Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: 8mfBUUAwikdJKllKZpuoXH+C1/N0sn755pUio2g2rX8=
Subject key identifier: 8F:67:AF:7F:31:09:2E:82:09:67:A0:AE:A5:99:B1:5A:A4:8B:0B:A1
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 01974A7B294BD0D12921049A5D5E7778F674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:01:14 +0000
Manifest this update: Sat 07 Jun 2025 13:01:14 +0000
Manifest next update: Sun 08 Jun 2025 13:01:14 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: MeKH24gKVuwZN8xGCU+VrvzjoI5Tsk7vDFPershJJrc=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:29:4b:d0:d1:29:21:04:9a:5d:5e:77:78:f6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Jun 7 13:01:14 2025 GMT
Not After : Jun 8 13:01:14 2025 GMT
Subject: CN=8f67af7f31092e820967a0aea599b15aa48b0ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8f:c7:5d:a5:f1:6a:51:8f:29:af:1e:fa:c9:
67:ff:7a:bf:50:df:90:c0:e6:ca:f1:b1:c4:6e:b0:
54:70:b6:65:8c:93:60:de:11:31:73:48:7a:4e:94:
2a:4b:a0:0f:e9:73:59:1e:31:ae:ae:0a:ee:d3:33:
fb:ca:6e:d1:6e:3e:e9:99:79:5f:95:86:0e:13:d9:
d1:95:d9:a1:f5:d3:d2:96:58:66:f1:a6:22:d8:3b:
39:94:96:c0:25:cf:5d:a2:ec:eb:bf:81:53:7c:62:
58:93:b3:20:a0:00:56:7a:0f:be:e9:76:6f:49:bb:
f8:c4:69:8a:f8:f6:6c:e7:98:50:51:02:ca:f0:d0:
3a:c9:35:cf:39:04:1b:9d:e6:c0:95:42:9c:8e:2e:
24:15:53:65:0b:b1:14:82:d5:78:8d:71:bb:fe:a1:
26:48:3c:43:24:1f:65:e9:d0:99:64:65:6c:04:85:
6a:00:a8:b1:32:7a:cb:39:98:ac:ca:37:3c:de:f3:
0e:1b:15:74:3e:be:53:17:37:88:dd:19:dc:b7:6c:
20:9a:03:43:17:38:3d:cf:13:af:e5:ea:b5:07:dd:
a8:70:ca:0f:63:bd:7b:38:74:bf:70:2c:d4:2f:9d:
06:e8:34:ae:ef:63:b5:2b:cf:94:3d:c2:aa:a1:d3:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:AF:7F:31:09:2E:82:09:67:A0:AE:A5:99:B1:5A:A4:8B:0B:A1
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:11:b5:cb:67:c6:f9:82:ff:dc:a7:d2:44:dc:3b:2c:23:a7:
94:ba:28:0d:1f:88:90:89:49:3d:af:8a:e3:e7:f3:5d:c5:9e:
22:9e:c0:41:7d:37:ae:d4:b7:49:73:a9:14:cc:25:b8:bf:ee:
c1:ac:30:6e:51:61:05:35:d1:e1:f4:13:af:91:19:be:62:bf:
a5:1f:e5:54:31:8c:58:b5:12:a8:96:f0:13:e5:f7:5f:a4:81:
e4:89:bf:1d:25:c4:70:56:fb:36:f1:57:5d:83:7d:06:4e:96:
8d:04:9c:11:5e:57:89:82:e4:b8:86:a1:25:a3:f8:0d:63:96:
af:55:a1:4d:5a:11:3a:4d:40:fa:a2:79:7b:40:27:fc:b9:76:
43:c1:79:76:89:37:e5:bc:13:3a:bf:0a:cd:1b:c3:3c:25:1c:
0e:71:2c:cf:a5:65:08:6f:94:41:7b:b6:a4:c7:1a:81:31:c2:
6e:20:4f:12:cc:03:19:0e:bd:85:e3:f7:c9:54:0e:d2:99:3d:
e9:40:b8:2b:00:15:a9:0d:a0:73:85:49:91:ed:a7:13:44:37:
ac:f2:67:90:97:0c:d5:08:e3:fc:79:18:c5:55:97:f9:67:56:
67:25:e8:76:da:b7:a6:cc:de:2a:20:a7:f1:b8:b6:6f:11:1e:
57:eb:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:43:22 2025 by rpki-client