
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: rsfT5DyiEKo56bHP1BSvKW2/UJgMnTXa6jtcEUjVasM=
Subject key identifier: 76:18:6D:16:F6:1A:D4:19:28:E9:62:24:99:5B:07:98:E1:E0:4A:EA
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 01974D4514AA88F45725D0543B0D6AFEE095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 0478
Signing time: Sun 08 Jun 2025 02:01:02 +0000
Manifest this update: Sun 08 Jun 2025 02:01:02 +0000
Manifest next update: Mon 09 Jun 2025 02:01:02 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: 99e2rUJNP62RPaMYfeVo0zGQ5Uau9Ykr4LhuTeHTY/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:14:aa:88:f4:57:25:d0:54:3b:0d:6a:fe:e0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: Jun 8 02:01:02 2025 GMT
Not After : Jun 9 02:01:02 2025 GMT
Subject: CN=76186d16f61ad41928e96224995b0798e1e04aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:83:79:58:9c:e3:c2:73:e6:85:d3:01:bf:0b:
1d:0a:72:f8:be:ae:ce:fc:1f:65:55:1c:31:8e:d1:
ac:40:ca:0e:50:df:ef:e6:f0:c8:1a:3d:f2:bc:8c:
be:fd:34:5e:81:d0:fc:02:af:d8:89:eb:6f:e1:ad:
da:6e:31:8e:68:63:6c:c1:13:15:f4:fd:ec:73:d9:
b8:12:36:ef:17:66:89:40:fe:96:d2:26:c3:b7:6f:
5c:33:8c:8c:27:c8:af:92:5b:84:b4:3f:ac:df:23:
af:84:c5:94:64:1a:4b:d1:b6:2c:5e:e6:74:39:80:
f2:bc:4f:cb:97:45:c9:46:64:61:35:c7:70:81:f0:
11:4a:06:c1:4b:56:65:37:24:15:49:3b:b6:01:f5:
3e:74:4c:ed:0a:ca:8c:e8:18:51:07:11:12:62:a3:
32:19:79:cb:90:fb:78:0d:ac:92:cc:8b:39:89:6a:
b3:53:cd:e6:38:94:bb:7c:73:90:e3:2b:4c:7d:2a:
c3:d5:49:ca:3b:82:ac:4c:5a:3e:16:e1:fb:cd:4b:
a7:5e:22:81:fb:00:d1:c7:be:86:08:90:72:c9:65:
28:29:bc:2b:9b:e1:10:b3:9e:20:3c:be:12:43:b7:
db:ee:14:94:9d:16:21:de:26:7a:40:f9:a0:17:4d:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:6D:16:F6:1A:D4:19:28:E9:62:24:99:5B:07:98:E1:E0:4A:EA
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fc:18:e0:32:2c:76:79:57:ad:cb:55:60:ba:52:7c:7d:7a:
9c:76:05:87:71:86:f4:17:08:11:3e:87:07:4e:51:3c:36:33:
1e:8c:b7:b1:34:7f:da:fd:cc:73:4d:30:df:fe:9a:2d:9d:ae:
75:d4:90:9b:73:b2:1c:6a:00:de:3b:58:8c:39:a3:e9:18:e0:
ab:0e:b4:84:4f:74:70:55:93:f6:5d:57:64:38:14:ba:28:b6:
d7:63:fc:4a:12:e9:da:24:43:4d:d3:1a:08:c3:b9:ed:a8:4a:
d5:2f:f0:16:ee:a8:b9:8a:76:0e:f3:66:34:78:19:18:69:ab:
7f:0d:b3:17:b6:40:1c:fc:bf:37:01:05:8b:da:7c:ba:d4:56:
8b:47:f7:49:40:71:b5:2d:21:ad:ff:e7:e3:7d:94:f2:34:a7:
d1:50:eb:8d:99:e7:c4:fc:c3:31:30:38:69:cd:c2:70:6c:8d:
3b:e5:a4:0b:7e:97:7a:57:ee:21:ad:67:a9:0f:3b:83:cf:9c:
58:7b:d4:49:4b:33:19:fa:66:73:40:cc:fa:b8:8b:f2:16:1f:
73:ca:97:ed:94:a8:65:3d:11:b4:a7:e4:de:ee:17:e9:ec:5a:
ae:b6:b7:b1:9d:3d:f0:5c:2b:c5:6e:8f:1f:2f:93:a8:d0:c4:
6c:4c:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:41:32 2025 by rpki-client