Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier: 1VGlteHqNpLW2d3IJvuydcNfOfw2axGda6TPNLk/b1g=
Subject key identifier: E8:79:85:AD:51:39:A0:CC:13:41:60:56:CF:AD:E4:C8:97:63:8C:21
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 0197794267FC16AB283C8CAE83352396C89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number: 0566
Signing time: Mon 16 Jun 2025 15:01:24 +0000
Manifest this update: Mon 16 Jun 2025 15:01:24 +0000
Manifest next update: Tue 17 Jun 2025 15:01:24 +0000
Files and hashes: 1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: v958M0ugGnK1UFq9OMcCpQ3AxL8uSjZMCYc3jLqMp7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:67:fc:16:ab:28:3c:8c:ae:83:35:23:96:c8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Jun 16 15:01:24 2025 GMT
Not After : Jun 17 15:01:24 2025 GMT
Subject: CN=e87985ad5139a0cc13416056cfade4c897638c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:1e:1a:85:1d:1e:cc:24:aa:14:f3:b1:14:
0e:27:f5:e4:8b:33:57:ce:c2:67:a4:dd:4b:2a:d7:
02:6a:08:3a:10:42:44:cf:58:37:ab:93:9b:f0:fd:
e1:58:89:c5:a0:f0:c9:08:77:ed:27:b5:ed:42:96:
10:16:f5:55:25:1b:62:ce:2f:14:e7:9f:74:fd:67:
7b:ca:0d:16:a5:40:3a:b1:9a:ae:fd:bd:6a:87:4e:
e1:4e:02:9f:4f:69:77:60:9a:9b:90:7a:7a:ea:e2:
c4:55:4a:ad:23:4a:8e:4b:d4:93:3c:15:56:14:0a:
e8:23:e7:9f:a9:e4:2f:05:99:2a:9d:94:e9:09:8a:
8e:ae:8a:d9:04:22:14:8a:f2:1a:83:b8:ed:d2:df:
d6:b4:89:2b:d1:5b:3c:73:6b:2f:94:5e:93:81:8b:
5b:ab:f2:03:7f:ff:14:2a:79:46:f3:46:7f:67:6b:
46:99:09:25:3e:5f:15:d8:c1:81:fd:7c:31:84:a0:
b2:91:42:fd:7f:2a:8c:45:03:45:08:e4:2a:34:dc:
65:72:36:34:b4:64:a3:d8:03:9d:03:67:83:b8:3c:
84:b0:61:7b:fd:3e:90:91:ae:fa:f8:c2:bd:9c:09:
36:e8:75:2e:85:37:ec:ac:78:3b:a4:50:2c:3c:66:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:85:AD:51:39:A0:CC:13:41:60:56:CF:AD:E4:C8:97:63:8C:21
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c0:82:d5:6a:f2:a9:88:cc:29:ca:0f:58:b7:e8:e2:bc:ee:
cc:1c:92:c5:eb:9c:9f:73:ea:a6:fc:f2:f9:69:7d:2d:d9:de:
0d:e1:fb:83:04:82:bf:08:d9:34:5d:8b:38:c0:5e:52:3b:07:
c9:fc:d2:d7:ea:5e:86:73:49:b4:dd:d7:66:b3:aa:24:42:fa:
97:f3:5d:ca:ab:de:86:62:9b:6b:d3:c4:b9:fc:b2:9b:84:71:
fd:4a:4d:7f:3d:fd:0e:0c:ab:f7:b4:0e:6a:79:53:75:2a:1a:
42:bd:8e:d4:17:52:94:44:8c:cd:b2:b9:2f:61:c9:63:9d:63:
d9:6d:91:41:4e:64:ee:6c:05:6f:39:cc:d3:00:ae:4a:68:8a:
b7:be:7f:d6:53:97:89:19:ea:ee:40:28:89:8b:d2:84:9e:15:
cd:48:38:b1:7b:6a:d9:c4:d7:48:af:30:4a:8b:de:b8:8c:09:
42:4a:f4:be:87:78:2d:f2:64:14:6b:38:60:90:b6:92:b9:58:
99:bf:9c:4b:74:62:d4:c7:ef:6a:23:b2:b6:19:88:66:7f:b4:
b3:65:f9:9e:c8:74:6d:9e:b1:d6:4e:e3:f2:e1:c7:d2:4d:9e:
01:51:6a:f8:b6:20:7d:20:95:69:c2:8d:c5:5e:e3:ed:6c:a6:
98:51:d8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:42:05 2025 by rpki-client