Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: tyYqkroBW9qo/YZItddcd3Fb47fBSIYIs5cF5BjSzrA=
Subject key identifier: 92:09:EE:54:49:E4:34:C3:D0:A3:60:4C:6B:E4:78:A3:F5:1E:71:BB
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 0197684E55A88BA6EDE1315418CBAA3E663C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 0486
Signing time: Fri 13 Jun 2025 08:00:53 +0000
Manifest this update: Fri 13 Jun 2025 08:00:53 +0000
Manifest next update: Sat 14 Jun 2025 08:00:53 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: PvTs18GUTHEiAA8ql/EnsbvxtmT9OrOUS3buLkPE0Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:55:a8:8b:a6:ed:e1:31:54:18:cb:aa:3e:66:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: Jun 13 08:00:53 2025 GMT
Not After : Jun 14 08:00:53 2025 GMT
Subject: CN=9209ee5449e434c3d0a3604c6be478a3f51e71bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:99:86:db:85:0e:e0:22:f5:ab:ee:d6:a3:
44:8f:5d:e0:0a:cf:11:9f:5a:a9:25:79:c9:10:56:
f3:d9:66:61:fe:59:09:67:a1:66:88:00:84:32:08:
4e:70:7f:d9:28:b8:44:55:1d:c6:35:18:52:b7:7e:
40:3d:2c:a9:88:f4:26:0e:cf:da:cd:d4:d6:17:13:
a4:84:9d:2d:59:55:b5:1c:bf:ef:2c:c9:19:f8:db:
6f:be:b2:56:2d:dd:62:e9:3a:d8:30:8a:5d:4f:48:
eb:66:ee:96:93:92:99:a5:e4:18:ab:33:16:94:39:
d8:4e:18:44:f3:14:77:b0:44:7d:27:9c:70:02:65:
ec:25:39:e7:38:46:a1:ac:c2:a6:38:93:f9:d6:6f:
94:55:60:8e:6f:7f:39:4f:8d:4f:b8:0d:85:9e:dd:
e7:a7:11:e4:80:17:de:a7:dd:8a:89:bb:48:28:c1:
3f:d2:9a:d6:4a:8d:20:dd:38:c5:27:f9:f4:fe:12:
9b:6b:74:c2:c6:07:1a:48:5c:dc:37:85:50:bd:a1:
9a:2c:ff:03:18:70:0f:8a:08:e7:8a:e6:c3:61:12:
42:14:3a:46:c5:0a:0c:b3:15:f4:f5:bd:32:67:cb:
9b:77:d5:9f:bf:25:5c:d7:d7:fb:7e:9b:7e:59:0f:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:09:EE:54:49:E4:34:C3:D0:A3:60:4C:6B:E4:78:A3:F5:1E:71:BB
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f1:e5:75:19:fe:5f:36:12:8c:89:5e:50:38:eb:ec:8d:58:
f2:c9:9c:5f:e7:9d:7f:67:69:db:b1:6c:c3:0b:28:1c:cb:9a:
c0:f5:53:8e:54:77:05:8d:16:d7:d7:c8:ba:a8:05:32:2a:d7:
66:ad:72:a6:7d:2b:36:ea:80:d6:87:60:2a:1e:34:18:92:ab:
51:f4:4b:3c:97:9b:e4:d9:e4:cc:54:b0:c9:01:fb:17:a8:16:
52:4c:e3:c4:41:31:fb:5a:c3:b1:44:e9:cf:ec:dd:a6:b0:08:
3a:eb:d7:13:a0:1c:d0:f1:1a:c4:a8:d2:2d:cd:bd:9b:17:68:
28:5a:2e:40:ba:c3:99:fa:6a:17:10:e6:5b:ad:0f:ea:ac:f0:
21:00:b2:75:02:b5:ef:7d:c4:cc:1e:1d:c1:f2:48:7e:2c:a3:
ed:c5:b3:b6:8c:35:6c:45:72:95:99:b7:24:c7:fc:2d:61:03:
a5:93:ab:2f:52:7f:1d:4b:b4:8a:b9:13:7a:e3:89:85:f7:91:
16:b9:63:5f:e5:04:a4:1a:20:2b:fc:77:2c:f1:e9:f9:f5:de:
c4:0b:8a:c3:dc:2f:6f:e7:84:f9:af:e0:47:01:44:3d:43:d5:
44:22:83:c8:1f:78:88:d7:7f:90:f3:9c:b4:00:10:b7:d7:10:
45:e5:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:26 2025 by rpki-client