Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
File: xsfkNpOlMtPW70EYbXDXpsVfut4.mft (raw, json)
Hash identifier: 0d9reXSGHGtz9zftOcy+cDcac+ztI06cp/Jr83DNiQ0=
Subject key identifier: E7:FB:C1:32:1C:31:F2:AD:36:4F:36:34:62:B5:BD:98:27:EC:22:D5
Authority key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Certificate issuer: /CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Certificate serial: 019756ECE8A2E5DAAF16F816CB8E1A6CF5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
Manifest number: 1111
Signing time: Mon 09 Jun 2025 23:00:55 +0000
Manifest this update: Mon 09 Jun 2025 23:00:55 +0000
Manifest next update: Tue 10 Jun 2025 23:00:55 +0000
Files and hashes: 1: xsfkNpOlMtPW70EYbXDXpsVfut4.crl (hash: ZPhLNezZfvIalivPln5F+G2NFa3C2gO4f6AgTjRg5Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:ec:e8:a2:e5:da:af:16:f8:16:cb:8e:1a:6c:f5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Validity
Not Before: Jun 9 23:00:55 2025 GMT
Not After : Jun 10 23:00:55 2025 GMT
Subject: CN=e7fbc1321c31f2ad364f363462b5bd9827ec22d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:3b:8e:87:26:77:56:bb:a9:60:03:9b:31:
13:f9:24:0d:39:81:9e:52:23:f7:5c:b1:9c:f1:34:
08:90:0a:17:d6:b7:03:6b:3a:ec:b8:e6:55:57:30:
c3:71:d5:7a:2a:2a:9b:57:ce:bb:10:8d:04:26:41:
4d:e1:cb:d5:76:3c:5f:4f:a9:f6:95:88:6d:a9:61:
7e:ab:f4:95:f0:37:67:e4:93:75:c7:38:4a:33:83:
89:6b:da:fe:60:93:ce:fb:62:bc:a1:85:ad:9c:4e:
f8:ac:6c:a0:df:28:d3:6c:b0:da:a3:96:ea:17:86:
3a:3e:00:2b:b8:37:49:93:68:de:ce:71:07:1d:87:
ed:9a:7a:35:cb:a9:19:b3:e5:f0:89:46:a0:63:69:
4f:5e:2e:0c:b9:3b:04:f3:b4:99:9d:3e:a9:4e:0f:
d3:cc:d3:74:54:50:10:ca:ad:ad:e8:09:6f:9d:d9:
92:f3:1c:ce:f2:cf:e8:bb:be:f6:cc:35:c8:0f:f8:
73:c8:d9:79:f8:39:a8:9e:ed:fb:4b:93:a1:96:94:
c0:d6:e2:49:69:6f:a5:9d:e9:a6:79:d2:61:58:0c:
5c:44:c8:ca:81:ef:13:42:4a:f4:76:65:84:6a:c5:
8d:f5:9c:90:94:5e:72:78:2c:d7:55:ba:88:4a:c9:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:C1:32:1C:31:F2:AD:36:4F:36:34:62:B5:BD:98:27:EC:22:D5
X509v3 Authority Key Identifier:
keyid:C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2b:12:49:07:6a:ec:f3:4c:4f:6c:e2:f1:2a:6d:87:8d:13:
bf:d4:28:c0:b6:6b:24:00:19:ab:e3:25:b4:05:f1:22:02:56:
76:f4:86:01:ae:e6:fa:25:14:81:93:5f:7a:0f:72:be:41:35:
c4:ea:ec:41:bf:88:ca:cf:41:2c:e0:80:10:fc:60:c7:7a:5b:
09:dd:34:ab:18:92:8d:ba:92:66:f3:c6:a8:e3:72:ac:03:ab:
92:5a:d8:0f:c6:fe:4a:c0:d3:10:a1:bb:de:88:ea:7e:4a:fd:
62:05:53:f1:9f:37:35:69:f6:e1:bb:76:34:2c:3b:fd:49:13:
e6:56:a5:2b:21:7f:56:9b:d0:bf:68:e3:4b:74:b7:28:1a:f0:
2f:a9:f2:50:a3:cd:51:68:54:bc:cf:55:ac:2c:81:6d:54:e3:
61:d7:fb:b1:c1:95:ee:ac:4d:a9:ba:9d:93:3c:06:90:88:33:
71:32:03:eb:87:19:a5:39:61:dc:d9:80:4c:8d:cb:3d:4e:fd:
be:f7:49:bc:2f:67:f3:ca:d7:94:72:e2:7c:bd:c5:fa:8f:c4:
1e:bb:d0:f6:6a:23:9a:fd:fa:f1:fb:bc:72:45:08:e2:37:58:
51:29:42:08:b4:76:ac:40:6d:95:00:4f:c6:8b:c0:15:9b:a9:
71:0f:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:37:27 2025 by rpki-client