Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
File: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft (raw, json)
Hash identifier: TT+5rWvknExXaaWpbWgghPgpFWDwC8jmQgagcA4XbaY=
Subject key identifier: 37:E8:D0:EF:AD:40:3A:67:E7:64:5F:70:5C:C0:20:65:C5:AA:FC:2D
Authority key identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
Certificate issuer: /CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Certificate serial: 01974EC5F50195893A89B6C46200E91B774C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
Manifest number: 05CB
Signing time: Sun 08 Jun 2025 09:01:25 +0000
Manifest this update: Sun 08 Jun 2025 09:01:25 +0000
Manifest next update: Mon 09 Jun 2025 09:01:25 +0000
Files and hashes: 1: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl (hash: nmVYvmrjAuZt3i9fViiZbsL6Q4a8Y4nbWfEu3AKG5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:f5:01:95:89:3a:89:b6:c4:62:00:e9:1b:77:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Validity
Not Before: Jun 8 09:01:25 2025 GMT
Not After : Jun 9 09:01:25 2025 GMT
Subject: CN=37e8d0efad403a67e7645f705cc02065c5aafc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:c7:ba:dc:44:6c:44:f6:b5:71:e0:17:0a:
72:70:c2:bf:72:48:35:3e:ff:2a:67:be:a1:5b:81:
21:40:aa:b8:31:3a:cf:5a:d7:fc:4e:cc:c9:b8:0e:
1a:82:6a:7a:43:24:4d:a7:07:5a:75:4c:03:4f:36:
e2:60:bd:e4:82:cb:f5:8e:d3:f5:06:8a:35:45:ad:
ab:72:97:72:d6:c4:f8:8e:00:ab:49:6e:8d:7e:e7:
62:3a:d4:53:9c:42:20:63:a9:5a:cf:1b:9d:e4:24:
62:bd:0d:9d:73:1e:80:58:51:5f:6a:2c:4f:88:33:
58:0c:98:2d:c2:ea:87:e3:00:e5:4f:23:3b:55:1e:
8a:7e:7c:5b:1e:9d:e8:07:99:05:69:7e:14:b6:8d:
ee:5c:7c:63:cb:cc:57:cf:be:a2:08:f4:5c:4a:3f:
2a:15:e5:56:d6:ca:c8:0d:5c:86:18:5e:ba:9a:fa:
42:1d:65:b2:5a:4a:6c:34:58:2b:9e:c0:66:5a:9b:
79:41:4b:a3:e7:57:26:09:63:7d:92:44:5b:e5:59:
f2:bc:b4:32:27:3e:1d:7a:9d:34:e6:7b:59:03:1c:
cd:a5:ec:b4:8e:c4:6b:f9:47:6d:fc:a9:7b:3c:03:
1e:95:f5:5e:ee:52:4f:17:c3:4e:32:2d:78:22:1a:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E8:D0:EF:AD:40:3A:67:E7:64:5F:70:5C:C0:20:65:C5:AA:FC:2D
X509v3 Authority Key Identifier:
keyid:5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6f:f5:a4:a4:dc:ba:67:31:0f:be:bc:86:31:bf:e3:4e:c4:
1c:5a:e5:c3:42:b8:2d:62:09:72:44:ca:fb:52:f7:09:d3:2d:
90:c8:60:6b:86:00:51:c1:44:38:99:93:12:f6:e7:08:ae:ad:
19:d9:62:2f:fa:63:6b:09:f5:14:62:fc:d1:d8:1e:16:64:b0:
b9:23:e7:d9:03:1e:54:12:5b:57:7c:f0:2c:68:cc:f2:00:30:
2e:31:fe:53:5c:33:b2:da:a3:66:b5:98:d2:54:07:42:df:3a:
3a:f0:89:f6:ed:b7:1a:7c:68:b7:4b:d8:36:51:75:eb:e6:bd:
48:3f:f2:12:b2:f0:9a:8b:51:9b:91:98:33:e0:4b:38:aa:61:
17:0c:8e:c7:6c:38:21:1b:05:24:67:0a:d2:2a:73:79:1e:f5:
9b:29:38:7b:88:60:20:f2:37:cc:df:ad:2a:f9:76:22:a4:3f:
81:a3:f4:7a:e6:8d:74:a2:4e:3d:d4:d6:a3:b7:41:77:37:62:
1a:f0:22:7b:f5:92:df:03:75:32:09:87:ad:53:c9:86:7b:bb:
32:6b:0e:e6:b1:03:79:fe:54:37:4d:59:a9:86:58:66:d5:a1:
14:99:6e:e4:0e:b6:d2:70:92:24:83:e4:86:4c:b9:a9:de:e1:
de:2d:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:40 2025 by rpki-client