Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: xHjktyWh+zqgN/PnLhhXS46J6e+cjCrGEsw6a//Javw=
Subject key identifier: DD:2C:CC:38:EE:84:5A:7F:CE:7E:BC:C7:FB:08:99:93:88:30:A9:B7
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 01984A78169AAD80D3BBEF99B41FC3B3CE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 06:00:40 +0000
Manifest this update: Sun 27 Jul 2025 06:00:40 +0000
Manifest next update: Mon 28 Jul 2025 06:00:40 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: VgKFGCysVmz/a9OWppnXphPPswwRiYkSwPX6T6HawB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:16:9a:ad:80:d3:bb:ef:99:b4:1f:c3:b3:ce:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Jul 27 06:00:40 2025 GMT
Not After : Jul 28 06:00:40 2025 GMT
Subject: CN=dd2ccc38ee845a7fce7ebcc7fb0899938830a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:3c:cc:dd:d4:85:a4:76:3c:9c:9a:90:61:
4b:a1:49:24:27:1c:0e:f3:21:d3:c4:38:6e:6e:9b:
18:26:b8:ea:d5:94:79:54:75:5d:3c:08:50:ec:3e:
f8:66:40:17:22:70:75:bf:d7:58:09:fc:9a:c0:41:
81:5c:58:bf:3a:86:28:a3:91:0e:4a:bd:71:68:17:
aa:82:8a:7f:cc:94:80:58:26:1f:a2:a3:ee:87:14:
89:31:82:18:91:8a:8c:ba:52:32:22:93:fe:9d:e3:
0c:ee:60:11:90:94:95:33:16:85:db:29:a4:cf:91:
bf:6d:1f:bb:9f:fd:58:ec:c0:96:19:c4:7c:58:e1:
ab:17:e1:01:21:a9:43:36:23:c0:ed:2d:bd:69:d0:
63:ae:f4:cf:d5:5b:99:c5:53:2a:a5:8e:ab:e2:0c:
ca:4e:b5:9b:5d:b4:5f:26:4f:bd:1f:7f:5f:63:31:
41:d0:e0:f6:f7:b8:99:9a:54:e0:ea:8b:82:6f:72:
ca:be:c8:4a:93:f2:04:29:88:5b:b5:9c:3e:7a:f7:
87:e3:76:d7:35:ca:b6:7c:e5:28:a7:e7:78:46:ab:
1e:61:6a:4c:63:bd:59:cc:22:a6:a9:98:f6:0a:2c:
32:5e:2b:65:58:44:a9:7c:06:20:8f:82:b2:1a:f3:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2C:CC:38:EE:84:5A:7F:CE:7E:BC:C7:FB:08:99:93:88:30:A9:B7
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4f:53:76:b0:e9:81:79:af:49:fc:d3:49:dc:cd:48:ee:27:
3a:ea:a0:1f:51:37:71:ce:6d:bf:46:ec:4f:2b:f6:ba:28:db:
f6:cc:c0:e8:69:47:19:bc:70:51:0b:62:d9:24:13:53:52:fb:
37:8d:b8:97:28:91:20:e0:ac:ad:5e:5e:a2:b2:ff:47:79:2a:
72:c8:8d:40:3b:4c:6d:4c:6f:b9:fc:3b:16:d2:db:17:5b:bb:
0d:36:29:c7:67:6a:34:47:03:f4:1e:aa:00:16:9b:ce:9b:86:
16:55:df:7c:36:45:87:1a:41:48:54:88:99:e3:0d:42:3b:ce:
f9:01:9b:a8:d1:a3:d2:93:6f:26:28:76:c7:d1:c4:00:54:0c:
be:c5:56:05:47:a6:9e:fd:5c:29:13:f7:19:e2:26:5c:74:21:
39:5d:29:c6:f9:ab:62:f7:05:5c:3e:85:6d:c9:52:e1:af:67:
f4:90:5d:de:d2:11:b8:cc:82:58:0a:a4:6f:a1:60:cd:f7:cd:
db:9f:e3:3a:d7:13:d1:cf:32:1d:a0:59:d3:d2:72:23:a3:ef:
0c:e6:03:f0:1e:08:5f:37:2c:89:8c:ba:c0:92:4f:8f:a2:c4:
86:38:ee:23:4b:28:f5:44:30:c6:cc:69:71:a5:a7:31:47:13:
19:5f:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:40:36 2025 by rpki-client