Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: VyPnN4bioe/2UL8R8XLdpcnXvi98cMeKXrloJ/TDioA=
Subject key identifier: 16:D6:67:C6:E1:63:09:AC:F7:C9:A6:C4:E4:8F:8C:79:34:E0:DC:0E
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 019747799C425A65900F7ACC8101975C5EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 07E2
Signing time: Fri 06 Jun 2025 23:00:41 +0000
Manifest this update: Fri 06 Jun 2025 23:00:41 +0000
Manifest next update: Sat 07 Jun 2025 23:00:41 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: yBG+I2lg0OG08I0J80PL9X/SBwfT+Y2KAnflkyOWt/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:9c:42:5a:65:90:0f:7a:cc:81:01:97:5c:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Jun 6 23:00:41 2025 GMT
Not After : Jun 7 23:00:41 2025 GMT
Subject: CN=16d667c6e16309acf7c9a6c4e48f8c7934e0dc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:1e:6e:12:3e:a3:87:91:ed:dd:1e:a0:17:
c7:73:17:62:3f:d0:d7:70:84:95:a0:4a:4c:c9:28:
ef:ce:f4:03:e7:4e:34:04:bc:c3:b3:69:25:44:1b:
1e:5e:a2:74:c2:74:2f:3d:d4:39:2f:ef:8f:49:e0:
28:34:39:e8:b2:74:37:d2:39:3d:d9:90:aa:6d:43:
40:5c:d9:eb:a8:84:75:fc:4e:fa:7f:92:bc:30:07:
7c:be:1f:55:90:c4:af:bb:cd:64:2d:54:0e:8d:f6:
50:2e:77:b0:06:da:5c:6d:08:3f:b8:8c:7b:0c:04:
92:1f:29:67:95:e6:32:ef:5e:8f:1f:4f:81:da:37:
39:e2:87:f3:d3:73:e5:3c:cb:38:b5:5f:07:47:97:
65:29:eb:b1:ae:40:e7:ac:84:61:db:e1:5e:73:12:
c8:08:06:8a:ad:e3:a0:24:bf:47:b0:f1:94:ab:8f:
9b:b3:6f:c2:3e:15:78:b1:44:bb:26:bc:8d:ce:77:
65:59:1d:7f:95:6e:57:a6:e0:a9:b5:09:02:bf:66:
83:0c:f5:1f:9f:ba:38:e9:2a:ed:96:15:1f:93:6c:
67:56:1f:b9:02:7d:49:01:db:aa:1f:2a:3c:06:4c:
5d:a8:f5:27:ae:c3:5b:45:96:03:61:4c:00:51:a3:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D6:67:C6:E1:63:09:AC:F7:C9:A6:C4:E4:8F:8C:79:34:E0:DC:0E
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e3:bf:f5:ed:0e:b6:42:f2:b7:ac:3f:bd:01:6e:11:9c:c5:
76:f2:aa:96:21:ab:cf:c7:ef:8d:01:75:09:1e:83:27:93:4e:
a2:5a:c6:ed:ee:34:02:ec:7a:df:f3:4c:72:17:f2:b8:e7:2c:
90:93:01:0b:13:37:b8:10:4b:b4:ea:01:57:50:3c:b6:28:a3:
fb:ea:84:93:76:f4:3e:b5:36:7f:4d:64:94:15:f0:cd:92:66:
38:ee:e3:0a:3c:29:68:b8:62:b0:ff:22:60:82:d7:a6:3e:e3:
01:14:70:36:64:a7:a7:e4:8b:aa:a9:46:f5:98:e0:6d:a1:d1:
ad:c3:f2:f1:4f:8b:b3:f2:96:76:a7:56:43:62:93:c3:f2:4b:
db:26:86:58:f2:e6:d8:2a:0d:a5:c6:74:47:b5:c7:b4:41:06:
18:5c:5d:12:3a:da:e3:58:0e:62:57:65:40:bb:f4:34:09:f7:
7c:53:db:27:9b:8b:e5:33:37:61:eb:c8:61:0d:6f:4a:73:6e:
90:bd:f5:2c:45:c5:dd:cb:cc:3c:fb:2d:a0:3d:27:37:7e:75:
c2:03:91:bc:fc:ff:d8:ec:60:80:cd:4a:cf:ca:bc:90:2f:8b:
a0:b7:2f:f8:f9:95:ea:a0:c0:3b:47:b6:33:7d:12:47:7b:47:
e2:fc:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:49 2025 by rpki-client