Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: OQBOlKgLcN+qcrschi9o79edBOWOfRehkD6EaTSEa6Q=
Subject key identifier: DD:13:0B:A8:35:6B:15:B8:23:01:EA:BA:39:4C:72:BC:40:0F:A6:7B
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 01976DABB5ABF35D04548E5D8AFC268D371C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 14C9
Signing time: Sat 14 Jun 2025 09:00:59 +0000
Manifest this update: Sat 14 Jun 2025 09:00:59 +0000
Manifest next update: Sun 15 Jun 2025 09:00:59 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: 9F+xmV7TMgg406YCE7vziqtBEusiLopW1d/LwCMnol0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:b5:ab:f3:5d:04:54:8e:5d:8a:fc:26:8d:37:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Jun 14 09:00:59 2025 GMT
Not After : Jun 15 09:00:59 2025 GMT
Subject: CN=dd130ba8356b15b82301eaba394c72bc400fa67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:19:78:7e:70:ee:61:c8:49:85:0f:e0:5d:
5b:86:b3:e0:cd:ce:7d:bb:06:50:63:51:80:33:bc:
ca:da:14:f7:8e:4d:84:9d:72:16:4b:6d:90:ec:c5:
11:2d:0c:5e:8a:32:21:6a:d8:4c:d9:48:0a:32:e7:
d5:b2:cd:6b:53:d1:08:56:e4:fa:6c:e5:04:ea:2b:
90:31:dc:61:eb:a6:fd:d2:ae:be:0e:53:65:31:ea:
6c:73:c4:22:06:d5:2f:6c:01:3a:e6:c0:fc:2a:02:
89:72:33:1f:ff:4d:29:e1:26:92:93:66:6e:06:53:
04:eb:0b:3e:ad:4a:49:4f:5c:6c:1a:73:a6:7c:ec:
88:e0:db:ac:e7:fa:e5:5b:0c:3f:a2:3f:bb:6c:a3:
ad:98:74:94:48:9c:c6:ef:31:9f:6a:9b:ce:f0:e5:
15:3a:16:44:e2:49:62:a1:06:ad:97:f1:e5:7b:24:
26:6e:47:40:c1:ed:7e:86:3a:b1:8e:48:24:c9:26:
dd:b1:5c:74:cf:fa:75:32:e0:05:4d:98:20:3b:92:
08:a7:3a:fa:26:c5:18:97:44:69:74:95:af:50:46:
b0:ab:74:a0:02:4d:bd:dd:c1:d9:5d:15:a6:39:ee:
d4:3b:e3:00:bc:34:4e:f9:33:ce:a2:d2:77:37:4b:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:13:0B:A8:35:6B:15:B8:23:01:EA:BA:39:4C:72:BC:40:0F:A6:7B
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2f:81:61:1c:aa:3d:c0:e1:9a:65:4b:19:85:9e:fe:97:4c:
88:9a:e4:55:b5:67:73:44:ec:e2:96:c7:e5:dd:50:ef:3a:84:
30:cb:df:f3:b6:00:e5:3e:cc:d1:8e:15:a2:68:4f:70:33:fa:
9f:ac:fb:74:6a:94:98:42:da:74:de:bd:e8:71:43:c4:2a:de:
4a:86:c7:d6:c6:fa:8d:ed:b0:f6:84:d1:60:3d:55:b7:b1:0b:
9f:02:09:27:e4:b5:ce:4b:84:34:23:ef:75:a8:3b:d3:33:b3:
07:a6:ac:26:33:ab:3f:d1:85:e5:0b:18:e1:6c:b8:f2:07:b8:
b6:e5:da:fb:af:44:49:ec:ae:e0:ee:3f:09:29:22:c4:db:64:
ff:36:dc:b0:3d:2c:5e:6d:6a:48:c0:ed:43:3b:9b:2f:7c:72:
54:91:04:b9:e3:ba:bf:8a:f3:29:30:9a:5d:fc:ef:dc:cf:31:
da:e7:03:c2:bb:06:fc:95:74:41:c0:a3:56:32:88:0d:b3:ed:
69:d8:3f:80:9d:f9:04:47:81:0f:63:8d:fa:57:42:61:b8:4a:
54:e9:9a:6c:30:ba:be:32:a7:e0:45:58:96:8a:97:a4:c3:b4:
0d:4b:bf:21:ef:ab:8a:b0:87:62:00:73:64:67:25:4a:dc:c0:
e9:5e:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:08:00 2025 by rpki-client