Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: EE/GWGXWWuib9yDJXT5EAyn5EUUQemTsa5DZ2W7MW8Q=
Subject key identifier: A6:EA:F3:37:DD:67:A8:EC:91:F2:01:C3:EF:6C:86:67:A2:BF:50:96
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 01976A0602D0EBD563F963E91EA96908356E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 0587
Signing time: Fri 13 Jun 2025 16:01:08 +0000
Manifest this update: Fri 13 Jun 2025 16:01:08 +0000
Manifest next update: Sat 14 Jun 2025 16:01:08 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: 6Ynn6Y5k3H9EjQUxuKTG9Hd5rNs4azweXvh7GPbEQnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:02:d0:eb:d5:63:f9:63:e9:1e:a9:69:08:35:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: Jun 13 16:01:08 2025 GMT
Not After : Jun 14 16:01:08 2025 GMT
Subject: CN=a6eaf337dd67a8ec91f201c3ef6c8667a2bf5096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:2c:1b:2f:95:85:83:fb:94:c3:f6:b9:94:
c0:2a:9f:cb:c2:5c:8f:70:b7:4c:1e:b1:dc:a3:41:
2b:2a:f3:b2:bc:db:7f:54:65:15:07:4e:22:64:00:
73:57:c0:5f:85:6e:af:7f:c7:af:dd:6c:57:55:fe:
a2:24:56:dc:f0:65:93:d4:07:08:d9:12:49:50:85:
cd:2c:95:8e:73:f9:02:ab:81:f7:a0:b3:74:fd:0f:
72:3a:b8:87:ad:27:24:1d:5c:51:2e:84:84:2f:20:
77:59:86:31:f6:d2:23:87:fc:92:ef:34:20:e8:15:
b2:19:2c:3f:61:0b:ff:a5:c7:33:29:fa:b4:5d:09:
c1:d0:e3:dc:16:80:93:ae:2d:97:f4:04:5b:4a:52:
34:6c:11:98:fa:48:8e:52:0f:be:58:75:45:12:2f:
06:bc:db:12:e5:73:70:3c:e1:3b:a4:c2:4d:c3:a4:
15:e2:75:6e:bc:53:29:68:85:a0:13:29:ff:f3:71:
2d:85:a2:f6:bf:5f:cd:f0:b1:2d:a3:c9:e0:b8:70:
a8:2b:82:13:c1:b6:93:8b:2f:33:dc:ac:fa:c6:4b:
66:ab:9c:44:2e:54:75:a4:dc:e5:a2:16:69:cd:ff:
85:29:ba:6d:53:c8:2b:bd:d0:29:15:b6:59:aa:6e:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:F3:37:DD:67:A8:EC:91:F2:01:C3:EF:6C:86:67:A2:BF:50:96
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b5:aa:a0:d6:29:f8:be:c5:5d:55:45:49:fa:66:dd:ab:f3:
c1:55:91:04:62:cb:de:56:45:6b:9f:96:1e:71:98:0c:94:24:
46:61:30:80:d0:89:d2:eb:c9:e3:ba:88:2b:96:88:12:8d:d2:
5b:96:7f:06:aa:03:03:3e:b8:46:a8:65:5b:bc:97:ad:c5:03:
3c:31:9c:4f:06:69:9c:cd:99:79:2b:bc:a0:7d:0c:b2:70:c3:
d4:0b:09:e4:68:9f:ce:43:0d:47:16:57:88:f1:8d:58:9d:4d:
18:91:af:9c:25:a5:e4:a9:dc:f2:37:58:60:a6:3e:51:af:38:
70:7a:0b:32:1d:2a:07:63:e2:e1:dd:bd:90:07:27:44:cd:f1:
6d:d1:bc:9e:02:e4:29:05:9f:2d:5f:19:78:72:c3:f8:20:28:
0e:89:05:0a:e6:61:90:be:ce:75:64:22:61:96:ba:46:6f:49:
ee:50:e4:13:87:b6:83:d7:48:f3:b3:e1:f3:ab:0f:fb:73:aa:
84:73:f9:54:ca:5b:6f:46:b0:07:13:a2:cb:c1:4f:5b:50:a3:
6e:1c:74:93:56:e4:dc:2c:7b:f5:63:05:9c:94:5f:fc:23:48:
e0:79:2a:77:d3:20:60:c4:68:20:8f:75:cb:a5:6a:e7:b8:be:
86:ee:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:23 2025 by rpki-client