Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: ts9RtzRR+18sjkxFXEaZv/iRvz1Mi9SWap3eJ52s3wo=
Subject key identifier: DC:88:99:FD:EA:2F:C3:21:52:24:41:AF:E9:00:88:D0:4A:AE:63:C6
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 01977B2FEB5051DA940DC3116176FC8937E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 0D46
Signing time: Tue 17 Jun 2025 00:00:27 +0000
Manifest this update: Tue 17 Jun 2025 00:00:27 +0000
Manifest next update: Wed 18 Jun 2025 00:00:27 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: bTRXvSDiEZswsprKv/lNba+DjeAWtaaQsFLFPwcYRsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:2f:eb:50:51:da:94:0d:c3:11:61:76:fc:89:37:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Jun 17 00:00:27 2025 GMT
Not After : Jun 18 00:00:27 2025 GMT
Subject: CN=dc8899fdea2fc321522441afe90088d04aae63c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:a5:52:34:6e:11:85:1d:a3:51:6f:79:6d:
c6:d6:25:65:e0:a1:5b:14:4b:84:65:ab:9e:ea:4d:
51:87:ff:cb:d9:ab:90:3e:17:64:eb:fe:7b:12:de:
9c:88:11:b9:84:6f:cc:1c:89:68:29:c3:83:e1:01:
2d:fb:c9:98:21:6f:4f:28:58:27:e0:f4:68:93:10:
73:e4:81:cc:f4:fd:09:94:69:b6:11:eb:ee:ea:f4:
ad:dd:45:d4:7c:09:fd:ed:61:3e:9f:31:23:fb:03:
a2:68:3f:1c:3d:05:d6:af:89:6c:13:ce:26:1d:30:
34:c5:35:c7:92:bd:fd:b9:c2:46:f6:55:bb:d3:e9:
cc:1f:81:2e:aa:41:1a:31:1d:af:09:98:69:91:84:
18:13:75:6f:42:6f:97:df:0a:8c:01:e6:e4:04:09:
d4:6b:5f:21:47:8c:cd:b0:9c:28:14:f8:c5:cc:84:
b3:7c:43:f5:11:01:3b:16:b8:be:48:8a:77:c4:af:
95:08:73:24:11:40:21:13:1a:55:20:f2:68:36:50:
42:c4:76:a2:6e:12:35:a5:33:8f:e9:d3:5f:57:c7:
5f:3c:10:ac:02:4b:b1:ac:a6:19:e6:29:3a:8c:52:
14:8a:30:56:4e:7d:d5:a5:85:63:98:b4:16:93:56:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:99:FD:EA:2F:C3:21:52:24:41:AF:E9:00:88:D0:4A:AE:63:C6
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:03:94:5b:38:80:37:ec:d9:85:60:8a:65:b8:f7:e7:68:66:
76:35:b5:0f:94:f3:cc:bb:ec:3f:e2:58:6b:04:c2:0f:dc:d3:
5c:87:c2:2f:b0:77:a8:bf:2c:82:d4:a4:b8:e8:54:aa:a1:d5:
71:dc:72:b6:11:b8:8b:34:9a:2c:d6:f9:51:4e:f5:3a:c4:a0:
3e:c9:5e:c8:1d:76:bc:c9:43:21:22:98:f4:db:c4:3f:02:aa:
01:57:c4:d5:70:8e:16:75:9d:51:a9:3a:2e:7b:48:62:e0:96:
62:50:49:a0:cf:bb:1c:30:f4:da:4b:42:3d:37:5b:4a:41:0c:
f4:8f:fe:5f:05:bf:59:90:26:63:e6:43:4a:73:fa:88:55:db:
84:0e:46:06:f3:ef:b5:70:ac:83:e2:ec:1f:79:6b:42:28:03:
8a:3d:4a:08:ee:f8:c9:ea:9f:9d:0a:94:e5:0a:f4:b1:1e:eb:
64:5e:a2:e2:73:4e:35:21:b5:73:46:70:3a:36:98:24:e3:58:
fa:3a:8b:b0:34:6f:99:ba:b2:3f:97:0a:31:21:b9:9d:45:c3:
ba:82:e1:24:60:8f:17:50:e5:b7:c3:b5:5f:6e:48:b8:02:d3:
65:10:e3:65:0c:2b:4a:71:c1:bd:f2:2a:3c:55:17:7c:5d:77:
64:b6:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:29:48 2025 by rpki-client