Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json)
Hash identifier: DA/IByMB9XmHt4gTdkhcZBcQaByMxqpoYBrcSG7uSnE=
Subject key identifier: 9D:70:62:9E:F9:86:88:B2:F4:D8:59:34:36:C7:6D:98:CC:B2:38:59
Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Certificate serial: 01976F9A73D06D40D59ACA36AF1F6AEA236D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
Manifest number: 08EF
Signing time: Sat 14 Jun 2025 18:01:22 +0000
Manifest this update: Sat 14 Jun 2025 18:01:22 +0000
Manifest next update: Sun 15 Jun 2025 18:01:22 +0000
Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: Rb2tAebsWPdjw+XY0aJNg885lJ0GlAB9PY0S+/Qgs2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:73:d0:6d:40:d5:9a:ca:36:af:1f:6a:ea:23:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Validity
Not Before: Jun 14 18:01:22 2025 GMT
Not After : Jun 15 18:01:22 2025 GMT
Subject: CN=9d70629ef98688b2f4d8593436c76d98ccb23859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:0c:23:c7:8f:34:a3:8f:d3:8f:54:b0:57:
9c:9f:80:aa:84:8d:c1:3f:08:1c:0d:8b:e1:ce:21:
6f:22:5e:91:af:12:23:f4:4c:30:74:b6:31:f4:dc:
60:99:09:dc:c0:cb:0f:ad:9f:b6:3d:e6:15:26:b7:
c0:f1:42:55:84:d0:00:81:95:ec:00:f1:6e:3c:9d:
2d:fb:7f:cf:84:a3:7d:56:5a:40:66:a5:06:fb:0b:
9b:af:0b:ab:7a:da:4a:c7:f6:47:c6:2d:61:eb:48:
18:1a:de:8b:30:02:d6:55:43:cb:47:79:d4:f8:c4:
66:19:46:46:ee:06:34:49:4b:28:92:4e:c6:96:7f:
2b:fd:bb:6c:48:36:42:68:fe:8e:ab:5b:5a:c2:e0:
07:44:f8:aa:0e:f4:ca:f6:52:8f:84:e5:dd:79:00:
80:e9:0b:65:47:d1:f7:81:28:8c:ad:a0:7a:b5:6b:
e0:f7:51:f5:95:3e:eb:82:ee:d0:04:09:42:29:bc:
60:95:74:ae:6a:1b:a7:a1:12:98:6a:c5:cf:ac:2c:
0b:e1:02:bb:e6:dc:c7:a0:be:7b:9c:0b:56:2d:4f:
ed:39:90:a9:c7:34:07:a1:40:72:42:36:1c:fe:d7:
a1:1e:d0:66:e0:40:39:6a:55:ca:7d:05:2c:4f:20:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:70:62:9E:F9:86:88:B2:F4:D8:59:34:36:C7:6D:98:CC:B2:38:59
X509v3 Authority Key Identifier:
keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fc:33:9a:5a:ba:1a:66:f9:23:db:30:dc:5e:a4:09:aa:ae:
ee:b0:bc:c8:57:37:72:16:de:b6:dd:84:9e:80:0a:52:7e:92:
5b:68:3f:29:73:b3:cc:fb:92:28:81:b0:5d:eb:3b:5a:39:38:
96:65:9d:4b:fb:62:cf:e3:a8:ed:24:1c:ae:86:37:b4:08:b4:
3b:a9:bf:5e:34:e5:83:be:cf:d3:84:38:a6:eb:79:af:b4:f2:
18:4e:7f:4c:29:20:e8:fd:24:00:10:64:0d:dc:0c:61:f7:29:
c5:69:c4:5a:d5:09:52:fe:5e:3c:ae:1a:57:e5:97:26:80:af:
d7:fa:27:93:23:e5:72:9f:aa:a7:0d:4e:cc:4c:26:89:52:6c:
e0:73:ae:9b:c7:6e:e0:46:b4:21:87:83:ae:00:f3:29:12:ec:
ba:06:4d:c5:2d:33:a9:f6:4f:c1:90:46:d3:4f:d3:b0:c5:c8:
80:98:0b:4f:3d:09:23:ec:63:1e:38:6f:79:32:a3:b4:e9:b5:
52:39:52:05:d3:2a:2f:af:1b:8b:53:d1:6c:db:a5:7f:7c:e2:
be:d6:59:4d:b7:8b:90:98:f3:9a:9e:40:05:14:dc:04:8c:a6:
9d:d0:45:46:36:58:4d:78:8b:e2:23:64:1d:0a:28:2f:24:60:
66:b5:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:56:06 2025 by rpki-client