Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier: SPe7Nn+KgNXokYdSlTyP19U2AyW+INEbqyofylN0G3Y=
Subject key identifier: 99:F9:3C:AE:39:6F:A0:71:F2:5C:20:E9:56:34:9E:53:C7:1E:99:7A
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial: 01974E5829132904647C020D0D6191E2251C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number: 080D
Signing time: Sun 08 Jun 2025 07:01:29 +0000
Manifest this update: Sun 08 Jun 2025 07:01:29 +0000
Manifest next update: Mon 09 Jun 2025 07:01:29 +0000
Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: d8VGmsj4w7TmhT5+xgr3vuOz6mUaXHAPXLLQCNR2erE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:29:13:29:04:64:7c:02:0d:0d:61:91:e2:25:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Validity
Not Before: Jun 8 07:01:29 2025 GMT
Not After : Jun 9 07:01:29 2025 GMT
Subject: CN=99f93cae396fa071f25c20e956349e53c71e997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:bf:a4:ce:b0:a6:b0:a2:d6:37:9a:b0:79:
0b:31:66:1d:64:d2:13:33:06:f8:cb:fb:51:7a:db:
7f:48:75:96:d1:66:53:59:7d:8a:29:dd:28:82:72:
41:aa:e0:77:c6:5a:97:37:52:02:64:45:91:29:e7:
b6:35:ff:63:9f:97:e3:58:7d:71:ef:b8:3c:ec:f4:
46:e6:2c:55:5c:37:95:0f:f0:02:12:4e:21:9b:29:
f2:df:e5:08:8e:37:89:ce:dd:9e:12:0f:73:d9:b3:
2b:1e:8a:28:85:28:da:b7:0a:4c:b3:72:8e:3a:5e:
28:fb:4f:ac:ae:06:0a:2d:67:84:27:9b:ea:aa:cb:
f3:6c:1f:db:f1:46:46:95:fd:20:fd:27:06:43:03:
0f:6d:4e:51:85:73:b1:d8:1e:11:20:06:17:35:b5:
23:18:e3:07:14:32:bd:30:9c:65:3e:c1:27:aa:72:
68:8f:39:97:9c:82:76:cd:18:79:75:be:fe:3e:8d:
eb:ca:35:f9:66:3e:18:85:6a:e7:a9:cb:83:f0:53:
0d:92:03:80:51:75:0a:2b:16:22:b9:52:8f:62:d6:
6e:30:ca:a0:5f:eb:ac:9f:86:d3:8b:95:27:ef:ac:
02:e5:91:43:e2:e7:6b:fb:f7:83:45:6c:22:eb:7f:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:3C:AE:39:6F:A0:71:F2:5C:20:E9:56:34:9E:53:C7:1E:99:7A
X509v3 Authority Key Identifier:
keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c7:09:78:08:86:b6:85:a0:75:2e:72:8d:05:fa:15:19:83:
08:f2:0f:d4:4d:5e:c2:17:cc:31:12:0d:60:77:d6:fe:90:0e:
ef:86:f0:bd:a8:43:04:8e:cf:87:7a:33:85:8b:dc:11:f5:63:
6f:4f:5d:03:fc:81:33:60:aa:ef:16:64:83:e7:64:c6:22:f8:
c3:cc:23:2e:29:1e:08:8f:52:05:70:98:da:80:d7:a6:ec:3c:
cf:9e:a6:34:2a:06:05:5f:6e:a6:49:2b:a0:f9:bb:00:b4:91:
16:da:a4:5b:66:eb:97:76:20:4b:a0:c1:a6:87:2c:32:09:29:
82:67:2a:c5:73:bd:b6:03:b7:4f:32:36:d5:ad:2c:1c:99:9d:
9c:8e:ae:9a:ce:e2:27:46:a1:6a:41:a0:40:1b:b3:56:73:d4:
10:6f:20:9f:87:28:a1:ed:63:29:25:c4:12:58:08:b4:d0:90:
0e:5f:77:02:97:ba:75:f9:64:af:23:ee:fe:5d:2c:f2:ec:69:
c3:8a:ee:66:b8:ea:82:37:75:58:55:60:c8:1c:30:79:70:35:
e7:dd:a6:b9:ba:4d:0b:98:c3:96:f5:f1:57:3e:7d:c2:55:d9:
71:e2:ce:f6:01:1c:d2:19:e8:db:46:70:f4:36:f7:7e:0c:a4:
37:6f:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:45:44 2025 by rpki-client