Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier: ZmOIzwIg2f/MpLtNpnSal/VqLcTh1nuDZUM6EIMA+Ow=
Subject key identifier: 29:62:91:33:EC:B8:8D:A9:A4:85:8F:36:A7:C7:1B:38:8A:5A:C0:8F
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial: 01976C2B09F606E28780E8FCEE8D7D8BFB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number: 108F
Signing time: Sat 14 Jun 2025 02:00:49 +0000
Manifest this update: Sat 14 Jun 2025 02:00:49 +0000
Manifest next update: Sun 15 Jun 2025 02:00:49 +0000
Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: wYf+eFIuGz1GnMj+5Cov4sHjbHkxlDvp1VzaZmr5rc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:09:f6:06:e2:87:80:e8:fc:ee:8d:7d:8b:fb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Validity
Not Before: Jun 14 02:00:49 2025 GMT
Not After : Jun 15 02:00:49 2025 GMT
Subject: CN=29629133ecb88da9a4858f36a7c71b388a5ac08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ad:dc:c4:16:0b:61:76:0b:aa:fd:11:f6:b6:
f0:e4:55:18:5d:b1:17:25:a6:6f:6d:b4:82:38:d1:
ca:06:db:9b:1a:08:c1:de:5b:b4:60:b8:50:95:4c:
6d:72:e4:78:57:e2:51:35:ff:3f:36:19:1a:ed:0d:
30:b6:e3:e1:92:3f:85:a1:e3:b1:a4:1d:db:11:39:
f2:95:80:7f:d9:39:a2:97:9e:0e:c0:f1:51:91:47:
db:60:74:ba:ef:ca:4f:24:02:d7:5f:3a:b7:52:8a:
e5:c2:b9:29:39:e4:c8:52:a5:ca:37:ab:94:51:17:
b6:fd:ab:46:e7:47:dd:c3:9a:45:da:76:45:b7:fd:
fe:22:71:0f:b5:c5:bc:e9:39:9a:fe:1e:e5:06:fa:
b7:f7:7c:68:13:9c:6d:a5:06:e6:d6:6f:7f:3d:b5:
54:dc:2f:18:90:ef:c0:a1:60:88:82:ea:0a:3b:0e:
b5:5e:24:c0:a2:03:97:d0:57:69:59:10:74:aa:bc:
b7:de:37:27:4d:1d:ab:c0:43:29:62:16:7b:42:df:
74:fa:69:cf:0d:c8:fd:24:a8:8f:ca:18:51:6b:19:
18:3b:a5:38:4e:26:04:d4:fb:0c:82:0b:6d:7a:26:
bc:d1:24:44:62:b5:c5:cc:2d:30:5f:fd:34:c7:d8:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:62:91:33:EC:B8:8D:A9:A4:85:8F:36:A7:C7:1B:38:8A:5A:C0:8F
X509v3 Authority Key Identifier:
keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:34:20:da:82:29:bd:31:45:5f:95:1d:90:74:38:5f:37:b9:
ae:ec:e1:e7:00:b7:c0:79:fd:c5:1f:da:f2:ee:59:86:91:70:
a5:e7:b5:c1:87:88:8b:2d:06:45:3a:6f:66:b5:1b:db:5f:bf:
d9:a3:e6:79:6f:fb:a9:5f:31:9e:00:e6:97:41:51:a5:a4:21:
ad:79:ea:aa:67:ea:b2:a2:1e:e3:e9:24:4e:55:22:78:f1:d0:
3c:15:31:7b:97:51:0b:d3:42:39:10:2f:c3:90:7f:eb:fd:77:
6d:e1:54:9a:56:f9:a2:59:25:8a:26:46:08:c6:10:a5:39:df:
7d:1c:d9:73:3b:06:31:9a:b8:ef:e4:57:79:f9:77:21:dd:7a:
1a:31:46:86:47:33:53:63:f5:06:24:aa:ac:ec:8a:80:ae:b7:
60:dd:87:07:4d:e5:d5:bb:69:5e:4a:b9:19:89:64:cb:72:d6:
82:3d:13:9b:02:90:19:23:83:3e:5a:43:4d:89:55:e7:ca:a9:
6f:bf:cd:c6:37:8e:c6:1b:c4:fe:fd:77:bd:07:df:ec:d4:4f:
29:b2:5b:a1:d0:10:9f:b3:51:a8:79:eb:66:93:b7:f3:87:49:
0b:c0:bc:8b:1c:68:b2:18:88:cf:8a:03:be:c3:7f:83:73:d3:
3a:76:82:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:17:20 2025 by rpki-client