Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: 4SW1ESE4vmVzUuqUjIL4WHblOZ6fiBzo+Z/821MUr9w=
Subject key identifier: 4F:D4:1F:B3:E1:23:FD:27:DE:BC:6E:55:39:FB:D7:4F:C6:E5:C5:A8
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 019767DFF854F6F13C1E4B9DBB0A1318D9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 0DB6
Signing time: Fri 13 Jun 2025 06:00:20 +0000
Manifest this update: Fri 13 Jun 2025 06:00:20 +0000
Manifest next update: Sat 14 Jun 2025 06:00:20 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: L2McJ+POFn5joNqdtr3wp0uznKbVpv1p+l9ow3bpzhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:df:f8:54:f6:f1:3c:1e:4b:9d:bb:0a:13:18:d9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: Jun 13 06:00:20 2025 GMT
Not After : Jun 14 06:00:20 2025 GMT
Subject: CN=4fd41fb3e123fd27debc6e5539fbd74fc6e5c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:be:05:2b:39:36:05:75:1a:04:cc:06:96:
7b:f1:ee:e6:23:f7:b4:5c:2b:2f:73:c5:ba:d7:25:
30:87:29:0f:59:6e:27:e2:da:d4:77:3d:25:61:3f:
2c:f1:a8:b0:14:14:66:01:99:71:6d:7c:55:a8:61:
4c:6c:87:f4:ea:7f:0a:7d:24:81:b6:5f:b1:88:9e:
08:48:a9:3c:2b:99:03:bc:cb:27:5c:19:05:1f:2f:
f6:8e:df:e9:ec:62:6c:b5:fb:17:d5:ea:e6:e3:db:
65:de:1a:be:6d:e2:e4:de:cd:b3:7c:28:ff:df:bb:
03:8a:a0:95:f9:27:8a:bb:0d:fe:13:7f:2b:42:34:
ac:7d:60:c0:b3:8b:28:fe:42:bc:f5:6b:be:aa:72:
17:00:49:ba:48:38:81:57:b2:d5:12:04:45:5c:54:
03:6b:7c:22:eb:7a:da:18:7f:51:39:9c:0d:70:cc:
98:24:ff:c7:63:58:af:a4:96:4c:b0:72:24:54:b7:
29:fa:90:e6:df:5f:b3:27:0c:f4:5c:49:c9:75:3f:
46:31:0a:b3:e3:1b:82:d4:81:31:9b:b3:c7:62:24:
d9:bb:e1:27:82:bb:2b:ef:98:c4:dd:52:a6:ca:31:
e8:6f:13:0d:6c:97:38:53:13:55:34:3a:b6:08:7c:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D4:1F:B3:E1:23:FD:27:DE:BC:6E:55:39:FB:D7:4F:C6:E5:C5:A8
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:01:2a:55:55:e3:7b:cb:75:15:ee:12:77:9b:49:a4:16:7e:
46:ee:45:d5:5a:e7:e7:e9:cd:9b:c4:85:64:b7:0b:25:16:72:
92:6b:10:16:f2:d7:7d:30:57:b0:31:3c:f3:4a:be:22:93:ca:
be:24:d6:9e:a6:e3:1d:a4:5f:f3:75:d1:2d:45:77:11:3c:1c:
89:e6:4b:d9:ca:55:7d:6a:e1:92:a8:45:4a:c4:88:ce:ff:49:
50:44:2d:b6:0a:94:2e:10:19:63:6b:5d:c1:5b:a0:5b:59:71:
d0:a8:2c:3a:0a:86:9d:b7:03:87:08:23:c5:f7:cd:49:6f:b4:
8d:c0:6c:f9:f0:60:1a:3f:2b:38:76:67:34:8e:64:19:b8:e8:
4d:6b:99:dd:d8:92:1c:1d:00:5f:5a:50:6e:98:f3:32:18:a3:
40:06:3d:22:9a:12:d0:f1:3d:1d:b1:b4:c7:a5:1a:20:43:40:
22:51:4c:a6:12:1c:82:b7:be:9a:b1:66:f0:25:84:7a:c7:c0:
6e:dd:62:e4:c7:dd:8e:5d:78:ec:4a:8c:53:c3:2f:33:d5:a6:
4c:f1:8b:02:e7:be:7c:70:ca:fd:32:95:69:98:4b:0d:b9:ce:
b5:36:9a:35:53:5a:ae:ea:af:bf:c4:a5:f7:06:5d:ed:39:83:
bf:f6:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:51:31 2025 by rpki-client