Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier: LX+wFV1gYeUSpNJUvZjf0iFh9wcTRD+TUpVuiau/O1g=
Subject key identifier: 24:BE:B7:14:5D:7F:34:7C:87:40:A6:37:1D:60:FB:47:A4:C4:B7:27
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial: 01976A061DF9369457171D8A1335FD42885F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number: 079D
Signing time: Fri 13 Jun 2025 16:01:15 +0000
Manifest this update: Fri 13 Jun 2025 16:01:15 +0000
Manifest next update: Sat 14 Jun 2025 16:01:15 +0000
Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: sIPDj67DU99pXhmWFkr87IUNDoQi5Ps3lq+iafi2WAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:1d:f9:36:94:57:17:1d:8a:13:35:fd:42:88:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Validity
Not Before: Jun 13 16:01:15 2025 GMT
Not After : Jun 14 16:01:15 2025 GMT
Subject: CN=24beb7145d7f347c8740a6371d60fb47a4c4b727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:8a:17:40:bf:82:31:db:1f:3e:4b:c6:8b:
ab:dc:7d:61:8a:3e:61:1f:87:96:ce:59:d0:e5:7e:
62:cd:e3:5b:77:93:f0:e4:8e:2f:2e:0c:36:a4:fc:
eb:68:f3:4a:eb:ed:5b:43:54:c6:94:b8:49:51:9d:
25:16:02:f6:32:00:d3:3f:a3:28:86:0d:68:ff:e9:
1c:91:4b:d2:5e:4b:80:48:c4:93:8a:e4:9d:5d:82:
6e:58:d9:00:0b:53:aa:27:ea:0c:e4:15:39:b4:e7:
f9:c9:86:09:c1:61:61:e4:88:3b:24:72:ca:6d:e6:
b1:d6:ef:a6:b0:73:90:e4:38:02:ce:04:0c:71:4a:
97:b9:b5:9f:93:35:bd:29:00:77:ab:3f:af:c7:0b:
af:e9:81:27:aa:9f:72:a1:47:e1:13:dd:3c:ec:c3:
82:99:ab:c7:e2:06:c7:66:7d:2f:cb:7d:ad:4f:44:
87:94:5a:21:a1:44:63:ba:30:e2:a6:33:c9:34:15:
ef:c7:f4:03:b4:23:6f:a1:da:1a:f4:eb:2b:c0:c7:
c2:78:fc:c0:5f:17:14:85:fc:7a:d4:a6:32:c3:16:
4a:6f:d1:a0:44:11:3a:d8:cc:5f:b5:20:03:6b:b6:
70:76:a2:1b:60:8c:c0:9b:da:e5:74:81:52:ae:7a:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BE:B7:14:5D:7F:34:7C:87:40:A6:37:1D:60:FB:47:A4:C4:B7:27
X509v3 Authority Key Identifier:
keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:93:a5:aa:58:30:30:3a:f1:38:8a:c1:7e:43:31:11:6e:ed:
4e:b9:85:cc:74:50:33:fb:f4:98:8d:f5:81:00:61:ba:08:dc:
25:8e:34:43:3d:d9:85:bc:cd:b6:d4:1d:0f:dc:17:38:a1:05:
40:76:c1:12:8d:a9:b9:5e:2e:b5:12:e0:75:7f:4d:f5:48:33:
0c:a9:5b:47:ae:31:4b:c7:96:61:ac:8a:ed:9b:70:8f:17:ca:
ee:ee:3e:09:2c:68:3e:0a:23:41:13:4e:24:7b:6c:6f:c6:aa:
7d:7c:88:ac:e1:39:ba:48:f6:aa:fd:79:47:d3:46:da:d0:d3:
d5:5b:8d:3b:5e:f8:ff:55:1c:2c:0b:da:ce:d1:17:f7:2e:86:
d1:22:b4:9b:ad:68:af:c3:af:cf:2a:50:9c:c2:a6:07:f0:3f:
cb:27:74:05:a5:b7:d1:29:d1:e4:55:d5:aa:70:b1:89:80:04:
c6:34:77:b0:f3:8d:9c:21:da:0a:5d:18:5d:f9:e4:b2:94:62:
82:3b:be:76:07:ee:cc:06:30:41:5e:3a:56:28:f4:3c:64:c7:
78:87:e8:70:f1:93:0c:15:3a:1e:b5:20:a4:5b:fb:5f:d9:8c:
7c:40:85:ed:91:66:80:d0:4f:97:5a:65:25:5e:0d:94:14:27:
8f:d9:84:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBh35NpRXFx2KEzX9QohfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1Y2ZlOTBhYWZlMmU4MDg1ZWJmNmYwMDUzOTYwYjk2Yjc3
ODA0OTEwHhcNMjUwNjEzMTYwMTE1WhcNMjUwNjE0MTYwMTE1WjAzMTEwLwYDVQQD
EygyNGJlYjcxNDVkN2YzNDdjODc0MGE2MzcxZDYwZmI0N2E0YzRiNzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QqKF0C/gjHbHz5Lxour3H1hij5h
H4eWzlnQ5X5izeNbd5Pw5I4vLgw2pPzraPNK6+1bQ1TGlLhJUZ0lFgL2MgDTP6Mo
hg1o/+kckUvSXkuASMSTiuSdXYJuWNkAC1OqJ+oM5BU5tOf5yYYJwWFh5Ig7JHLK
beax1u+msHOQ5DgCzgQMcUqXubWfkzW9KQB3qz+vxwuv6YEnqp9yoUfhE9087MOC
mavH4gbHZn0vy32tT0SHlFohoURjujDipjPJNBXvx/QDtCNvodoa9OsrwMfCePzA
XxcUhfx61KYywxZKb9GgRBE62MxftSADa7ZwdqIbYIzAm9rldIFSrnpkAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS+txRdfzR8h0CmNx1g+0ekxLcnMB8GA1UdIwQY
MBaAFMXP6Qqv4ugIXr9vAFOWC5a3eASRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iOTNiMDEtMWNmNC00MzdiLTgzMGQt
ZWIyMzU5YzI0MmRkLzEveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iOTNiMDEtMWNmNC00MzdiLTgzMGQtZWIyMzU5YzI0MmRk
LzEveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZOlqlgw
MDrxOIrBfkMxEW7tTrmFzHRQM/v0mI31gQBhugjcJY40Qz3ZhbzNttQdD9wXOKEF
QHbBEo2puV4utRLgdX9N9UgzDKlbR64xS8eWYayK7ZtwjxfK7u4+CSxoPgojQRNO
JHtsb8aqfXyIrOE5ukj2qv15R9NG2tDT1VuNO174/1UcLAvaztEX9y6G0SK0m61o
r8OvzypQnMKmB/A/yyd0BaW30SnR5FXVqnCxiYAExjR3sPONnCHaCl0YXfnkspRi
gju+dgfuzAYwQV46Vij0PGTHeIfocPGTDBU6HrUgpFv7X9mMfECF7ZFmgNBPl1pl
JV4NlBQnj9mE2Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:27 2025 by rpki-client