Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: uh3WBsHjHsuuvcU/uYtfzYj1N7JfU3L+JfSOm5mRGHk=
Subject key identifier: 9E:68:DB:F0:FE:E2:D6:83:6D:DF:AB:B1:43:E7:74:C7:CD:A7:AE:5F
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 01975A5B98C41FD8AD039625AD33E616480F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 0DAF
Signing time: Tue 10 Jun 2025 15:00:41 +0000
Manifest this update: Tue 10 Jun 2025 15:00:41 +0000
Manifest next update: Wed 11 Jun 2025 15:00:41 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: Rz/C+0gF2kdeijSoFxFRLStXjMNmfQCUBpStxjee5Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5b:98:c4:1f:d8:ad:03:96:25:ad:33:e6:16:48:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: Jun 10 15:00:41 2025 GMT
Not After : Jun 11 15:00:41 2025 GMT
Subject: CN=9e68dbf0fee2d6836ddfabb143e774c7cda7ae5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:4c:02:a0:57:4b:6c:31:fa:f7:4e:81:61:
73:74:e9:3a:ff:68:41:35:b7:4a:14:04:ed:78:ba:
85:dc:6f:64:e2:69:12:ba:2e:d9:61:d5:8d:58:98:
c8:af:a0:31:a4:40:82:88:85:ba:32:79:87:b4:65:
d9:d0:4f:a3:fd:03:40:6d:88:e6:75:4f:c6:15:b9:
95:94:01:c9:4b:3a:8d:d4:53:5f:76:b5:49:f5:e8:
06:17:21:e5:d6:ee:4e:31:00:b2:1b:3a:2d:37:00:
0a:c5:45:40:76:75:57:2f:30:6e:37:d8:38:73:37:
d9:fc:90:4c:71:de:4b:63:07:d5:b2:fc:6a:ee:48:
71:cc:bc:fa:9f:35:e0:f1:27:d0:5a:46:37:a9:b8:
7f:ef:3d:9a:e7:c4:00:d6:3d:78:14:bf:a1:2b:dd:
c8:d2:18:6e:07:ca:51:3b:d4:0e:51:2f:ca:c9:ed:
2a:5c:c6:0e:d1:9f:f3:41:b9:d3:a0:85:85:68:dd:
37:94:96:f7:48:74:8d:51:b0:0c:4c:8e:a2:24:18:
3d:59:5d:00:f4:72:57:97:79:45:e0:29:d2:9d:c9:
8a:2b:07:87:38:d3:2a:a5:2e:b7:ba:0e:84:98:15:
46:55:c4:e0:26:4a:e5:b7:98:ef:60:fb:50:2e:f9:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:68:DB:F0:FE:E2:D6:83:6D:DF:AB:B1:43:E7:74:C7:CD:A7:AE:5F
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:60:7b:c9:c1:aa:e9:29:db:4d:52:87:28:dc:09:3d:e9:68:
fa:12:21:8d:e2:2f:e1:38:c1:a9:82:2f:60:99:3f:f4:8b:98:
9c:64:89:10:a5:fc:12:89:9c:0c:b2:59:c3:e1:a6:4e:b0:58:
46:23:28:0d:1f:03:37:d2:0e:82:33:cd:76:31:24:1f:1e:c0:
c9:02:b9:67:14:32:7e:ca:89:f7:37:f7:f4:8e:99:5d:5b:8f:
19:a0:51:27:a4:21:d7:2e:11:5d:fd:8a:0b:ff:94:d5:51:8b:
61:4d:eb:d2:2a:c4:ad:10:56:5f:34:be:e2:9e:ee:5f:f9:5b:
b8:81:3d:68:37:78:0f:93:32:37:a2:41:1b:47:ec:20:01:20:
72:7a:1d:0f:fc:53:76:07:a8:58:9d:58:69:60:64:e0:af:32:
22:b9:c4:6b:eb:56:cc:30:53:df:5f:91:e1:d9:7b:7c:95:d7:
bb:5e:b6:e9:75:10:29:cd:50:4b:f0:52:04:01:14:5b:3c:13:
77:ed:84:c0:8d:7f:61:31:21:dd:e4:5a:e6:7e:3e:8c:41:a6:
7b:ba:ad:5f:d6:12:f4:d7:80:83:ca:ad:cf:d7:09:27:ea:c0:
bd:7d:8a:4d:e6:30:c6:9a:ba:e8:5a:d7:da:00:e8:86:7d:31:
1d:7d:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:39:34 2025 by rpki-client