Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: J47O7WWP4TrlhaLOt3gtrMN1Tc/RAQeyJ8kyzPsHGfk=
Subject key identifier: EC:14:53:A0:7D:61:03:2E:3D:53:1C:12:8A:48:F7:33:EC:13:AF:71
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019774F7B36D33808310D96C226D69A8152B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 0827
Signing time: Sun 15 Jun 2025 19:01:19 +0000
Manifest this update: Sun 15 Jun 2025 19:01:19 +0000
Manifest next update: Mon 16 Jun 2025 19:01:19 +0000
Files and hashes: 1: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: yKys2QvIBQKSwzuV5lLeeA5lSRQ8qTo/bN1vuI7hkzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:b3:6d:33:80:83:10:d9:6c:22:6d:69:a8:15:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Jun 15 19:01:19 2025 GMT
Not After : Jun 16 19:01:19 2025 GMT
Subject: CN=ec1453a07d61032e3d531c128a48f733ec13af71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:57:63:73:d7:54:b3:53:d7:58:c3:27:52:
da:51:24:d6:98:00:b1:34:73:73:43:e6:db:e5:5f:
7d:b0:dc:0b:b0:ae:c3:e1:d9:94:12:0f:ad:71:30:
ec:b2:d7:01:07:a9:3b:0d:d8:10:b6:02:8e:08:85:
56:4f:e6:c7:61:a7:81:dd:38:cd:fe:c8:ac:43:ca:
de:53:35:b7:4f:24:1d:c5:9c:53:a2:eb:f8:c7:2d:
d8:e8:8e:db:cd:15:07:25:bf:7c:09:1c:51:2a:59:
3e:cf:0f:c2:cf:18:c8:d5:91:45:f9:3a:3a:74:44:
9d:78:e9:20:fb:2a:28:03:df:ec:2c:e4:84:da:0b:
6b:4f:bb:8b:35:61:7e:ae:65:3e:4c:90:e8:3a:2d:
53:ec:16:2c:76:90:9e:c8:b2:b7:e6:2d:9c:e3:ad:
7f:80:5b:10:62:c4:db:d5:4f:31:13:50:52:d1:af:
ca:a6:4d:0f:3d:8b:9d:a2:ae:10:16:95:54:7b:4f:
f5:1c:e7:78:ef:02:45:7b:a2:c9:c9:55:21:ce:dd:
9d:c3:65:ad:ce:8b:d5:a6:37:75:b4:4d:fb:c7:14:
8d:e7:88:f5:2d:a5:51:70:59:99:d5:dc:54:4a:97:
d5:62:fa:b2:3d:8d:aa:55:b5:1d:95:09:2c:d1:17:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:14:53:A0:7D:61:03:2E:3D:53:1C:12:8A:48:F7:33:EC:13:AF:71
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:56:59:58:78:09:57:00:2c:68:d4:cb:99:78:4e:ae:6e:57:
a5:bb:66:f1:cb:b9:24:4e:1d:54:5a:57:7b:21:ac:cf:6b:f2:
a4:1e:e2:ab:d6:9b:70:2e:3b:aa:91:c3:b7:1f:ec:24:30:0e:
58:9f:25:7a:1f:15:71:0f:6e:41:c7:ac:5c:86:98:1e:1c:f3:
cc:e2:49:3c:4b:11:5d:56:f1:58:40:82:9c:91:79:66:4e:42:
86:5a:4b:0d:25:64:c5:1e:3d:be:09:96:6b:fd:82:9e:54:88:
76:18:7a:93:38:08:bc:5c:a5:c8:87:16:a6:20:98:05:69:07:
84:98:b0:ba:8f:11:dd:36:87:ff:d0:15:19:7c:24:2e:a8:ba:
08:8e:d6:81:03:ac:81:ea:86:cb:e3:95:8b:2f:42:89:c4:52:
a3:b5:f6:62:a5:02:41:a0:0a:09:4e:2f:2f:c3:28:8a:77:69:
b6:df:f6:38:a1:31:4b:59:03:f8:b0:7e:be:68:9b:87:07:8e:
74:77:ff:ab:3f:19:4d:fd:a7:86:64:bd:40:8e:db:91:1b:ff:
45:88:99:f7:95:8b:aa:8d:60:03:01:f7:07:a5:41:72:0b:33:
49:6a:2a:14:e7:07:25:07:3c:5e:fb:c6:ba:57:54:c2:e7:4e:
ea:51:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:39:15 2025 by rpki-client