Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
File: XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft (raw, json)
Hash identifier: XB8VfEPJ5HPMDa/l6HBv5nUzc4LAHJMYgnX056nSE3s=
Subject key identifier: DD:F3:06:1A:D1:3F:F1:3B:13:BC:0E:D5:F9:61:D9:35:50:D4:B9:13
Authority key identifier: 5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
Certificate issuer: /CN=5e55afde34211bcee6a7fd992488a24927b46947
Certificate serial: 01976884E16BCEFF597B87EFBCECBB9BA516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
Manifest number: 01D6
Signing time: Fri 13 Jun 2025 09:00:28 +0000
Manifest this update: Fri 13 Jun 2025 09:00:28 +0000
Manifest next update: Sat 14 Jun 2025 09:00:28 +0000
Files and hashes: 1: XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl (hash: hPo+AbiUtdtuAavnczaV9Te7FozRh1Sxv2++guDTdnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:e1:6b:ce:ff:59:7b:87:ef:bc:ec:bb:9b:a5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e55afde34211bcee6a7fd992488a24927b46947
Validity
Not Before: Jun 13 09:00:28 2025 GMT
Not After : Jun 14 09:00:28 2025 GMT
Subject: CN=ddf3061ad13ff13b13bc0ed5f961d93550d4b913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:75:14:61:a0:cf:09:35:59:2c:c0:e7:21:
b1:db:de:b2:22:48:e1:31:94:6f:3b:f3:0c:ab:a1:
01:68:ae:d0:a8:e2:64:54:8a:13:d7:5b:30:48:19:
89:4e:77:1c:3b:94:4d:a7:45:9a:79:9f:ac:c9:3f:
ac:34:ea:71:06:05:05:8b:ad:c3:04:d7:73:a2:93:
fe:13:76:94:5a:7e:c3:f7:f8:94:0b:89:53:c5:f0:
76:31:fe:e7:43:43:7b:9c:18:78:f3:2c:2e:20:c9:
4d:ee:ad:14:07:c5:1f:2d:79:00:37:9d:5e:ae:27:
92:58:36:ca:16:3f:95:ed:6f:2d:2c:7e:5a:a9:e3:
39:e5:00:1a:7a:04:81:ce:ab:f5:c0:51:b3:2b:49:
b8:ee:83:5c:1d:f4:4c:05:59:21:62:85:c7:0f:e7:
5a:26:7c:2a:53:27:19:07:12:9a:17:85:d9:54:5c:
cb:e3:79:6e:d4:83:2d:98:f7:a1:6b:d0:89:6a:e3:
24:ab:74:cd:43:c4:66:0b:b0:c4:bf:63:ff:cd:74:
0b:02:38:72:99:09:f3:cb:ee:7b:a9:9d:7b:bc:1c:
4d:0b:ae:e1:6c:b0:d0:66:5e:75:f1:c2:dd:94:74:
36:b5:92:78:3e:af:15:51:51:e4:02:45:d7:ed:a3:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F3:06:1A:D1:3F:F1:3B:13:BC:0E:D5:F9:61:D9:35:50:D4:B9:13
X509v3 Authority Key Identifier:
keyid:5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:77:07:d8:42:b6:47:2e:d7:87:d8:fe:4d:f5:2e:84:84:72:
f9:2b:df:6a:9f:ce:9b:e6:0c:9a:df:6b:f0:6d:9f:9a:dc:9f:
86:a4:07:32:b2:62:3d:21:ed:42:92:08:5f:1d:9a:48:18:65:
cf:e9:ad:9d:d7:e7:8f:e2:7b:df:14:0a:8c:47:99:fc:3f:91:
56:68:35:ff:e7:da:32:4e:3e:ee:f0:c5:ae:62:26:a4:a9:e2:
0c:e8:1e:e0:fd:fc:f2:42:27:1b:c8:1e:7c:2e:25:27:9b:c8:
f6:2b:30:be:7e:f3:4c:1e:0d:5e:e6:64:62:b2:e7:d1:69:57:
81:10:52:d0:f4:bd:e9:d8:eb:a1:79:f5:29:0a:95:9f:ef:e5:
bc:93:1c:41:b3:15:58:33:e0:c0:f2:da:13:56:80:aa:9e:9b:
59:61:25:f3:9c:44:95:95:31:8d:58:fd:d6:ba:57:19:db:ca:
ba:9e:e8:e0:f4:6c:9f:eb:6e:af:f9:bb:0d:94:47:70:84:4e:
93:ce:7c:c1:d4:3b:7e:1c:80:72:c2:38:1f:5d:4c:79:55:87:
a6:e1:fb:f9:52:82:63:69:22:a1:9f:9f:70:82:33:06:c3:e8:
11:9d:a5:a5:8d:2d:51:e8:47:21:03:d7:c9:a2:5e:8c:4e:a6:
0f:b9:c1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:17 2025 by rpki-client