Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: aMO3xel1Bw7G/g6hoGoIIZ3+Kn1dd3+prHvsdCTqPK4=
Subject key identifier: 52:69:7C:0B:9F:D4:09:AF:E8:1A:38:6C:74:E1:7B:C7:D4:F0:3F:ED
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 019747B0CAA827812E4F22FD71992D1A2543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 00:00:57 +0000
Manifest this update: Sat 07 Jun 2025 00:00:57 +0000
Manifest next update: Sun 08 Jun 2025 00:00:57 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: WwOgcDl8OhmA+ZdxmMVvui0I68hSgrp2kzT7mQvjJbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:ca:a8:27:81:2e:4f:22:fd:71:99:2d:1a:25:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Jun 7 00:00:57 2025 GMT
Not After : Jun 8 00:00:57 2025 GMT
Subject: CN=52697c0b9fd409afe81a386c74e17bc7d4f03fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:be:41:00:ce:d7:e2:00:e6:e7:4a:d4:a7:
05:51:0e:5a:13:17:e2:60:c3:e7:c8:fc:2b:c1:c2:
36:11:f4:1d:3e:cb:c2:30:7d:ab:0f:5e:67:95:0f:
24:68:e9:0b:70:4e:55:8e:71:6b:24:f6:af:0d:f2:
f8:21:c4:45:46:b7:b3:19:c8:8a:45:c8:04:af:e9:
cb:5b:c3:d8:e6:84:6f:48:ce:08:19:1b:79:21:83:
09:82:64:43:5d:e8:67:8f:0e:60:a7:c8:ef:09:c0:
10:30:9b:3b:34:fc:48:1e:be:51:ea:70:6c:88:ac:
3f:66:55:63:fe:d4:60:35:e1:00:f3:5d:51:33:9d:
87:35:52:fa:7c:ef:ad:15:4f:7d:41:0d:06:e9:03:
f2:58:b9:b0:e2:e5:94:90:f3:72:00:56:42:5c:ce:
aa:07:b4:e8:7b:31:df:ec:12:69:ef:06:2d:54:f3:
d6:2c:72:b0:d1:9e:31:ff:14:77:90:b0:05:94:e3:
00:8d:80:cb:91:85:a0:fa:44:73:3e:82:40:ad:2b:
f4:8a:3c:f6:9f:21:8c:3b:19:9a:d8:f0:e3:22:13:
f6:17:2b:a7:2b:1d:de:df:91:cf:a5:75:80:3d:9d:
b7:64:55:a6:0d:5d:35:ce:2b:06:bf:d2:2e:bb:d3:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:69:7C:0B:9F:D4:09:AF:E8:1A:38:6C:74:E1:7B:C7:D4:F0:3F:ED
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:35:9d:51:01:e4:64:5d:ce:97:06:9c:39:d2:2b:12:4e:20:
a2:67:61:46:b1:a6:74:87:09:99:6a:15:b8:ea:2f:e5:c0:5b:
c3:1e:3e:84:e0:56:29:44:55:17:3b:2e:46:06:ef:d9:ab:3e:
3b:ab:0d:48:cf:b9:74:43:7a:7d:30:d6:a3:26:73:2f:5b:d6:
b2:cb:3e:b9:b6:45:d6:a6:ec:10:46:5c:5c:af:e7:bd:86:fa:
a6:38:49:ab:81:37:8f:98:ae:c9:0a:ef:a7:65:b9:8a:7a:5a:
7d:f1:8a:42:a5:a0:3a:24:20:66:2a:69:a0:86:c0:b1:64:f9:
9d:4a:0f:45:07:9a:5f:92:50:b7:89:79:f2:5a:49:42:5e:42:
4e:4b:f7:94:f0:eb:da:21:f5:92:90:75:65:4f:07:fd:0d:26:
6a:d6:71:88:3b:d2:25:0c:82:b6:3d:e9:ac:b0:0a:61:89:3b:
c6:16:c1:ab:8d:06:61:9d:89:4d:77:0e:c2:ba:8e:43:08:5a:
75:9f:fa:16:1a:d6:5c:4e:45:e0:63:8d:66:d7:b9:6a:3c:64:
03:46:e7:31:45:3c:42:93:bc:59:fa:b5:e0:91:c2:1e:90:9d:
5d:c9:d1:b4:00:06:32:b8:1c:bc:64:60:3f:5c:6e:8c:53:71:
60:a4:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:13:01 2025 by rpki-client