0:5f:3d:9d:98:4e:47:3d:31:
51:c7:9f:dc:5c:f3:56:5a:98:c1:22:4c:5c:4f:9a:8c:c3:81:
57:40:95:a1:59:4b:9c:0a:a1:1c:5a:f6:db:6c:d7:f3:77:95:
dd:b1:9b:c2:d8:54:b5:78:0d:40:c1:99:ad:03:ea:17:7f:46:
4f:4e:a4:53:b3:14:00:5c:b9:4a:c0:b6:8b:93:c6:0a:c5:db:
35:35:4a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:26 2025 by rpki-client