Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
File: x_SYwou91eWf9XaMbTikEMqCZkA.mft (raw, json)
Hash identifier: w1wkb96wGy4bWKXu8PeMvn8E5tRDEb0uxlwxPpU5dCA=
Subject key identifier: BA:8F:8C:0A:3E:EC:D5:0B:26:FA:F2:0C:AF:42:76:9C:7C:E7:E6:F1
Authority key identifier: C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
Certificate issuer: /CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Certificate serial: 0197696073B5C4525C858AC8E7EAA290677D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
Manifest number: 0D7A
Signing time: Fri 13 Jun 2025 13:00:18 +0000
Manifest this update: Fri 13 Jun 2025 13:00:18 +0000
Manifest next update: Sat 14 Jun 2025 13:00:18 +0000
Files and hashes: 1: x_SYwou91eWf9XaMbTikEMqCZkA.crl (hash: gzNFhnCD60whEaOSgE2Kodw5rlFjE9UlVANK0Num9OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:73:b5:c4:52:5c:85:8a:c8:e7:ea:a2:90:67:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Validity
Not Before: Jun 13 13:00:18 2025 GMT
Not After : Jun 14 13:00:18 2025 GMT
Subject: CN=ba8f8c0a3eecd50b26faf20caf42769c7ce7e6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:df:4b:dc:22:bc:b0:a4:e2:f4:c4:9b:b0:
5d:4a:bf:84:8b:53:be:dd:53:b1:7d:6b:63:29:dd:
aa:d1:f0:c2:a2:ee:86:b4:e3:fa:40:14:ff:84:58:
7d:19:6c:0f:f6:e1:34:73:dc:ff:7e:d1:17:bc:48:
fc:e3:29:93:40:ca:07:21:b5:1a:32:c1:e9:92:58:
71:d4:16:db:2f:e6:8d:54:d0:a3:6c:e2:3e:a5:48:
b1:9e:b9:91:cb:12:17:7d:fa:7f:8d:a0:71:17:38:
95:5e:f9:bf:c2:b4:d6:a3:1a:4d:ac:f6:48:dd:ca:
ca:d3:6c:95:19:49:5b:51:4e:02:74:d2:2a:25:fa:
d7:8f:1a:fd:25:3c:a6:90:de:1d:f3:46:2e:f3:d3:
88:4a:76:88:fa:b4:11:80:0b:13:27:4b:68:6f:e2:
c8:e6:c2:af:22:b5:5c:7c:e1:08:2e:dd:df:98:d8:
60:47:72:3b:84:63:dd:f4:a9:f9:20:ae:c3:90:c4:
af:15:5d:f4:95:57:c4:46:0a:4c:01:50:1a:0e:28:
fe:d7:05:f2:4b:66:97:c9:94:33:e0:86:d9:c0:1a:
c3:c7:a1:97:36:bb:39:de:9d:a6:f3:f9:2a:e1:fd:
4f:87:77:6b:d6:99:cc:fe:3a:4e:61:37:b4:6c:28:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8F:8C:0A:3E:EC:D5:0B:26:FA:F2:0C:AF:42:76:9C:7C:E7:E6:F1
X509v3 Authority Key Identifier:
keyid:C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:19:19:19:24:7c:91:f1:37:2c:e9:52:66:b3:95:f5:c0:2e:
57:40:6c:5d:0b:49:4f:7f:d3:2d:19:4d:18:44:54:3d:b2:80:
02:43:6c:74:26:48:6b:ac:92:5f:21:23:e3:b2:1f:b4:c1:be:
12:59:95:dc:21:c4:e9:e3:a1:74:f3:08:52:aa:45:79:06:11:
4d:d8:f9:c5:97:6a:68:0c:8a:8e:91:a4:3b:34:84:be:38:e3:
00:c0:78:c2:09:0c:da:1f:b0:aa:99:2d:8f:8d:81:25:3d:14:
78:83:b3:a6:40:be:5d:25:60:12:98:60:12:0d:0b:22:c8:b8:
79:0c:3e:83:e1:d2:8d:a1:dc:71:d2:90:9c:94:f4:13:d3:06:
ee:38:6d:0e:43:fe:05:4d:49:39:e4:d3:32:78:71:84:73:b3:
11:de:7a:4a:65:ed:da:29:39:dc:41:b3:eb:bd:a4:b9:da:24:
04:67:a7:22:5b:ba:9d:8f:78:26:ec:a2:a2:a3:7d:d5:10:b0:
86:6f:0f:80:55:c6:55:b1:9f:9d:60:c8:8d:3c:34:c8:8d:26:
b7:64:97:2d:19:c2:8c:e8:e3:7c:d9:30:d0:ed:dc:8b:1d:a0:
19:c2:3e:c4:8d:a8:7a:da:69:97:9c:fa:ca:a9:05:5e:a3:d8:
e2:5a:fb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:40 2025 by rpki-client