Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: Rxq0asG8IGNJRRPBKx3+Os+BNwXLdE495chpWQaeO74=
Subject key identifier: FE:BA:F0:18:3A:7C:CD:9A:F9:76:27:61:95:10:37:79:E8:48:E4:E6
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 01974A7B61769B99680E49F03C32953EE09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 154E
Signing time: Sat 07 Jun 2025 13:01:29 +0000
Manifest this update: Sat 07 Jun 2025 13:01:29 +0000
Manifest next update: Sun 08 Jun 2025 13:01:29 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: Bkp/fAsHmutqTAI9lC+wOQFE7cvXJWi9NmNGG9OQDV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:61:76:9b:99:68:0e:49:f0:3c:32:95:3e:e0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: Jun 7 13:01:29 2025 GMT
Not After : Jun 8 13:01:29 2025 GMT
Subject: CN=febaf0183a7ccd9af976276195103779e848e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:87:f8:8c:f2:ef:e1:77:95:72:77:93:fb:64:
c0:bd:6a:c4:c0:6f:67:50:3b:e2:4a:0f:43:0a:30:
0e:c6:6e:22:84:4d:a5:ae:39:39:04:93:70:44:9f:
d0:2a:db:9f:40:fb:29:33:b5:a4:e1:b9:d2:16:0c:
7d:51:48:51:5f:2a:af:86:7e:14:82:a6:88:fe:90:
2a:6b:d1:81:e5:8a:80:b7:53:3f:b2:55:14:57:a2:
31:c1:bd:79:8d:58:7a:d9:c3:b2:9f:67:c6:2d:1e:
53:ab:26:d0:a6:ff:0a:76:ff:7e:66:8f:a8:f5:31:
92:f0:32:46:d1:bc:1a:8b:b2:2b:20:23:96:88:a2:
f2:f1:a8:f1:15:35:e6:2c:0f:30:8f:90:2b:50:b1:
e3:00:4d:2b:cf:c8:fe:a8:52:a3:88:0b:52:fb:4d:
f0:8e:bc:0e:6f:5b:96:42:23:94:29:d0:0e:4e:f4:
d3:f7:b6:78:75:d2:70:48:32:eb:9a:f0:71:b6:0b:
82:0b:24:bc:28:91:e5:b3:a9:47:b2:e2:7c:db:99:
b5:69:f0:bf:5e:71:b1:16:99:ba:cb:3b:d1:54:68:
b1:cc:16:b0:2c:78:25:62:c2:83:2c:8f:e1:ab:79:
40:9b:95:3b:d2:ed:5d:b4:15:61:5a:6b:c8:ce:8d:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BA:F0:18:3A:7C:CD:9A:F9:76:27:61:95:10:37:79:E8:48:E4:E6
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c7:96:5e:46:0f:34:ec:8f:f8:21:62:02:dc:8f:47:37:4c:
64:35:9b:28:89:d2:fa:8c:43:48:7c:6d:72:d5:97:55:25:c4:
26:6b:1a:ff:71:f2:be:6a:6d:8b:c7:5e:ee:3c:3f:ef:28:34:
56:de:0c:24:69:05:fb:33:c7:13:3a:46:10:1a:a1:52:46:13:
80:9b:1e:91:31:4b:11:8c:cd:e3:cf:a5:50:56:c1:bc:fa:be:
c5:e1:7d:e3:b9:ad:36:1c:80:a4:73:0e:27:7b:df:05:20:0d:
23:59:4c:08:02:91:76:57:9c:35:18:28:4a:35:e8:68:41:2f:
58:86:71:79:28:04:67:0c:ad:9b:16:13:e9:7c:de:2d:ac:0b:
80:58:1f:98:59:3d:91:da:a9:50:bb:53:cb:1f:de:2f:d0:23:
b4:29:75:89:2b:df:bc:e5:07:31:04:2d:ba:c1:85:53:54:52:
ea:47:5e:b9:14:3b:92:46:19:24:54:5a:85:77:61:e6:9c:be:
f3:8a:83:d0:4a:c3:25:49:b6:9f:e6:73:e6:11:69:06:cd:ef:
f7:2f:50:42:f7:08:2d:a9:42:be:c0:ff:13:73:c9:d1:72:77:
2c:04:f4:c8:61:e7:b9:d5:08:51:69:77:a4:36:75:4e:18:14:
d2:ae:c0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:34 2025 by rpki-client