Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: LShqFtJZAQozGgw5ajwEc9iz4lf+lQhovBvxNN98Vbc=
Subject key identifier: C5:95:90:88:D8:58:C8:D1:E7:2B:17:41:53:9D:E1:C1:1F:D4:25:55
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 01976960ECBDE897A252293DFC7E4C5A7D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 0949
Signing time: Fri 13 Jun 2025 13:00:49 +0000
Manifest this update: Fri 13 Jun 2025 13:00:49 +0000
Manifest next update: Sat 14 Jun 2025 13:00:49 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: rrrEzryVH2FxktZMlUpZ14AHjiqKp5qpMHfRP5lU/5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:ec:bd:e8:97:a2:52:29:3d:fc:7e:4c:5a:7d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Jun 13 13:00:49 2025 GMT
Not After : Jun 14 13:00:49 2025 GMT
Subject: CN=c5959088d858c8d1e72b1741539de1c11fd42555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:4e:0c:18:7b:a2:f7:8f:98:f0:8c:dd:9f:
75:b7:30:26:63:17:17:a6:e2:bf:10:59:a9:12:e0:
2e:51:f4:55:d4:84:06:6d:e1:21:13:2c:b5:d5:0c:
46:ba:34:98:45:ea:44:29:37:87:09:32:28:c3:10:
c3:2c:ae:22:f4:8a:db:d2:d4:b6:1c:01:75:59:34:
aa:1e:5c:4d:5a:62:56:ac:fa:b4:c1:e8:2b:2a:ab:
1b:9d:fb:78:1a:9e:5e:92:f6:4a:4d:a4:19:a2:1d:
e9:63:7a:33:a0:1b:da:15:4c:b7:ef:7c:61:ba:ff:
8f:77:2a:24:51:bd:76:11:15:b7:6b:ad:3e:62:02:
e5:6a:c8:c6:75:06:67:a5:e0:ab:37:9e:66:19:c8:
da:cc:aa:11:f6:9b:e0:0a:e6:99:4c:1a:1a:f1:be:
06:b4:72:9d:cf:c3:a9:19:21:4d:75:63:a5:64:19:
3a:63:41:2c:c8:c8:c2:14:87:30:e8:23:3e:79:3e:
27:49:24:93:3e:c3:c4:6f:16:30:20:2d:36:1f:98:
b2:bf:f7:42:0b:90:e9:81:fb:cf:ef:3f:15:f9:2a:
53:e2:f6:1a:69:00:bd:09:24:6b:9d:b3:2a:31:b5:
39:90:83:e0:c1:a7:bd:e3:df:10:49:9a:5b:f7:f6:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:95:90:88:D8:58:C8:D1:E7:2B:17:41:53:9D:E1:C1:1F:D4:25:55
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:74:08:1e:2d:1c:c4:48:b9:7e:31:11:5f:66:f7:30:57:81:
6f:d3:46:11:be:62:7f:84:eb:f0:9d:b3:91:ac:4e:4d:69:70:
25:05:9a:e5:ed:e3:5a:87:48:f4:d4:81:18:3f:d2:b3:40:c4:
1d:78:a5:5d:d8:90:7c:a2:6e:b1:80:df:0e:ec:cd:93:61:73:
ec:e4:64:89:27:8d:8e:dd:58:a7:7d:5f:89:a8:6a:7d:f7:ff:
e2:df:22:ab:2f:cb:ba:96:ad:57:42:ab:fc:8a:50:69:d6:03:
92:04:d4:60:5c:d5:25:ce:51:5e:8c:02:9f:ec:6c:e6:57:5d:
b5:c3:e9:30:61:2d:da:53:df:5e:19:9b:88:68:5a:75:3d:1e:
7b:f8:1f:52:21:d1:75:f4:b7:65:d8:ef:c1:20:61:96:4d:91:
fc:96:c2:e3:d7:07:9d:ef:4f:17:91:08:53:55:b0:6d:49:eb:
f0:ab:b0:97:92:0d:58:eb:4b:12:51:97:75:03:31:f2:9a:67:
92:f2:54:22:ec:8e:14:9c:36:61:a3:74:74:dd:f7:66:32:10:
05:9c:6c:c9:11:4a:70:56:00:67:97:f5:80:56:5b:62:d9:8c:
9f:51:c4:0f:37:03:f6:56:ee:a8:91:71:13:42:8e:c5:0b:5d:
c3:13:0f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:53 2025 by rpki-client