Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier: POI6rrTgXsYvth64cg/iS+J/WndABrZ+FGYbiIufa6s=
Subject key identifier: D4:22:46:08:75:F7:A0:DB:49:8C:74:98:68:E7:E8:73:22:26:87:92
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial: 0197D662AF11D295ADC311F6ED05AEB5A91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number: 10C6
Signing time: Fri 04 Jul 2025 17:01:20 +0000
Manifest this update: Fri 04 Jul 2025 17:01:20 +0000
Manifest next update: Sat 05 Jul 2025 17:01:20 +0000
Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: a8M53T7b31V1lEcoCKgR9zipP0nhUBEkT3ZoCua6khs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:62:af:11:d2:95:ad:c3:11:f6:ed:05:ae:b5:a9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Validity
Not Before: Jul 4 17:01:20 2025 GMT
Not After : Jul 5 17:01:20 2025 GMT
Subject: CN=d422460875f7a0db498c749868e7e87322268792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:24:95:7c:df:39:c5:7c:e7:6c:e2:0d:e5:
92:9a:e4:63:42:56:c2:3e:5c:7c:28:f9:be:2a:dd:
ba:f6:f4:b3:cc:bc:3a:67:6d:63:a0:1c:f7:91:42:
fa:a6:7d:54:3a:45:07:a3:b0:82:6c:79:4d:41:87:
24:da:d2:d5:cd:1a:7e:9d:d1:b4:a9:d5:ae:40:25:
f5:67:47:c2:e1:15:60:05:66:28:b8:f6:f8:e6:6b:
93:a3:23:b2:4f:5e:ed:ea:f6:5c:94:c7:31:54:ef:
e9:5c:cd:4b:75:47:f2:1f:b6:7a:41:fa:1f:3a:68:
90:7f:68:d7:e3:5a:ae:52:3f:19:9d:3c:b5:ec:ab:
3d:f7:e2:48:1a:ad:cf:d5:89:2b:3b:b8:d8:f3:ba:
0e:2f:64:d0:81:f4:de:0d:27:07:40:03:2a:eb:3d:
aa:32:28:52:13:d8:ee:e3:11:df:83:39:20:b3:45:
bd:b1:f4:90:c1:05:55:37:a5:a9:bb:d6:b1:61:82:
6f:a2:44:d8:cc:49:6e:ca:a1:ab:65:dd:d0:f1:00:
3c:c1:ee:d3:f0:35:9b:dc:40:0d:b8:82:2b:d4:cb:
82:84:34:d3:db:ad:1f:cc:a7:ac:73:67:11:c3:59:
ce:88:17:ab:cd:d1:6c:2b:98:21:ab:93:9b:f6:18:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:46:08:75:F7:A0:DB:49:8C:74:98:68:E7:E8:73:22:26:87:92
X509v3 Authority Key Identifier:
keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:da:f2:82:4b:77:c8:42:8d:3f:9f:59:de:0c:73:4a:5f:11:
82:ee:79:a5:b9:b6:74:df:97:49:5f:02:9e:0d:4a:e4:dc:ad:
68:2d:c6:06:f2:5f:33:34:1a:8e:71:0f:bb:89:01:ed:08:ff:
74:88:df:1b:62:c7:da:61:49:12:82:1d:75:1e:2d:ce:89:51:
e5:cc:c9:d3:e9:55:09:14:eb:a8:81:08:23:e1:3c:92:2a:b4:
cd:1a:9f:de:28:68:c4:6c:f2:7e:83:c8:ff:f1:b9:45:cc:ac:
9d:fc:cb:69:3f:ab:8e:4e:45:bc:b9:1a:38:e0:05:02:77:37:
85:d7:50:f7:46:cd:46:e9:99:78:e3:28:14:3b:39:20:e8:99:
d8:2d:b6:44:b4:1a:00:6e:48:d4:1f:fa:9b:cc:0e:d2:4a:81:
ec:f5:27:e7:ec:88:21:50:01:16:a1:cd:c9:ac:b8:ee:93:d4:
62:e1:0a:12:ad:51:8b:c7:c3:1a:94:05:ef:d5:ac:d3:0f:de:
bb:93:5f:ff:52:b0:b8:a1:f3:9f:0c:b4:98:58:b5:fa:a8:55:
45:56:71:e3:60:93:40:e7:5b:f3:9d:c5:79:7f:5d:d4:09:f7:
d8:01:bb:e1:a2:ca:25:46:68:cd:34:a2:fb:26:68:35:11:45:
b4:eb:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:13:35 2025 by rpki-client