Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json)
Hash identifier: sVSYsosBBXuNZHjOPEt8lw7PxvKB70QpTCXk7LIeHh0=
Subject key identifier: C7:71:18:A4:47:10:B7:AA:61:E4:32:ED:8C:4D:A6:ED:56:8C:96:06
Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Certificate serial: 01976DABE34BA4E22623C63741CF198F22E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
Manifest number: 1176
Signing time: Sat 14 Jun 2025 09:01:10 +0000
Manifest this update: Sat 14 Jun 2025 09:01:10 +0000
Manifest next update: Sun 15 Jun 2025 09:01:10 +0000
Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: SOy3Vst7amddaQsySf9Ymofo6biNdGJvHggauPWJx8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:e3:4b:a4:e2:26:23:c6:37:41:cf:19:8f:22:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Validity
Not Before: Jun 14 09:01:10 2025 GMT
Not After : Jun 15 09:01:10 2025 GMT
Subject: CN=c77118a44710b7aa61e432ed8c4da6ed568c9606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:3c:26:3b:10:05:0e:d5:11:5f:32:ae:b9:
f5:41:93:b6:42:1d:52:63:29:45:e5:ea:a6:44:22:
71:cd:e5:ce:03:ec:dd:fa:74:5a:b6:ff:16:5b:0d:
15:3f:d0:86:0f:c8:e0:8c:cf:9c:b9:6c:34:22:84:
bb:e2:72:e9:bf:63:7d:94:99:f3:65:81:52:ad:c4:
d9:cb:e0:d7:9f:59:f8:92:f8:67:49:03:5e:0b:a6:
9f:65:ff:4c:82:d2:50:1d:b0:6b:bd:fa:f9:48:c3:
59:d5:7a:07:ea:b6:c1:ca:79:85:b4:79:6f:cd:39:
60:e8:41:ae:35:00:44:56:14:36:69:40:b0:2d:04:
03:11:a4:c7:1a:e6:ad:55:32:dd:42:5c:ca:dd:68:
33:98:6e:0b:48:fc:5f:10:3e:ee:1b:5e:c7:cd:b6:
1c:d4:89:ad:44:4a:08:4a:48:1d:1f:be:e2:7f:00:
f5:7c:66:0b:0b:4e:10:27:c9:c2:d7:ae:f3:fb:4f:
5b:c1:92:6f:04:e0:60:0f:93:fb:32:a0:fa:09:06:
42:36:e9:80:8f:59:96:9a:b6:9e:23:34:3d:7b:10:
a8:fe:24:1a:a7:cc:da:4f:dc:7c:5e:07:fa:72:ab:
22:77:63:5d:fa:23:2a:56:ad:46:44:ce:c1:bb:8a:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:71:18:A4:47:10:B7:AA:61:E4:32:ED:8C:4D:A6:ED:56:8C:96:06
X509v3 Authority Key Identifier:
keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2f:bd:b3:01:9f:35:3e:8f:7e:ec:21:3d:b1:d2:32:da:b5:
9b:b7:30:7d:c8:2f:37:c4:51:c4:b2:d8:c2:d3:b8:b2:f3:8b:
93:6f:ce:4d:6b:a8:f2:56:4e:07:06:6b:2f:a1:2a:ae:c1:ef:
86:18:70:93:a1:fc:db:2e:11:21:14:63:b5:63:3d:25:5b:24:
87:8d:a3:56:5f:bc:14:1f:d8:d7:ca:56:ea:dd:98:d8:a9:1f:
80:cd:57:52:ac:01:e1:84:f2:0a:11:7c:b1:bb:e4:94:39:1d:
72:5f:e2:85:67:01:3b:e3:7f:fa:00:06:4e:d8:fa:f1:4a:54:
bb:a3:95:66:87:4c:90:e1:0d:6d:04:b1:fc:03:fa:2a:37:1c:
f3:7c:a2:c3:d9:c3:2c:16:b2:cb:d7:7e:0e:36:7b:7e:bc:b0:
33:3a:81:6e:16:ae:22:ff:7c:2f:53:f0:4a:e8:09:bb:5e:a3:
ec:3f:5d:87:97:db:a5:db:19:50:f1:58:94:4d:4a:41:00:66:
4c:c0:70:28:58:92:8d:63:af:6c:b5:3c:6a:2d:c8:b2:7e:d7:
ba:e2:8e:72:8e:3c:5c:84:ec:53:81:f7:c6:fe:b4:c5:2f:59:
b1:a4:37:2d:b0:60:a4:b3:35:78:5a:f8:37:f2:09:fa:2d:4b:
76:0a:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:40:53 2025 by rpki-client