Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft
File: xLCiTzhOiW3lHlg149KEYHtJxZE.mft (raw, json)
Hash identifier: I7/+btdtMh6AAAoVYDRiqoa2IN0NSgLsBBpBxnrONCs=
Subject key identifier: 2B:2F:12:08:8A:AC:88:9A:87:FB:89:2A:6E:AC:73:A7:66:64:B7:34
Authority key identifier: C4:B0:A2:4F:38:4E:89:6D:E5:1E:58:35:E3:D2:84:60:7B:49:C5:91
Certificate issuer: /CN=c4b0a24f384e896de51e5835e3d284607b49c591
Certificate serial: 0197711AE35B5BAE14D1BD5EE0945F9E3C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft
Manifest number: 65
Signing time: Sun 15 Jun 2025 01:01:16 +0000
Manifest this update: Sun 15 Jun 2025 01:01:16 +0000
Manifest next update: Mon 16 Jun 2025 01:01:16 +0000
Files and hashes: 1: xLCiTzhOiW3lHlg149KEYHtJxZE.crl (hash: CPCfXHjkx3aU/cnMmXNwbzD47chOUhGi6ZJir9KhEMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:e3:5b:5b:ae:14:d1:bd:5e:e0:94:5f:9e:3c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b0a24f384e896de51e5835e3d284607b49c591
Validity
Not Before: Jun 15 01:01:16 2025 GMT
Not After : Jun 16 01:01:16 2025 GMT
Subject: CN=2b2f12088aac889a87fb892a6eac73a76664b734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:0d:c7:c7:66:28:fa:66:b7:6f:ef:23:96:
a1:ea:4b:4e:69:fb:19:49:8e:ee:9b:52:af:72:bc:
63:b1:b5:65:9a:65:42:18:4f:72:52:4e:c4:bd:78:
b8:2a:cc:b1:96:69:92:91:39:c3:e7:55:b5:e8:a8:
79:42:4a:76:23:8e:dc:d7:ff:74:ac:da:13:7d:5f:
f7:f8:90:26:29:74:c2:5f:e3:5e:11:8f:d8:fc:4e:
72:e0:55:fc:25:6b:ec:4d:3b:d1:43:13:42:ad:f7:
10:c5:be:4e:5b:64:bd:16:60:dd:39:e7:9a:6c:cf:
0c:ee:40:79:fb:98:11:5e:53:18:43:62:f3:b0:f1:
52:2b:f2:36:07:90:a7:e4:0d:dc:69:a5:06:97:34:
e6:a4:5d:b8:7a:7a:a7:51:91:04:b9:4a:0f:5c:6d:
03:13:b5:27:80:88:89:9e:8b:2b:74:a5:90:fc:8c:
d2:91:39:0f:08:2b:28:cc:4b:73:8f:73:f2:5c:43:
bd:b5:e3:35:c0:bd:c5:51:19:f8:dd:37:99:e6:6a:
24:3f:6b:83:d3:25:b1:1b:1b:c0:e7:6a:67:c2:07:
80:b5:4d:14:82:0e:e9:64:4a:eb:7c:be:8a:b6:fb:
f7:04:ef:f1:d4:d0:a7:fb:e4:b1:06:2a:53:52:41:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:12:08:8A:AC:88:9A:87:FB:89:2A:6E:AC:73:A7:66:64:B7:34
X509v3 Authority Key Identifier:
keyid:C4:B0:A2:4F:38:4E:89:6D:E5:1E:58:35:E3:D2:84:60:7B:49:C5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3f:75:84:8c:0b:38:cf:71:16:38:2a:59:50:85:ee:93:8f:
76:be:13:e7:9f:a3:23:26:40:59:8a:1b:d1:54:78:db:14:5d:
32:97:a7:f0:6c:f0:79:61:19:c1:6a:7a:83:61:79:3a:7f:ce:
cb:fa:37:f7:0b:1a:b9:fc:82:13:0c:05:4b:7b:83:f2:11:ef:
f3:f4:fb:7e:a9:6b:73:99:81:af:71:7c:2e:94:18:d3:a9:78:
59:10:fa:bf:37:e2:e3:a9:ee:74:40:ff:32:cb:99:e6:0f:5d:
2c:2d:db:94:1a:1c:a2:61:de:8a:07:f6:d8:fd:48:e0:4c:46:
a2:c5:fe:6f:44:c9:a7:fc:07:69:bd:5e:6b:38:33:74:33:a5:
79:4e:d9:70:d8:92:fd:a9:4e:e7:3a:88:e8:c7:76:f6:15:2b:
a6:6f:1c:dd:f8:82:d1:24:d9:4e:9b:ff:40:b8:6e:b3:73:8a:
2b:d2:46:68:7e:fc:eb:ca:11:bd:e3:71:db:10:0b:2c:c9:14:
bd:db:53:21:c8:b5:c9:5f:5c:3b:40:b6:4b:f2:b7:27:00:a3:
04:f5:75:3f:d8:c5:78:5e:c2:02:a5:26:55:53:af:e9:70:49:
5a:76:43:9e:92:39:75:8d:f4:c5:1a:29:d9:bf:93:f2:3d:59:
d2:a1:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:27:12 2025 by rpki-client