Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
File: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json)
Hash identifier: hTPus96nKEmvL6KZqmXItG08SfqyouuAE6SFSqA0ofU=
Subject key identifier: 54:70:07:8E:EA:16:C9:E3:53:97:72:09:22:56:A3:49:B7:DE:29:EA
Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
Certificate issuer: /CN=c68106f44957d194020335b0bfd6077ccbcdc878
Certificate serial: 019749D6270D0B4BB50299CC34CDE3FC4019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 10:01:00 +0000
Manifest this update: Sat 07 Jun 2025 10:01:00 +0000
Manifest next update: Sun 08 Jun 2025 10:01:00 +0000
Files and hashes: 1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: N9Yge2kX8HGOMfHBrCXLM3RhUIV6uMl3qvN423I/O0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:27:0d:0b:4b:b5:02:99:cc:34:cd:e3:fc:40:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878
Validity
Not Before: Jun 7 10:01:00 2025 GMT
Not After : Jun 8 10:01:00 2025 GMT
Subject: CN=5470078eea16c9e3539772092256a349b7de29ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:3b:08:77:d8:5f:46:eb:fd:de:fb:c1:a7:
9d:87:b1:1e:e9:01:ab:1c:b3:1b:74:54:d1:f8:ef:
4f:5c:18:cd:b1:af:8f:bc:46:79:9d:2b:b9:de:99:
08:98:22:c3:3f:d0:b9:74:b9:18:83:03:91:e5:22:
48:92:03:49:9a:6e:d4:89:5a:3f:92:41:4c:8e:a3:
25:bc:cd:29:32:37:09:cb:4e:2d:2a:e7:52:37:39:
93:c1:61:7d:c5:f4:a1:23:d7:58:dc:00:f5:85:ba:
d3:a3:63:d8:22:3a:a7:25:77:29:94:1f:3c:e1:a8:
2c:2b:60:de:96:fc:6b:f1:a7:cb:e2:46:ec:cd:63:
9c:75:ff:2c:06:7e:dc:5b:03:ce:16:67:2f:8f:b5:
50:0a:8a:d0:77:ad:d2:a4:a0:74:10:26:55:fc:db:
ef:6d:93:6f:19:85:3f:4e:1f:a6:e1:02:5e:a5:ef:
07:8d:44:e6:b5:44:48:7a:2f:0a:f6:aa:c7:d8:a9:
41:5d:03:f6:3c:89:fa:2e:fb:05:0f:a1:a5:25:03:
92:99:e0:1f:dd:2f:57:c0:b3:14:ef:2b:f6:a2:ee:
a9:da:e4:32:03:20:d5:cd:a9:1b:1c:16:bc:7b:14:
41:b0:1d:79:36:1b:33:ab:f7:dd:5b:f2:2d:ec:d9:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:07:8E:EA:16:C9:E3:53:97:72:09:22:56:A3:49:B7:DE:29:EA
X509v3 Authority Key Identifier:
keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:78:7f:95:19:0f:da:82:7e:71:b1:02:a8:71:8a:13:83:
80:9d:4f:54:b6:9f:60:26:0f:04:f1:cb:5b:d7:1b:be:75:ee:
6f:7f:5c:fa:c1:34:3c:99:7b:2e:24:d2:cb:22:22:fc:ec:c2:
55:38:18:30:e7:ff:54:c0:1f:6b:fd:c9:e8:a1:7f:52:21:5c:
49:97:2d:f2:03:05:52:3f:fd:d9:c7:e6:d1:4f:ed:f7:f3:10:
d1:e9:80:4c:e4:01:fd:5b:74:4b:8c:65:07:82:5f:64:17:cc:
ad:1e:70:f3:fd:90:37:19:07:fe:7d:9a:9e:80:77:9b:ef:cb:
9d:5d:10:5e:ce:24:33:b1:f6:af:ab:3d:fc:7e:a9:f9:41:1c:
6a:62:0c:8b:2d:38:d5:94:fa:03:31:5c:78:db:c6:01:ff:bf:
86:4a:2b:9d:99:78:78:e2:f4:12:f4:dc:12:02:86:e7:ef:db:
bf:a2:dc:48:0e:b6:b2:9a:2d:3f:78:09:3c:d2:14:74:b6:b0:
45:b1:8c:91:1c:48:79:cc:ae:c2:fb:e3:3e:74:19:65:bc:8d:
b9:07:ef:71:1b:61:6f:14:5d:6b:1b:7d:57:de:da:4e:79:b1:
35:8e:96:35:3b:16:ce:0f:40:e0:b9:08:12:7b:cb:38:c3:d8:
16:21:c2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:14:17 2025 by rpki-client