Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: kek8328Qont6Lk97QatG+odGg50rk/RY7BIn9dQ5Odc=
Subject key identifier: 94:4E:45:DF:8A:C1:EB:3D:0E:3A:24:B7:96:D2:F1:E0:2F:79:D4:6D
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 01976BBCD12A18197D17FF4D7066DEDB407B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 0F5C
Signing time: Sat 14 Jun 2025 00:00:25 +0000
Manifest this update: Sat 14 Jun 2025 00:00:25 +0000
Manifest next update: Sun 15 Jun 2025 00:00:25 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: 0yixer6zYolYSV7vHfaXydOFJI0iNNXnP0mXhJTThIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:d1:2a:18:19:7d:17:ff:4d:70:66:de:db:40:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Jun 14 00:00:25 2025 GMT
Not After : Jun 15 00:00:25 2025 GMT
Subject: CN=944e45df8ac1eb3d0e3a24b796d2f1e02f79d46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:f9:6e:cb:37:a9:ec:90:75:c7:67:a8:93:
3a:59:17:d5:3a:1b:7d:f4:a2:de:83:4c:7c:28:e0:
f1:82:56:3b:87:e2:66:f1:7c:05:15:0d:a3:2c:77:
41:e6:22:e2:fa:9a:4c:a1:af:6b:b1:15:0f:35:fb:
7b:48:8a:26:f5:2c:f8:9d:23:6d:b9:68:b8:f5:c8:
4d:95:a1:00:93:fc:c6:1d:90:30:b4:5e:2f:35:92:
50:cf:89:6c:0b:8a:70:ab:83:5d:eb:57:d2:4c:82:
c6:a5:ae:20:4e:25:af:8e:a6:e8:22:70:a9:ab:98:
17:61:68:f8:7f:8f:5c:df:8b:54:4a:27:79:09:a7:
5c:70:b2:1d:c1:5b:e1:37:0d:35:c8:b8:20:88:70:
90:c7:cf:e3:cb:98:d7:ac:98:26:46:c0:b4:6e:f4:
0b:f7:69:f9:67:0d:6a:e1:38:f7:f3:a0:2f:1d:67:
df:c9:0c:ef:01:1c:ef:f5:60:9d:ad:ef:10:bb:0e:
63:fb:5b:7e:a6:30:42:08:07:3c:a4:4e:26:5b:16:
b0:55:15:6d:5b:a5:d3:de:ec:c9:c6:a8:af:3f:9d:
e3:62:ff:37:52:61:e8:79:3b:7a:23:41:f9:b6:71:
66:7b:93:ac:56:0e:7b:47:56:6f:b0:43:32:07:65:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4E:45:DF:8A:C1:EB:3D:0E:3A:24:B7:96:D2:F1:E0:2F:79:D4:6D
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8a:c8:09:8e:c3:bb:0a:b9:5b:7c:b8:d2:57:4c:0b:1a:61:
0d:3b:6f:3d:26:7f:72:f6:18:a4:15:23:b6:71:3a:12:ab:b0:
6f:92:71:88:e1:a5:74:97:9b:f4:dc:32:97:61:3c:35:87:44:
c4:0b:f4:a3:69:23:42:35:f4:bc:26:6a:f1:46:33:e9:71:4c:
2e:6c:57:01:c4:8a:5e:ab:33:2b:a6:f3:ae:6d:aa:68:09:4b:
d0:db:08:b6:c6:30:86:2c:6a:df:3d:57:e7:03:fe:5e:4e:fb:
8f:0b:32:9e:f1:df:50:5d:af:d8:a0:c1:c5:ff:91:8f:f9:c5:
e2:98:fc:cc:0a:f1:43:57:1e:f5:59:8f:6b:4a:0d:c9:af:4f:
69:5b:89:b2:6a:89:6a:c7:be:fa:fe:fa:08:d7:71:6c:98:cd:
4a:cc:9c:c6:3e:10:e7:7e:f3:e5:0b:d3:a5:c9:ed:d5:8b:8b:
3e:e0:dd:0e:f8:ea:b7:c1:4c:40:87:be:01:4c:79:5c:c7:19:
5c:f5:81:fa:cc:db:19:1e:86:8b:b8:fd:33:5f:95:1f:af:68:
26:b9:7b:d7:ea:e4:e2:df:28:a9:97:bf:65:92:5f:f3:69:92:
be:2c:83:ae:37:cf:37:39:0f:76:f1:2f:5c:e5:60:ec:50:38:
ee:7a:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:03:33 2025 by rpki-client