Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
File: xDzur3eV-33zSLBLIn5QpJoaG3w.mft (raw, json)
Hash identifier: yt3W64b3hEzTmBFwjlIsHhwgWowv/wN3J34dgN/R2Nc=
Subject key identifier: 56:91:87:EE:A6:71:EC:48:3B:F6:04:AC:A3:44:42:3D:07:37:1B:7B
Authority key identifier: C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
Certificate issuer: /CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Certificate serial: 0197684E6690ED8353FE514120859657DD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
Manifest number: 12C6
Signing time: Fri 13 Jun 2025 08:00:57 +0000
Manifest this update: Fri 13 Jun 2025 08:00:57 +0000
Manifest next update: Sat 14 Jun 2025 08:00:57 +0000
Files and hashes: 1: xDzur3eV-33zSLBLIn5QpJoaG3w.crl (hash: 5qEex0GQXt5YnPMkX3A+ODQIuTZrbwUZt9soW9iBGho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:66:90:ed:83:53:fe:51:41:20:85:96:57:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Validity
Not Before: Jun 13 08:00:57 2025 GMT
Not After : Jun 14 08:00:57 2025 GMT
Subject: CN=569187eea671ec483bf604aca344423d07371b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:21:53:d4:84:2c:5b:df:87:51:d4:69:bc:
06:bb:a2:ac:09:a8:74:9f:a4:95:58:36:37:76:41:
18:bf:c7:93:56:f0:73:82:6d:6d:c2:71:89:cd:d3:
81:ca:7b:42:e7:41:29:1c:f4:f4:43:13:5e:7f:6f:
b8:91:a9:48:86:7a:36:a6:fa:9e:8a:3c:3a:90:03:
50:81:c9:20:c7:f4:b8:d9:87:c1:12:9b:38:f9:e0:
26:f2:b6:81:c4:8f:2e:17:b4:0f:ea:3b:e0:98:04:
5e:d9:7c:a3:36:34:4b:57:a7:19:98:eb:2c:28:b4:
41:41:87:14:fa:b1:08:f4:78:72:17:b1:82:91:c8:
83:b9:6a:25:a3:55:4f:29:3d:82:e3:76:5b:dc:12:
ee:4b:88:86:8c:26:87:a6:29:f7:e1:8c:01:3f:dd:
85:0c:f9:af:a9:ef:3f:6f:64:f3:76:00:c7:0d:d6:
9e:86:9b:be:c8:15:66:d0:e7:3c:4b:46:8a:33:bc:
07:a8:b7:85:43:86:5c:2e:21:bd:eb:38:6c:f8:ef:
d6:9e:13:04:29:e3:b0:f6:7c:14:3e:e9:e2:15:f1:
bd:84:04:ef:db:ab:d9:e7:5d:dc:78:b8:3c:af:aa:
0c:b3:aa:38:ac:64:33:8b:72:1a:7e:ab:49:78:76:
d3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:91:87:EE:A6:71:EC:48:3B:F6:04:AC:A3:44:42:3D:07:37:1B:7B
X509v3 Authority Key Identifier:
keyid:C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e4:9b:0e:75:9d:80:47:0c:c9:e8:3d:0a:94:ca:78:33:8f:
72:2e:99:5a:8a:1f:f4:6f:c0:97:72:9e:b5:d2:a3:d3:31:38:
2f:d4:f0:e1:6d:15:dd:3a:f3:dd:ad:ef:00:68:b3:ba:51:33:
a8:9e:0d:5c:ec:cd:dc:25:45:f4:be:fe:82:15:d6:92:3d:1e:
96:04:d4:fc:4a:d0:43:b7:7a:49:27:c6:4d:ca:8a:e3:d7:9c:
fe:a9:91:c3:29:dd:ae:94:9c:1a:e1:92:66:96:a4:82:a8:d3:
9a:9e:9b:7e:18:0b:aa:9d:89:ee:7e:8c:8b:02:21:b2:07:64:
75:21:91:fb:04:18:ff:aa:45:2f:20:8b:f9:06:1a:c6:f5:6c:
13:20:32:cd:09:f0:18:0d:9a:99:21:52:3e:40:10:a5:d6:fc:
47:b9:ee:1d:48:4f:89:99:30:e6:ad:db:26:ee:bd:12:59:94:
f5:57:d2:0a:ae:c8:8e:79:47:c9:2c:95:59:bc:2d:68:4f:8c:
72:5b:4f:7c:0d:2f:08:bf:22:6d:34:ae:8e:b2:ac:87:89:22:
89:b7:f6:bc:1e:cb:2a:ba:b8:a9:ef:cd:49:73:d0:99:3f:87:
ee:23:85:fe:7b:2f:72:df:8b:c9:84:5d:ae:cf:a0:23:8a:79:
7c:f6:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:51 2025 by rpki-client