Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: 8Re8uV789oc596ccuu4DCcYklT8xHb+dLDQpKg9yewI=
Subject key identifier: 33:14:8C:30:B8:1E:90:FA:10:52:7E:F1:8E:94:08:3F:7F:E4:CE:E2
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 01974AE8E407F8BC912FCCC28D65010B0AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 1042
Signing time: Sat 07 Jun 2025 15:01:05 +0000
Manifest this update: Sat 07 Jun 2025 15:01:05 +0000
Manifest next update: Sun 08 Jun 2025 15:01:05 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: KXxijQ0Zv8Z3koddGYUkN/J3NT2NAmx9EAqsXy1wKgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:e4:07:f8:bc:91:2f:cc:c2:8d:65:01:0b:0a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Jun 7 15:01:05 2025 GMT
Not After : Jun 8 15:01:05 2025 GMT
Subject: CN=33148c30b81e90fa10527ef18e94083f7fe4cee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:21:94:87:c9:9a:3d:1e:35:6f:e7:fa:98:
36:1c:54:3b:86:4e:c4:98:f3:e7:cd:ba:a5:03:cd:
4a:94:53:63:54:65:95:ed:c7:8a:90:2f:08:de:85:
72:fc:4c:ff:a5:1f:e3:d4:cf:e3:c6:2e:eb:6b:3a:
cb:1e:a3:b6:93:e2:5d:9a:af:70:fb:34:8e:07:31:
6d:ee:f3:38:cf:1b:d8:e3:72:3d:45:73:f7:20:6e:
86:b4:5f:e0:35:6a:e7:89:f9:d3:6f:b8:80:eb:05:
96:32:ea:a9:1b:f4:8e:7b:e7:95:a6:cf:67:b8:7e:
56:e6:f2:b3:3a:72:e2:13:58:6a:10:39:62:d0:4f:
13:7b:2c:04:46:e0:66:44:af:09:46:3f:cc:31:b1:
15:ac:e3:f5:77:3b:bf:a8:3a:85:4b:01:d9:c7:10:
98:95:8a:78:87:a1:b8:63:cd:6f:d4:d7:5d:6f:be:
93:b6:c4:b8:74:55:be:00:3c:d8:94:cf:98:f0:54:
5b:5f:64:26:da:d5:6b:77:87:fc:5b:b2:11:a5:5c:
17:61:6e:d4:ef:59:3a:f0:7a:2c:a8:94:53:7a:a3:
a4:0a:dc:4e:f0:e3:cc:14:06:69:6c:81:8d:3c:62:
90:17:2c:87:bd:8a:4f:35:08:8d:6d:4b:bc:f4:c6:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:14:8C:30:B8:1E:90:FA:10:52:7E:F1:8E:94:08:3F:7F:E4:CE:E2
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a7:dd:5d:94:49:81:77:96:ea:b0:05:6c:b1:c0:73:db:ef:
4a:0b:83:c2:63:5b:92:5c:e5:37:20:79:21:bf:61:9d:23:d4:
e0:ec:29:f7:9b:62:63:ea:8f:92:65:35:ca:35:aa:8f:c1:76:
4f:9a:b2:05:8b:b6:ac:7d:0d:78:9f:70:f1:d0:bb:10:a3:3c:
63:4d:64:19:43:4f:02:e3:8e:2f:2b:1a:fc:5b:09:7d:b9:92:
dc:cf:51:68:de:fb:da:48:60:44:42:c4:fa:2d:94:e2:52:4d:
45:7f:83:14:af:f2:93:a6:74:0c:a5:6a:85:4a:42:ab:e1:51:
38:b9:25:19:92:b0:99:78:78:4a:7a:8a:02:0b:b8:3f:33:e2:
d6:09:ac:96:33:d7:76:97:cf:4a:b9:98:a4:8c:ad:8d:dd:88:
08:93:60:23:37:32:54:56:c9:fb:e4:d5:95:55:f6:3e:a3:ef:
b9:08:d4:ab:58:d3:e1:24:07:d6:3c:da:7d:a7:b2:2f:cb:e4:
60:a6:a1:64:42:63:4b:7f:4f:27:3a:dd:36:e0:f3:88:c1:59:
93:6f:d2:23:de:0d:ab:4e:5d:40:c9:1a:5c:4e:0a:50:08:db:
d2:fa:1a:56:19:52:f9:46:ff:d7:63:ab:eb:3a:a2:c1:15:1e:
e4:f8:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:25:19 2025 by rpki-client