Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
File: xxovfXzIw2N0bpa8P8yLBflgb-o.mft (raw, json)
Hash identifier: X/KDXHkN4zmTAzJX1SFnAshS825Ku3opdYmKJsQ2DE0=
Subject key identifier: 2E:1C:B0:B3:FE:20:0E:91:BE:77:53:42:C9:98:DF:3D:76:70:68:09
Authority key identifier: C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
Certificate issuer: /CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Certificate serial: 01976C991B01505F6C7F538C587B099C0106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 04:01:02 +0000
Manifest this update: Sat 14 Jun 2025 04:01:02 +0000
Manifest next update: Sun 15 Jun 2025 04:01:02 +0000
Files and hashes: 1: xxovfXzIw2N0bpa8P8yLBflgb-o.crl (hash: cZo/JiWCOvWdZ0Mf8z5ZBoHe0dYbuaX/IwjklRWq+HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:1b:01:50:5f:6c:7f:53:8c:58:7b:09:9c:01:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Validity
Not Before: Jun 14 04:01:02 2025 GMT
Not After : Jun 15 04:01:02 2025 GMT
Subject: CN=2e1cb0b3fe200e91be775342c998df3d76706809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:8d:ee:ad:ca:95:9f:6c:a1:ca:e4:be:dc:
dc:77:3b:ba:91:01:cf:20:5a:5c:fe:e6:7b:e1:a5:
6a:a5:a2:b5:a9:55:8d:87:e8:07:42:69:2a:38:32:
32:4d:ca:ad:42:5c:ae:9e:4c:ba:26:09:bb:fc:e8:
4f:bd:68:76:14:b2:12:b7:80:c2:7c:7e:89:c0:38:
c0:24:0f:e7:b8:30:c2:6f:2a:c2:1f:15:b9:5a:01:
91:3e:29:33:d1:7b:63:56:9d:3a:a3:2e:2f:5f:d8:
4a:ee:16:79:15:ef:e9:51:59:e1:22:73:3c:62:66:
1f:5c:5a:2a:25:ac:11:99:d9:82:61:91:68:b8:2e:
0e:53:27:09:35:41:14:c3:fd:18:14:1f:b2:40:2f:
ec:de:e8:50:c7:22:9b:a1:6a:73:5f:f0:01:3c:9a:
e4:90:1b:24:b9:50:d5:3b:0e:93:18:74:30:c7:9a:
51:2a:2f:68:f8:0d:5a:74:eb:91:8d:30:fc:60:35:
ff:2c:db:11:d2:29:61:e5:08:a3:3f:37:54:43:34:
ce:58:44:44:5f:cf:6b:46:0f:62:7c:8a:36:5b:1b:
b1:65:ff:e5:cf:b3:b6:b1:39:f9:e4:fa:cf:82:11:
18:87:b1:26:56:66:05:8e:79:8b:d1:64:5b:c9:a0:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1C:B0:B3:FE:20:0E:91:BE:77:53:42:C9:98:DF:3D:76:70:68:09
X509v3 Authority Key Identifier:
keyid:C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:85:a8:74:03:ad:bf:82:6b:98:b5:77:ce:d7:82:e1:d5:d7:
89:e6:21:d6:0d:26:af:f5:41:77:11:0a:22:a5:bc:41:9c:d3:
26:a0:ce:9d:fb:05:c8:dc:bc:54:8c:b9:74:c2:fe:3d:0a:a5:
fe:49:d0:2d:84:fe:e7:5f:9a:70:93:25:92:be:fd:41:55:e4:
f3:21:32:a9:cd:51:a2:8d:dd:47:27:b3:21:40:c3:84:36:6b:
af:4a:6b:d0:0e:07:e8:d9:ba:20:d9:41:d7:e0:13:ea:57:b7:
19:17:35:d8:ee:45:b1:47:55:35:20:5e:d0:03:73:c1:5e:51:
50:6c:48:a1:b9:24:89:06:58:63:4e:6f:62:c9:88:12:79:e8:
4c:21:66:3b:c0:16:0a:b5:97:8a:c6:81:6e:8f:3e:f7:57:18:
65:a7:21:97:b6:ae:ef:66:a5:07:8a:b7:fb:20:f3:3d:81:11:
5e:a7:aa:4c:39:94:5f:93:75:16:9a:c7:f2:6a:c6:70:34:f9:
d7:2b:31:4e:4d:3c:e2:11:00:c2:10:43:ee:d9:87:a8:51:e3:
7f:16:23:48:0a:56:57:7d:bb:2e:be:93:9b:19:cd:b9:09:c2:
30:1d:38:2a:90:1d:52:ab:2c:51:df:f5:72:47:8b:25:16:0a:
af:4f:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:30:41 2025 by rpki-client