Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: qAAzx6dl48jst54+08XdqnrQnXSrwfXpCJ/9XbkeiQA=
Subject key identifier: 20:96:46:D2:BB:83:6C:41:96:F2:81:D4:FC:96:69:99:9F:AD:39:B7
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 01976D3E7E84D2DA9B617DC2FBA6CA547BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 07:01:41 +0000
Manifest this update: Sat 14 Jun 2025 07:01:41 +0000
Manifest next update: Sun 15 Jun 2025 07:01:41 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: htm3DJ709l7SWOEC6ngZJeWiyxZCYEZ8FB7v3ongy+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:7e:84:d2:da:9b:61:7d:c2:fb:a6:ca:54:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Jun 14 07:01:41 2025 GMT
Not After : Jun 15 07:01:41 2025 GMT
Subject: CN=209646d2bb836c4196f281d4fc9669999fad39b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:63:e5:76:d7:b2:bf:a0:3c:0e:ca:a0:cd:
dd:6f:54:52:3d:ef:9b:63:52:10:be:ef:53:9a:2f:
59:7b:5d:d9:4e:85:1a:85:61:2a:4a:3d:de:cc:ef:
1d:e4:6c:dc:4d:96:af:39:1c:88:89:dd:8b:35:13:
74:d4:3e:45:a0:a8:49:be:e5:2b:65:05:d6:64:e1:
3b:75:0c:b2:42:49:13:fd:a8:49:85:96:f9:cd:63:
7c:89:04:e5:75:54:7b:3c:a4:23:c6:2f:b3:81:77:
04:9a:59:94:75:1f:1c:db:2d:06:b4:cf:44:f5:c0:
2c:89:80:fc:01:3c:c6:8b:ba:b2:ef:af:13:29:f3:
92:14:32:b3:9d:dc:6e:06:d4:52:48:53:49:f0:46:
d9:7d:1a:e6:e8:d7:f5:5d:b0:0e:6c:aa:c6:8f:c3:
26:3b:ee:a2:34:b7:b9:df:9a:d7:08:86:6c:f0:9f:
c3:81:33:e3:45:7c:c4:d0:fd:b4:7c:a4:16:b0:a2:
04:e8:02:a2:dd:b6:b5:85:ae:6e:54:d3:4e:52:a7:
53:b2:53:12:f4:f2:42:06:5a:78:55:6c:03:02:57:
8e:dc:b4:18:0d:e6:da:ed:05:4e:a4:95:48:15:62:
81:69:db:0d:89:b6:6c:4e:21:bb:d3:30:a7:ee:e8:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:96:46:D2:BB:83:6C:41:96:F2:81:D4:FC:96:69:99:9F:AD:39:B7
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:e9:d6:08:bd:e5:00:6b:62:b4:1e:b7:63:ff:56:5e:ac:c4:
7a:45:5b:86:1d:15:d1:1a:c1:14:2b:e4:1f:92:8b:35:26:40:
ae:4b:c0:9c:93:89:f8:68:6f:88:82:4d:cc:dc:52:01:a6:3f:
23:a0:49:29:4d:36:31:8f:d5:3f:ea:18:50:74:57:83:1d:bb:
c7:16:6d:22:b3:39:7c:2b:ec:af:27:fc:ea:b2:13:a5:cb:33:
2c:90:9e:de:4a:fd:0b:85:fc:a0:4f:e2:49:7b:65:2c:e3:5b:
bc:de:a8:0d:09:da:8a:86:d5:bc:f2:cb:ba:33:1a:13:31:df:
74:5b:f4:b2:3a:74:44:2a:3f:0b:f9:16:8c:b8:1e:f4:77:b3:
e5:9a:a0:81:62:51:66:75:41:ff:60:c7:3a:02:30:b9:49:8b:
7d:6f:28:a4:56:00:03:8a:6a:99:33:42:57:9b:bd:b5:c5:c2:
89:bf:e4:43:37:19:e7:b3:bf:3d:de:ea:41:1a:bc:c3:b3:0e:
84:ff:fc:3a:40:f0:a4:aa:ad:25:c3:fd:9c:10:9d:5b:de:63:
4b:15:90:89:d9:b9:41:d2:2e:c9:62:ba:d3:78:2b:9c:7e:d5:
29:19:c7:fd:0e:32:73:0d:f6:38:a0:af:eb:be:95:8b:3e:30:
16:69:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:37 2025 by rpki-client