Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: I0mpD2Ojtog+83Qq7299Lh4h3cdqTjjb4KS42layoA4=
Subject key identifier: 09:66:67:EE:91:56:6F:A9:C6:4B:10:1C:79:27:F9:15:8F:A2:ED:10
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 0197711A3984C3CCA2458BE01D6770C1AFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 01:00:33 +0000
Manifest this update: Sun 15 Jun 2025 01:00:33 +0000
Manifest next update: Mon 16 Jun 2025 01:00:33 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: sv5B3vQh1wAIYk+ArM65zq2RIKXkaRdea9h4ZkILXms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:39:84:c3:cc:a2:45:8b:e0:1d:67:70:c1:af:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Jun 15 01:00:33 2025 GMT
Not After : Jun 16 01:00:33 2025 GMT
Subject: CN=096667ee91566fa9c64b101c7927f9158fa2ed10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:fb:84:28:a5:3a:02:17:29:15:7d:59:fe:
21:4f:5a:85:f1:ce:7c:e9:d1:73:b0:e3:34:68:e8:
f7:41:e4:2e:54:de:d4:10:b6:88:99:50:af:46:f3:
6c:8f:7e:90:eb:d7:b6:c3:ee:c0:ef:94:90:d0:15:
91:df:7d:13:e8:d3:68:76:cf:c6:be:ee:84:69:99:
55:54:ee:c5:0d:d6:d6:da:55:6b:36:53:49:12:8d:
8f:dc:48:43:19:e6:b1:0f:d4:8d:3b:7d:e0:f1:64:
ad:63:97:0c:db:7c:5b:16:20:f8:50:2d:36:2a:22:
9d:5a:f1:b8:53:df:5b:fb:68:a7:20:9b:6f:64:75:
1e:68:84:65:30:a2:be:33:16:03:dc:1a:8a:a9:e3:
ab:65:44:19:c6:ee:28:cb:97:d2:c9:a8:84:1f:38:
bd:e5:78:c2:a1:7e:b5:bf:de:85:74:98:4d:5e:6a:
33:60:b5:e3:ab:7f:fc:5f:d5:3e:27:1c:88:80:bb:
a1:ba:d5:14:a0:2c:3b:57:0a:10:fb:27:9b:cb:69:
5b:21:8e:92:00:02:8c:36:9e:bb:22:47:e4:33:62:
a1:85:e3:74:8c:98:cb:2f:2f:88:0a:2d:74:d7:ba:
3d:19:a5:87:2d:b8:8e:76:1f:2f:df:ab:d7:c3:91:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:67:EE:91:56:6F:A9:C6:4B:10:1C:79:27:F9:15:8F:A2:ED:10
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3e:75:1f:8a:c1:ac:78:52:26:65:c5:95:e4:0f:ec:7c:23:
5a:19:23:56:c0:71:5f:ad:36:9b:86:10:c5:a4:93:f9:ee:7e:
c1:ba:5c:bf:57:06:70:1e:c6:c2:f1:45:52:53:03:c2:bb:d4:
c2:17:4f:96:31:d9:e1:97:5b:6a:45:23:c8:86:fd:93:c4:1a:
04:8a:ef:21:f7:9c:c0:d0:32:64:01:83:17:d6:fe:0e:2e:a0:
7b:32:fd:09:31:47:8b:0f:37:ab:3e:b5:a5:cc:dc:41:3c:16:
ea:b4:2e:f0:9a:c5:6a:74:cb:db:2d:58:49:d6:9e:97:1f:65:
32:ab:29:21:27:21:dd:4f:1e:d3:28:75:9b:79:68:70:20:20:
5f:94:28:16:be:5f:4d:f8:11:7b:0d:db:6f:fb:15:99:cb:64:
19:42:72:03:ab:12:33:59:a9:1f:f1:b0:c4:47:08:c6:08:1d:
2c:5e:34:80:23:ed:5d:c7:a4:db:fd:fc:72:bf:f7:ae:13:04:
fe:7c:cd:85:be:5b:36:ee:52:c7:72:c4:30:47:b5:f7:20:ea:
2b:0e:10:46:a5:d5:3e:91:09:87:24:0d:ee:9e:5f:57:85:50:
89:af:de:99:c7:25:b6:40:1b:1b:a9:c2:a5:db:31:89:8e:05:
46:6c:f0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:21 2025 by rpki-client