
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
File: xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json)
Hash identifier: fnLVxRI3UQAzW8pdyFJs50MURXrLR8iZwsIg5BD9dpc=
Subject key identifier: 76:45:A6:0A:D2:55:CF:09:C5:95:9B:A5:46:AF:71:05:0A:14:74:75
Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
Certificate issuer: /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Certificate serial: 01974F3351FF50D8BB9BBED6CF27590BCC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
Manifest number: 037C
Signing time: Sun 08 Jun 2025 11:00:52 +0000
Manifest this update: Sun 08 Jun 2025 11:00:52 +0000
Manifest next update: Mon 09 Jun 2025 11:00:52 +0000
Files and hashes: 1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: 1oWpJURrBmsfFppZC4eBUTTJ5UlG1ViQB20p9pXAX4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:51:ff:50:d8:bb:9b:be:d6:cf:27:59:0b:cc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Validity
Not Before: Jun 8 11:00:52 2025 GMT
Not After : Jun 9 11:00:52 2025 GMT
Subject: CN=7645a60ad255cf09c5959ba546af71050a147475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:52:1d:a2:ce:37:fb:1f:d3:8b:e7:b4:c0:
23:a8:da:55:82:7d:ec:98:a5:5d:65:da:dc:55:82:
8f:33:ee:47:d7:5f:51:6e:ee:04:c6:15:77:29:ea:
bd:0b:71:a4:b0:61:3b:a6:1c:a6:66:46:3d:fc:e6:
8e:1f:52:df:2b:91:45:dd:14:16:78:e9:5f:d1:8d:
93:d4:af:c6:61:71:e4:1a:2a:81:a1:25:35:ff:04:
67:af:7e:c9:33:27:0e:30:d5:2b:c2:88:48:5f:f5:
fe:13:58:24:3a:7e:ed:c5:b1:97:66:68:89:1e:5a:
4f:1b:dd:8e:ad:4d:96:58:2d:3b:ed:77:36:b1:9b:
df:fb:9e:ac:58:63:97:aa:62:38:09:0c:39:92:0c:
dc:44:e3:6b:56:46:e7:b1:a7:80:f5:94:3b:00:43:
db:2e:dc:c4:da:45:08:20:db:5d:6c:e1:2c:fd:92:
6a:36:79:7d:4e:01:07:c9:7f:71:09:1c:f5:92:bf:
54:fe:d2:92:64:d8:22:70:27:d2:b1:a7:5b:81:e3:
58:5f:f9:71:48:75:b4:d2:65:24:f0:2a:28:c2:b9:
d3:04:5b:26:aa:70:e9:88:2e:1a:6b:07:5d:d5:63:
58:83:e3:51:19:68:1b:ce:d0:75:84:30:37:7d:d8:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:45:A6:0A:D2:55:CF:09:C5:95:9B:A5:46:AF:71:05:0A:14:74:75
X509v3 Authority Key Identifier:
keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:02:6c:a5:be:0f:1a:b5:30:e4:fa:5f:9f:21:e5:3b:1b:6e:
72:89:3c:16:b4:44:6e:87:9c:db:d6:b7:9c:59:ae:2c:60:6b:
0b:30:f8:11:c2:09:c9:da:89:0c:21:0c:f4:76:39:ec:b9:72:
96:7b:dc:d3:71:61:96:ee:74:d5:90:08:f9:c8:87:59:fd:f7:
9e:cb:92:2c:3e:1a:83:3b:65:10:c6:aa:6e:d8:34:db:7f:83:
47:9b:ba:7d:c2:07:c7:78:24:fe:5b:96:9c:73:e6:5f:fc:79:
05:4c:3c:1d:09:0a:c7:c5:ce:88:9a:d2:29:16:c9:6f:d0:dd:
76:b5:90:90:5f:52:9a:7e:7d:51:5b:52:51:0c:b0:b7:f7:88:
59:25:10:3c:d9:f3:32:50:38:7d:2b:89:3c:b8:b5:7c:56:d8:
d3:3f:fa:74:ea:3e:90:7e:ff:10:8f:2b:d7:6e:1f:6c:e9:45:
45:06:d6:62:40:23:4f:58:60:3d:72:27:b2:d6:34:52:4c:31:
8c:33:d9:4f:00:3a:cd:77:45:4f:cd:ab:dc:a1:6c:18:d4:b8:
f6:6b:fe:42:88:81:6b:85:b0:c9:48:82:18:38:a2:bf:69:ff:
f1:18:47:39:ea:c5:00:9d:07:ce:f4:e6:56:c1:c0:d2:ab:91:
72:51:3e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:39:45 2025 by rpki-client