Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: 9H36RNlCqEkQQxxb7kLGo1ROpoklB1C8A7uRL/MzyaE=
Subject key identifier: 0B:69:BE:DA:5D:3F:EB:E0:CD:71:7A:A3:1A:9C:1A:9F:1B:9A:4B:9A
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 0197CA9571A8F3C31383168B4C974C6B3213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 09D1
Signing time: Wed 02 Jul 2025 10:01:20 +0000
Manifest this update: Wed 02 Jul 2025 10:01:20 +0000
Manifest next update: Thu 03 Jul 2025 10:01:20 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: wko9EW0qYueo4/DoMI9m4eNoeRLbGdMTYNHS4PdJ4zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:71:a8:f3:c3:13:83:16:8b:4c:97:4c:6b:32:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Jul 2 10:01:20 2025 GMT
Not After : Jul 3 10:01:20 2025 GMT
Subject: CN=0b69beda5d3febe0cd717aa31a9c1a9f1b9a4b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:b2:c6:fd:f0:23:22:9b:0a:df:a8:7f:35:
96:2d:81:ee:4b:9f:1a:7c:4c:db:7a:c6:ee:6b:c4:
fd:55:c7:a6:87:bb:a1:ed:90:39:87:a0:da:04:93:
f0:c1:68:9c:37:82:b5:5a:c3:44:50:9e:ed:98:ad:
d2:ad:0c:d0:c0:4d:76:51:bf:43:d9:8f:c7:00:2e:
5a:80:e7:35:a5:af:ec:77:b1:cb:ce:75:bb:bb:13:
6a:32:e2:5a:19:2f:46:3b:1f:a2:09:63:27:ba:42:
1e:c2:7f:99:e6:03:c8:01:70:0d:cd:ea:74:ee:22:
74:a4:ea:94:52:ea:39:97:d7:17:d5:12:33:6b:5c:
d3:a8:43:8f:df:63:0d:a5:7c:fc:1a:c9:40:5a:15:
56:94:8a:00:52:cc:e9:fd:42:ed:ba:45:22:c9:d0:
73:6c:bd:2e:01:d4:47:53:ca:5c:5c:81:b2:b8:a6:
ab:d9:d4:4c:17:51:7c:9b:29:c4:c2:eb:6a:dd:12:
fd:e2:4b:82:4c:91:ea:00:a7:e2:21:4c:41:aa:f8:
70:2a:0d:7f:f7:c6:1c:dd:e4:cd:39:b3:41:9f:a4:
4a:4d:b2:ec:a4:ae:76:0d:15:80:5b:f0:61:69:37:
c5:7a:df:fc:5c:eb:4c:e7:9d:f1:b3:83:de:07:d0:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:69:BE:DA:5D:3F:EB:E0:CD:71:7A:A3:1A:9C:1A:9F:1B:9A:4B:9A
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d9:5b:66:10:15:a9:80:79:fb:6f:2f:85:ab:dd:66:dc:f9:
4b:72:cc:71:e6:c5:e1:91:43:ca:03:a0:35:46:12:b7:3f:9d:
8d:6c:be:31:d7:9e:6e:22:8f:a6:cb:ab:36:a3:da:d8:d7:79:
df:76:e3:50:9b:02:37:ea:59:91:68:b5:f6:1b:d1:05:a6:75:
aa:37:cc:ed:1d:12:c1:a6:22:6e:9c:85:a6:cd:e6:ff:9a:60:
f5:26:01:d0:75:71:80:8d:56:d7:05:aa:71:16:78:45:44:fa:
8c:e8:d1:5c:40:e0:23:57:b0:42:13:df:a4:67:06:aa:6a:dc:
b5:95:39:e1:13:6d:96:9a:32:b2:11:b3:33:d3:da:68:ec:41:
40:04:56:b0:1f:4c:67:df:77:d7:09:72:21:6c:36:d6:24:05:
2f:2b:5c:a8:1e:b2:c1:45:d1:34:61:c5:57:03:92:74:b8:d5:
6e:8d:b2:ef:4b:3f:49:38:ca:2b:50:c6:aa:29:4e:e1:59:9c:
85:ae:ca:58:5f:57:0b:5a:f0:ab:22:2e:c8:6f:89:33:83:bf:
dc:c5:6f:7b:52:be:8e:e0:99:76:b6:ad:c4:1a:f1:25:a2:63:
13:bc:03:39:a7:b4:04:68:f2:01:e1:a2:1b:3b:a5:75:1e:ae:
0c:0d:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:07:50 2025 by rpki-client