Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
File: X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft (raw, json)
Hash identifier: t4fz3OAdYi4QoieRaQoDlwjbMQkRaPfpq7J8GtPhmPI=
Subject key identifier: 9E:51:0E:DB:BA:C6:F9:56:B7:06:0C:17:4E:E6:0D:2F:05:0D:0C:47
Authority key identifier: 5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
Certificate issuer: /CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Certificate serial: 01974A7A8F5ADD83DF07E10A29C30B05082A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 13:00:35 +0000
Manifest this update: Sat 07 Jun 2025 13:00:35 +0000
Manifest next update: Sun 08 Jun 2025 13:00:35 +0000
Files and hashes: 1: X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl (hash: A9hmbcKR15RREmVBdfSIN2f0qqWG4EB0O15SAARQukE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:8f:5a:dd:83:df:07:e1:0a:29:c3:0b:05:08:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Validity
Not Before: Jun 7 13:00:35 2025 GMT
Not After : Jun 8 13:00:35 2025 GMT
Subject: CN=9e510edbbac6f956b7060c174ee60d2f050d0c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:48:cb:a7:5c:85:e5:72:34:eb:63:ec:a9:
bc:f7:a7:80:55:ea:47:73:20:e1:59:df:ed:01:83:
64:94:89:b8:c6:22:f2:12:f1:14:d1:b9:b9:71:93:
c0:d5:54:28:cf:4e:30:99:f2:ff:2d:c0:56:f6:66:
2f:be:33:dc:cd:b4:70:82:6c:6e:5f:00:f4:3e:e6:
d7:5d:5f:4e:f0:3d:df:31:66:ac:ee:cf:18:d3:ba:
cf:5b:21:ee:7a:42:ed:86:f6:ca:eb:e5:d8:a0:20:
ac:17:68:60:70:4a:82:1d:de:2f:45:bc:8c:d8:bb:
58:86:27:ce:d8:98:8e:40:a3:70:89:6c:a6:2e:d4:
05:9a:88:cc:41:6b:88:67:50:26:a3:5d:ab:60:95:
14:5f:52:c8:8c:61:d3:b7:a3:c2:b7:05:f2:ce:f5:
4d:28:a2:ee:50:c3:a2:6e:33:9f:cf:4c:b6:ac:f3:
92:b0:62:32:96:6a:07:d5:33:a5:fa:ca:fd:63:ea:
67:eb:36:2f:d2:e5:5d:d2:ad:d0:0a:17:e1:30:de:
54:03:c1:a4:a5:87:78:46:e8:13:95:4a:e7:40:13:
a5:a9:46:30:3e:11:65:69:09:23:f6:b3:36:65:b5:
5a:7b:67:63:a9:2d:dd:48:15:12:f2:bc:b2:b4:5d:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:51:0E:DB:BA:C6:F9:56:B7:06:0C:17:4E:E6:0D:2F:05:0D:0C:47
X509v3 Authority Key Identifier:
keyid:5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6d:72:bf:8a:0b:ab:d7:01:28:82:25:38:ec:96:53:fa:28:
00:d6:5c:2f:b0:55:24:36:c0:ef:81:aa:49:60:ea:2f:0f:fa:
df:e4:3f:86:d7:71:5e:c0:3f:e0:cd:24:92:e9:8f:a6:8e:e2:
31:1e:86:e2:b9:21:50:cb:20:96:16:ca:f9:4c:a1:fc:86:54:
ec:d1:ac:ba:f0:11:ec:67:8e:c4:0c:ac:8b:2a:39:45:78:c3:
26:10:2f:99:0d:8b:12:f7:ef:6d:54:61:fb:a9:86:76:db:ba:
23:27:20:b5:ad:24:50:8c:84:2b:c7:ef:6d:d3:43:d7:61:f0:
78:10:bb:3d:6e:08:2e:28:cf:f9:5f:3a:c4:cc:c9:29:80:ca:
60:bd:2b:95:a5:06:05:b8:a4:25:43:61:ce:fd:e2:60:cd:e2:
ad:04:5a:d6:8d:3f:f6:49:5c:4d:b4:d3:ad:1b:35:2c:99:39:
87:e2:e8:4b:77:25:46:b9:05:ec:dd:38:a9:57:a6:f2:16:7d:
29:44:b1:98:35:ba:20:85:44:3e:01:7f:06:44:3c:d3:f3:ad:
21:32:90:25:72:e1:13:b5:1c:78:58:d2:b5:e5:81:7c:fb:cd:
bd:bf:73:63:8d:40:4b:2d:d8:94:eb:fd:f6:40:e8:c5:33:a1:
c8:c3:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:46 2025 by rpki-client