Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d60291-d840-4901-a85d-c685fa916b07/1/xndznw-VRrTwJXcsXCsXl4WSOFI.mft
File: xndznw-VRrTwJXcsXCsXl4WSOFI.mft (raw, json)
Hash identifier: bsORVBIJ5DtdCFjGj/+rvYPsBNtVadrFt9Dddh0CbDQ=
Subject key identifier: 7B:4C:65:80:08:06:08:05:A3:AB:6E:A7:67:C6:F7:20:61:52:D4:9E
Authority key identifier: C6:77:73:9F:0F:95:46:B4:F0:25:77:2C:5C:2B:17:97:85:92:38:52
Certificate issuer: /CN=c677739f0f9546b4f025772c5c2b179785923852
Certificate serial: 01976BF483E931866679B165E07166ABDBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xndznw-VRrTwJXcsXCsXl4WSOFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d60291-d840-4901-a85d-c685fa916b07/1/xndznw-VRrTwJXcsXCsXl4WSOFI.mft
Manifest number: 13A0
Signing time: Sat 14 Jun 2025 01:01:15 +0000
Manifest this update: Sat 14 Jun 2025 01:01:15 +0000
Manifest next update: Sun 15 Jun 2025 01:01:15 +0000
Files and hashes: 1: xndznw-VRrTwJXcsXCsXl4WSOFI.crl (hash: 4NIPCDYqdyfGOtdZKMxONMXRQF2cOYA/H0JHaAXCVAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d60291-d840-4901-a85d-c685fa916b07/1/xndznw-VRrTwJXcsXCsXl4WSOFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d60291-d840-4901-a85d-c685fa916b07/1/xndznw-VRrTwJXcsXCsXl4WSOFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xndznw-VRrTwJXcsXCsXl4WSOFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:83:e9:31:86:66:79:b1:65:e0:71:66:ab:db:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c677739f0f9546b4f025772c5c2b179785923852
Validity
Not Before: Jun 14 01:01:15 2025 GMT
Not After : Jun 15 01:01:15 2025 GMT
Subject: CN=7b4c658008060805a3ab6ea767c6f7206152d49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:fd:11:83:fd:72:b9:19:1d:e1:46:0c:ca:
96:23:9f:73:a2:2f:0e:81:7b:4a:fe:45:23:67:56:
5c:79:c8:dd:e0:77:88:d5:7a:01:09:ae:b7:36:8f:
1d:b7:99:e6:0c:68:a6:74:78:de:e6:ac:2e:ba:9e:
4f:b1:9a:97:53:66:77:ea:74:b0:f6:81:a6:c6:42:
93:9b:50:00:7c:ba:8f:b0:5f:15:51:5b:35:22:8e:
39:50:71:66:3b:90:db:e2:8f:d8:be:17:d7:29:21:
40:c6:99:1d:1b:e3:4d:df:00:9f:ef:19:05:29:e5:
db:bc:c9:e4:77:63:e2:00:9a:c2:47:45:ae:4a:83:
c7:9b:81:41:fb:e4:49:ba:e5:b4:f7:58:3d:84:c3:
70:9e:33:8b:4a:5f:95:a1:a8:f9:d1:a2:1c:68:cb:
67:b1:84:30:c6:e2:8a:be:7c:29:f7:11:d1:c1:75:
a2:34:e3:44:b1:80:7f:69:5f:f5:cd:4c:7f:5f:3e:
57:25:24:12:95:40:77:d0:eb:f1:6b:ae:e2:31:58:
bf:2e:0d:41:f1:7a:5c:84:85:1f:fb:48:3d:46:95:
d8:bc:cd:02:e9:f8:8b:91:9b:e6:4b:b9:c0:55:6b:
69:88:7a:36:13:49:2f:6e:81:f6:b3:64:2a:fb:b2:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:65:80:08:06:08:05:A3:AB:6E:A7:67:C6:F7:20:61:52:D4:9E
X509v3 Authority Key Identifier:
keyid:C6:77:73:9F:0F:95:46:B4:F0:25:77:2C:5C:2B:17:97:85:92:38:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xndznw-VRrTwJXcsXCsXl4WSOFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d60291-d840-4901-a85d-c685fa916b07/1/xndznw-VRrTwJXcsXCsXl4WSOFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d60291-d840-4901-a85d-c685fa916b07/1/xndznw-VRrTwJXcsXCsXl4WSOFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:28:46:23:d0:8a:fc:a9:5e:60:bd:d2:7d:91:c1:e8:91:ee:
95:e1:c9:1e:82:46:d9:3b:f2:dc:97:46:b2:66:1d:fa:d7:a7:
ee:63:45:46:24:ca:e9:e3:10:8f:df:63:59:91:e6:32:f9:4d:
8c:3a:45:c8:a6:d7:4c:b5:9b:11:3d:b0:a4:99:9d:e3:29:a8:
c0:30:c5:e1:ce:90:39:83:e1:6c:b4:1c:32:a5:d2:fb:b9:d5:
7f:c3:17:4b:ee:65:25:11:f9:e8:76:c5:4d:cc:ba:c4:2c:c8:
a7:84:68:31:d5:0d:15:04:5c:72:3a:0b:78:bb:6b:cd:57:4a:
6e:ee:ba:b8:09:76:39:c4:7c:76:a8:95:ab:9f:88:d2:2c:11:
31:d8:bf:8f:3a:c5:c3:9b:d2:4e:6f:3d:5f:f7:ba:49:70:69:
d8:4c:fe:e0:4e:ad:fa:d9:ec:a3:2f:f4:26:2a:a8:f4:66:04:
a0:f6:1e:dc:6d:bb:2d:ed:36:bd:f3:67:f9:5d:03:be:e8:c8:
bd:53:b2:8d:b7:4c:61:29:a9:65:d0:78:98:29:e5:6a:d4:bf:
7f:c6:54:91:61:16:89:78:77:5f:d5:7d:1c:64:7b:7a:ae:b4:
03:20:30:e3:b5:d5:ac:c4:5b:74:2f:8f:23:f6:2d:97:fe:b1:
77:10:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:45 2025 by rpki-client