Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
File: Xl5k_r-lZnT03hZCn13eSdnOk2g.mft (raw, json)
Hash identifier: TE6dCa0yU7SwQ0iDh0k8xuk3x2W5W1JxDgExAboPKeg=
Subject key identifier: B9:DC:AA:48:3B:EE:02:D1:E9:83:04:D7:42:B5:A2:A7:9F:15:F6:2A
Authority key identifier: 5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
Certificate issuer: /CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Certificate serial: 019768BBB66B82469F5CA49D49509ACDC891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
Manifest number: 121E
Signing time: Fri 13 Jun 2025 10:00:21 +0000
Manifest this update: Fri 13 Jun 2025 10:00:21 +0000
Manifest next update: Sat 14 Jun 2025 10:00:21 +0000
Files and hashes: 1: Xl5k_r-lZnT03hZCn13eSdnOk2g.crl (hash: zzpiMibNo20DTIvJOT1xqgUKy2Nw9F92d07S14zGRdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:b6:6b:82:46:9f:5c:a4:9d:49:50:9a:cd:c8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Validity
Not Before: Jun 13 10:00:21 2025 GMT
Not After : Jun 14 10:00:21 2025 GMT
Subject: CN=b9dcaa483bee02d1e98304d742b5a2a79f15f62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:92:95:9f:54:98:f5:4a:ac:5f:21:4a:98:
03:20:96:18:64:c2:56:00:2d:0f:46:e9:aa:16:1e:
c4:3c:cc:2e:ee:27:50:2e:e8:f8:e0:12:03:01:02:
3b:a1:97:28:f2:da:1d:bf:d6:05:19:0f:fd:47:e8:
bc:17:4f:2a:1b:bb:fc:85:7d:55:0d:cb:02:42:22:
1a:60:a4:44:75:92:67:4d:34:12:f9:cb:98:d0:41:
53:4d:96:a2:2a:c8:38:52:c4:c9:11:f3:2c:e3:f9:
19:30:ed:36:55:b0:e7:71:49:35:93:10:97:6d:54:
9d:39:bf:1b:10:ea:19:16:d3:98:cb:8e:56:1e:2b:
1f:4d:59:d1:e1:a9:d5:a1:45:1f:e8:4b:ee:0d:eb:
dc:97:68:07:b6:73:1a:63:5c:22:5f:96:ec:1d:03:
a0:0e:c8:a0:ae:02:43:ce:08:e4:62:b9:68:fd:d5:
6d:62:30:f8:34:0a:52:ee:19:65:2f:79:10:e8:fb:
e3:ca:26:b4:18:ea:65:7d:fe:fa:e9:66:f8:2e:b5:
09:5a:e8:ca:ba:43:44:7a:ef:58:ea:9d:ef:25:8a:
ed:e5:d9:50:56:a7:88:33:47:73:72:95:9a:7e:01:
9e:87:4d:39:89:81:33:20:6c:3f:8e:dd:45:d8:35:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DC:AA:48:3B:EE:02:D1:E9:83:04:D7:42:B5:A2:A7:9F:15:F6:2A
X509v3 Authority Key Identifier:
keyid:5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f0:fe:b6:06:58:f7:28:2f:cd:6d:db:d6:92:f8:5e:93:08:
f6:db:d7:6a:45:0b:65:40:f7:36:00:f7:ba:a8:ce:f2:da:2d:
dd:c7:14:11:04:26:4a:c3:99:5d:af:38:6f:8b:c9:28:1f:42:
f8:29:5c:58:ec:a7:b0:21:fe:39:42:7d:50:b4:ca:14:7a:a5:
2d:51:31:51:ff:53:f8:79:3c:c9:72:3a:db:51:3b:7f:7d:c6:
23:59:3d:57:b8:e7:30:25:40:ae:9c:07:aa:9b:16:21:39:e7:
ff:ad:42:32:f4:b3:8b:3c:ed:f7:3b:7c:96:c4:a2:f4:4f:12:
41:41:eb:46:a4:90:59:75:11:aa:22:23:7e:aa:60:f7:8b:7c:
63:86:7f:cc:be:7e:e8:26:b4:04:78:eb:dd:70:df:1c:eb:4a:
83:77:8f:14:76:e9:58:3f:cf:94:ea:48:13:42:4c:9d:cc:71:
f7:2e:53:87:83:1d:79:de:85:81:25:75:2a:5e:9c:7b:c7:62:
a0:f5:6b:f7:ad:e1:d6:e6:e3:41:47:c7:1b:66:7d:7f:2f:05:
01:28:c5:db:d6:8d:82:47:e3:10:68:e2:32:39:fe:43:d5:5a:
05:3e:bd:d4:36:79:ca:4d:0c:3f:fe:f9:15:05:e7:6a:ef:f2:
65:ae:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:31 2025 by rpki-client