Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: tSJpsUjoCRl2A3iHY12j2qbYdsm5sZFiSuFjjlrOOzM=
Subject key identifier: 97:50:72:F6:00:E9:A6:D4:4D:FF:6E:A8:94:E1:DC:C7:0F:CF:5C:25
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 01977978C88F36B5BE68577276C11718D627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 037A
Signing time: Mon 16 Jun 2025 16:00:48 +0000
Manifest this update: Mon 16 Jun 2025 16:00:48 +0000
Manifest next update: Tue 17 Jun 2025 16:00:48 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: q147fLJ/36XTjPiW2CHIo5BUP1GTUtDFc+5NA0mvOOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:c8:8f:36:b5:be:68:57:72:76:c1:17:18:d6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Jun 16 16:00:48 2025 GMT
Not After : Jun 17 16:00:48 2025 GMT
Subject: CN=975072f600e9a6d44dff6ea894e1dcc70fcf5c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:c2:4e:db:6f:40:e8:8e:d0:73:d2:2b:88:
50:a8:ec:89:b8:2b:c9:31:43:b7:99:e8:91:bc:c6:
f5:99:b8:26:27:71:4d:8a:79:15:aa:4f:8b:00:9d:
e8:9c:bf:0c:a7:5a:64:93:c6:40:1a:2e:70:c3:30:
ea:af:a3:5e:b2:aa:6c:8b:38:dd:b2:e8:92:b1:06:
03:c2:f0:b2:26:7a:38:ce:13:cd:51:f3:78:2f:a4:
68:fc:8b:72:4d:44:f6:b9:14:6b:97:45:d4:ed:72:
c3:a7:9c:a2:9c:4d:08:59:8c:58:b4:e4:fd:69:9c:
68:3a:8c:2c:29:5e:b2:76:c9:34:d4:be:c5:75:3f:
da:5e:3f:3e:b5:37:7d:ec:d7:86:e3:da:15:6c:d9:
aa:8c:a2:b5:f3:5d:b3:e1:8c:87:f3:6d:c7:79:09:
4d:15:d7:00:76:c3:df:ea:4d:67:93:ab:72:a7:dd:
af:5e:ae:4e:8c:e4:5f:48:d8:e4:01:b1:4e:0d:e3:
1d:69:7e:20:a9:6b:c2:40:75:7d:8d:26:3a:f2:64:
4c:61:34:98:1a:c7:8a:81:cb:36:c1:88:56:d2:b1:
f9:14:0d:f5:56:d5:6a:15:98:09:f2:37:db:81:bb:
9c:64:fb:f0:b4:af:7d:79:69:86:32:f2:4d:57:f5:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:50:72:F6:00:E9:A6:D4:4D:FF:6E:A8:94:E1:DC:C7:0F:CF:5C:25
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8e:29:01:9a:4c:84:e7:c9:35:f4:04:f0:04:9d:1b:32:7e:
95:3c:5e:b7:03:df:40:f1:6d:57:6c:27:b8:d8:f5:20:c9:d9:
e6:3d:8b:04:b4:f1:f5:37:ac:65:e9:21:1f:a1:09:25:72:58:
03:49:ff:35:50:be:e1:48:b0:e5:3f:76:91:78:fe:08:b8:ea:
d7:9b:82:21:72:82:fb:69:48:21:8a:04:ed:f7:62:26:45:e3:
a7:1c:98:d5:54:87:45:38:41:5c:99:ec:f2:e6:f2:78:52:ab:
3e:9b:a7:3d:95:ed:a3:52:8b:35:fc:e5:4f:7f:1b:75:a9:00:
9f:88:1e:71:1c:ce:92:c8:9b:12:b6:61:60:93:85:97:a8:22:
58:c8:a6:df:c2:43:02:f2:95:e1:15:2f:de:58:6f:98:54:94:
92:33:86:60:26:86:0a:e2:0e:5c:81:cf:55:6b:16:fc:67:6c:
83:dc:a9:78:03:3c:e9:2b:a9:d4:b3:cb:9f:59:56:8f:48:d8:
44:51:8b:2e:ac:e0:07:a7:87:0e:0a:51:ab:51:a1:eb:0e:12:
12:0c:2f:7e:e8:bb:27:bd:56:76:32:9e:9b:64:c5:99:a8:9e:
76:d9:ca:26:6b:c2:d9:40:3f:76:29:9b:ca:51:7b:0c:ae:e9:
e0:a0:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:21:50 2025 by rpki-client