Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: y6EueyT+q/ImiU5ty41hua4yiM8v8N/eSZOyxcLGN8w=
Subject key identifier: 13:CF:3A:47:57:BD:69:A3:AB:FA:51:A9:83:32:18:DB:F6:9F:7B:C5
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 01977451FA7F98C1919DAA889D34284B8D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 1482
Signing time: Sun 15 Jun 2025 16:00:18 +0000
Manifest this update: Sun 15 Jun 2025 16:00:18 +0000
Manifest next update: Mon 16 Jun 2025 16:00:18 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: U3RXmvfrG/Z6JCzUcBmZTbPC9wGc5mT3Qb6WMrD5Dtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:51:fa:7f:98:c1:91:9d:aa:88:9d:34:28:4b:8d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Jun 15 16:00:18 2025 GMT
Not After : Jun 16 16:00:18 2025 GMT
Subject: CN=13cf3a4757bd69a3abfa51a9833218dbf69f7bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:18:55:ca:a0:c1:38:e8:89:4d:a3:e6:3e:
34:9d:66:c6:27:50:9f:5d:de:1f:1c:66:c1:37:68:
b4:c1:4d:45:3b:e7:11:f1:97:87:f1:11:be:7c:92:
f3:d7:1c:c0:25:61:d1:d6:6b:2a:3d:d6:07:4e:47:
b7:ec:8b:08:d2:02:ac:4f:6c:66:31:6a:4e:43:94:
89:e0:00:2c:69:eb:47:c6:e9:1e:3c:0c:e3:71:55:
2d:d4:0b:be:5f:e3:31:7d:00:07:2a:64:aa:b0:24:
b9:49:8a:85:88:61:63:2e:1b:b5:fb:52:3b:8f:35:
3b:66:2b:5f:1c:2b:4e:e2:7d:3e:20:03:bf:56:87:
f3:c8:7b:c4:5e:5a:7b:fa:7c:bd:46:3f:e9:7b:3e:
de:10:22:b1:1f:57:86:e5:02:08:a5:6c:f3:f0:d8:
bc:70:1d:be:15:44:6a:d2:06:64:6a:57:3a:45:4c:
ef:fd:ad:30:5d:cf:d5:5a:b4:79:2f:9f:44:af:cf:
f9:7e:1b:d6:69:bb:09:63:f5:40:a9:6a:3e:5a:85:
88:e2:30:a1:88:c7:eb:e5:0a:2b:90:a0:ef:8b:a2:
0e:16:e4:ac:a4:4e:5e:2f:f4:03:8f:fa:67:d5:1c:
f1:f1:73:86:b0:62:29:19:a0:45:e3:6d:da:5e:9b:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:3A:47:57:BD:69:A3:AB:FA:51:A9:83:32:18:DB:F6:9F:7B:C5
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:57:8f:fc:e4:a6:3f:bf:cd:7a:9d:7a:e9:49:87:31:e3:
1f:6f:82:c3:d8:a2:50:ce:b1:06:39:2a:e6:d7:90:63:43:ac:
cb:71:ce:7a:0e:c3:d6:7a:de:49:bc:88:2e:23:53:69:ee:5a:
b2:41:ab:9a:7e:b4:11:c8:12:a6:3d:58:19:6f:db:9f:3c:5c:
6f:a0:e4:d1:a2:28:0e:08:e2:47:ea:e8:72:b0:9f:d8:b4:b7:
75:96:c6:d7:1c:a2:00:cd:38:75:5e:29:37:70:9e:d9:68:4b:
d6:e3:f4:52:b0:47:e2:72:b6:dd:fb:d6:f2:f5:d1:31:01:30:
2a:d3:86:9a:57:84:82:35:02:08:df:1e:ca:0f:39:e7:38:39:
cc:4a:d4:9c:eb:27:4d:23:3b:00:f6:44:eb:0a:aa:e1:af:4b:
be:42:ec:ae:e8:2a:6f:2b:d1:25:72:96:e3:fc:b9:ff:d6:70:
20:0f:52:80:42:48:13:18:09:f2:13:d3:da:10:1a:d2:b3:bd:
09:e2:76:ac:7d:2c:3e:9d:06:33:5a:2b:89:7d:ea:57:ef:82:
30:19:22:42:59:9b:6a:5d:a7:f0:7a:20:3f:e2:06:ac:c1:27:
bb:e9:79:9a:bb:56:08:eb:3f:18:d0:79:4f:66:71:a6:b6:8c:
91:8e:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:44:34 2025 by rpki-client