Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: CLe1SOEb99xfH7R7zHZPb69g0w0LZpM1ufDi1bFSlQU=
Subject key identifier: 09:AC:A3:F9:EE:D4:E7:BE:EF:88:E0:1F:07:AE:F3:46:6C:F9:81:5B
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 01977E9FCC6684642B3A3DB7CA55A68FA0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 1592
Signing time: Tue 17 Jun 2025 16:01:31 +0000
Manifest this update: Tue 17 Jun 2025 16:01:31 +0000
Manifest next update: Wed 18 Jun 2025 16:01:31 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: 1O3GPmKsPwEBNidhFbN8PJ48Q+D7lXclxx3i5mpouu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:cc:66:84:64:2b:3a:3d:b7:ca:55:a6:8f:a0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Jun 17 16:01:31 2025 GMT
Not After : Jun 18 16:01:31 2025 GMT
Subject: CN=09aca3f9eed4e7beef88e01f07aef3466cf9815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:81:e7:0f:ae:04:0d:c8:1b:83:aa:05:cb:
7a:0b:b9:e7:95:34:24:44:8b:62:9b:3c:c3:e5:56:
27:57:db:a4:54:3a:9a:45:ca:3b:e1:84:c5:6c:6f:
38:b0:cf:75:ad:8d:ff:71:c3:0a:ab:dc:f8:06:c4:
42:d6:e7:92:52:1d:68:74:ce:46:db:5c:85:d7:ab:
a5:75:0e:73:fc:f0:cb:26:ea:a5:d7:2b:83:53:5a:
4b:41:c0:fb:df:15:73:2a:08:59:43:09:8c:c0:fb:
91:b1:1e:cc:a3:88:3a:90:20:08:81:20:43:e9:47:
14:f8:a5:8d:f0:36:50:74:5a:10:02:1e:6b:ad:f3:
c6:69:9c:03:4b:42:6d:9a:cc:3e:e4:b8:b1:41:eb:
cc:ae:ec:4e:3f:27:ae:c5:68:15:4a:ce:dd:52:6f:
68:fb:a2:77:86:08:1e:cb:ab:db:65:72:65:40:75:
a3:3b:78:6b:1a:a4:84:9b:56:a8:0a:e3:ae:87:72:
a3:51:dc:65:18:03:8a:dd:0f:47:d7:7c:52:34:94:
71:a6:47:62:6f:f3:78:c6:3b:90:82:44:15:53:5a:
fd:e9:94:58:bc:93:61:92:3f:96:41:e1:b1:4b:47:
e4:4b:94:4c:05:f7:3c:be:54:0a:4e:31:00:76:7a:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AC:A3:F9:EE:D4:E7:BE:EF:88:E0:1F:07:AE:F3:46:6C:F9:81:5B
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b8:a4:97:93:4c:4e:3e:98:21:4c:d7:03:50:87:db:62:e2:
a8:78:88:bf:1a:2b:3e:6b:e1:35:d1:c3:bc:a3:16:4f:f4:95:
42:61:04:7d:ab:14:ca:79:4e:12:ef:17:13:cf:e1:de:d2:ac:
52:bb:fe:98:f3:06:71:12:7d:81:c1:b6:86:c1:c8:23:4a:80:
83:46:58:83:69:4b:56:5d:7e:79:d9:52:f2:45:b4:ed:45:21:
a9:05:27:b9:7f:26:45:83:1f:e5:bb:16:98:14:66:ca:8d:34:
f6:0b:3c:6d:ea:2d:85:05:a0:5f:fe:64:25:8a:6b:3b:00:49:
5e:dd:9b:db:41:db:33:81:a4:79:f7:68:5f:1c:05:76:a6:27:
e6:28:a0:d7:18:e2:f9:03:f1:01:8f:76:db:36:36:e5:10:c4:
5a:13:ba:10:6a:2a:aa:d7:05:7c:f6:57:01:6f:aa:be:b1:cb:
81:52:24:f1:58:76:2f:87:7c:ac:67:f7:c8:8a:ec:db:d9:a1:
78:d1:f0:6d:3d:07:7a:82:b4:50:26:5a:fb:74:30:54:68:8a:
84:a3:f2:24:32:84:ab:a0:7d:52:0a:9f:a4:c8:63:5c:9c:8d:
a1:40:9d:14:34:b6:b8:08:2f:be:18:1e:43:6f:65:dd:48:63:
75:5f:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:56:03 2025 by rpki-client