Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: wzMZSPZ35sbDeGL19yK87WVye8uf3sQK1NUT+pdCdFc=
Subject key identifier: 15:9A:AF:4D:46:5A:11:07:71:62:52:F1:D2:E1:38:10:15:3D:2B:73
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 01976960DC92308FE3931D4794A83E2949C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 155E
Signing time: Fri 13 Jun 2025 13:00:44 +0000
Manifest this update: Fri 13 Jun 2025 13:00:44 +0000
Manifest next update: Sat 14 Jun 2025 13:00:44 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: Sdp41kq0V2EYTSFARgdJEDpJljk4YRfspD0GpUvaX6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:dc:92:30:8f:e3:93:1d:47:94:a8:3e:29:49:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: Jun 13 13:00:44 2025 GMT
Not After : Jun 14 13:00:44 2025 GMT
Subject: CN=159aaf4d465a1107716252f1d2e13810153d2b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:7e:7c:d9:32:9f:23:97:87:ea:43:98:ca:
22:5e:8d:76:3a:0b:ea:7d:74:19:b4:8c:e1:14:c1:
fa:0f:84:95:4d:11:ca:03:1f:2e:b7:3a:6b:c3:81:
a5:92:d6:a0:37:7d:3a:6e:74:3c:05:a4:16:3f:bb:
45:d6:92:0e:51:4d:39:17:dd:9d:3f:ad:58:89:50:
00:87:a6:e1:a5:89:f7:14:e5:26:77:2a:11:95:57:
82:9b:5a:da:04:45:c2:9b:85:fe:95:4a:34:1f:4a:
19:67:fd:ff:1b:ba:a2:33:59:7d:26:bf:c7:db:90:
dc:11:09:af:e7:36:08:f9:ab:61:5e:76:df:d2:b7:
20:72:a9:72:49:87:53:a0:ba:dd:a7:0a:3d:d7:02:
a8:b4:97:a5:ab:7a:e3:74:f2:ef:fa:7b:2f:8e:88:
52:80:9b:83:39:0b:c9:b1:7c:7d:56:44:64:1d:51:
19:84:91:ca:4e:cc:f3:e7:55:86:3a:e4:9f:f5:4d:
04:06:d2:cd:29:f9:f1:27:ca:36:25:58:7d:28:f5:
9d:ca:f4:c9:3e:5e:26:ee:53:f7:33:e3:a5:44:5c:
f4:1d:b7:8b:ed:cf:8a:60:35:01:15:f5:7a:29:51:
25:ac:a1:a4:cb:f2:61:dd:2d:3b:cb:2d:40:7c:d6:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9A:AF:4D:46:5A:11:07:71:62:52:F1:D2:E1:38:10:15:3D:2B:73
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0c:09:6e:11:85:4f:c7:6b:43:7f:00:ef:8f:08:30:53:d8:
4d:e0:05:78:3d:57:a2:97:28:92:f7:9a:ff:6b:e0:5e:f1:95:
b8:ef:34:88:88:c2:b4:30:c5:84:c9:d5:85:8d:6e:e0:e8:9b:
a3:66:c4:8d:de:f2:6f:90:4a:cf:32:07:32:48:08:27:72:c0:
3e:a0:d3:9b:55:b2:1c:87:c2:a3:db:20:46:89:49:70:5a:7a:
65:6b:e8:50:54:e4:a5:e0:65:b9:f4:ba:3a:ea:72:8c:d1:c4:
d3:d7:4e:47:62:76:b9:32:24:e4:c5:e4:13:00:21:7c:e6:38:
bc:de:35:5d:e1:97:96:29:3b:5f:3e:57:f8:ba:80:21:39:42:
a2:e5:50:51:d7:38:0f:58:84:8b:eb:48:cc:79:3e:6c:ee:43:
01:cd:a4:92:20:ab:4b:f1:aa:1e:b7:96:24:83:a6:b6:6a:5a:
f0:81:b2:4b:cd:f9:6d:be:1a:70:f9:2a:56:e0:22:7a:c0:1d:
42:88:2b:81:9d:d2:19:db:a2:90:c0:23:df:d4:25:4d:13:72:
72:c7:d0:ca:7d:d6:f8:bc:3b:36:27:c1:94:76:25:6c:f3:68:
48:6d:67:a4:06:04:67:c4:0a:bf:30:3d:1f:4c:7c:18:c9:45:
55:d6:1d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:54 2025 by rpki-client