Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: QpFoT1vVjIKxHnbxbm25anOM50et60LMrwaKZZ52btw=
Subject key identifier: 40:86:20:CB:C0:B5:FF:5D:32:2A:4A:E8:03:58:D8:38:13:3B:40:DD
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 01974AE828587F79920C635C658AF582C67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 0297
Signing time: Sat 07 Jun 2025 15:00:17 +0000
Manifest this update: Sat 07 Jun 2025 15:00:17 +0000
Manifest next update: Sun 08 Jun 2025 15:00:17 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: v9zig1qp6QoWBbN9U3kr+6HE+SwKQA5z69u2Xzvmnas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:28:58:7f:79:92:0c:63:5c:65:8a:f5:82:c6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: Jun 7 15:00:17 2025 GMT
Not After : Jun 8 15:00:17 2025 GMT
Subject: CN=408620cbc0b5ff5d322a4ae80358d838133b40dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:4b:8c:d1:d9:f1:59:e1:af:06:51:5d:d2:
c6:60:4c:e3:d7:f3:05:ce:99:3f:33:be:f0:fd:87:
dc:05:2e:fe:b3:d4:1f:13:78:d0:af:ec:09:d9:19:
0a:2a:6e:a8:cd:8d:fe:11:56:02:3f:80:44:cc:b6:
59:3a:25:44:de:7c:2a:14:1b:5e:45:c3:8f:e6:ed:
02:fd:c8:35:7b:37:ad:d5:45:13:eb:66:95:b3:31:
24:16:60:fc:7a:9b:63:4c:05:1f:15:23:6d:90:0d:
a3:1b:da:4c:74:cc:53:fa:ad:67:12:63:47:a7:54:
60:93:8d:45:aa:f2:39:45:28:48:cb:9d:90:08:82:
cb:a3:46:de:2b:15:f2:71:d4:77:d5:4e:00:1c:87:
fc:d9:37:ea:62:f2:f1:52:35:cd:e3:89:6a:26:b3:
ff:38:71:43:c4:36:55:b3:d6:eb:ef:86:b9:41:42:
7c:88:4c:30:62:88:43:f8:92:27:6c:63:af:36:8b:
ef:3b:2d:62:06:89:4d:59:61:73:40:ca:39:76:90:
ad:ee:e6:67:f2:e2:4a:bc:5b:f1:0a:be:b8:2b:d8:
7e:8e:82:12:56:b0:fa:83:0a:c2:f3:36:d5:2e:38:
a1:ad:51:d3:0d:fe:9f:d5:a7:4c:ab:d0:92:2d:80:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:20:CB:C0:B5:FF:5D:32:2A:4A:E8:03:58:D8:38:13:3B:40:DD
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9b:cd:fc:c1:48:d5:56:6e:86:db:e6:5e:64:2a:67:11:53:
9b:8d:a6:28:53:d1:4e:03:75:af:77:41:46:23:8d:84:53:a1:
d1:c4:bc:de:39:6b:c1:5c:6f:e6:38:eb:be:6b:dd:8f:f0:b7:
92:6b:15:8d:28:75:22:ad:f1:00:14:b5:7e:1d:18:a1:0f:88:
21:8a:c9:63:f5:7c:f4:81:db:ca:d6:e6:93:99:a1:d6:b1:79:
49:9d:f1:16:e6:45:53:50:5c:91:66:68:75:a4:94:34:10:9e:
a9:6e:7e:ff:fd:81:cb:3b:7e:84:c8:a5:6e:24:c2:6f:cd:29:
04:88:19:1a:32:66:20:9f:ba:70:84:27:f0:21:35:7e:11:0d:
4e:e1:9a:44:df:d6:cd:9b:a9:47:56:d3:3c:70:dd:43:88:c5:
b0:35:c2:b8:37:e7:26:ca:31:6c:5c:c2:9b:a2:c3:b4:f6:e9:
77:c1:a9:6a:d6:66:4c:d8:a0:0e:6a:2c:72:2f:3e:a8:d2:b0:
06:31:75:e7:1b:6d:a2:40:bf:9c:32:26:2c:89:1d:58:d0:9a:
61:fa:ca:25:28:f6:42:6b:e7:b2:50:bd:71:9c:b6:33:ae:93:
df:bf:cd:bb:00:ce:87:ac:d9:7d:47:48:a6:18:90:ae:39:e4:
93:05:4b:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6ChYf3mSDGNcZYr1gsZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MjQ5MGU2OTgwYjc5ZmE0YWIxN2U1ZjY1NzM3MWRhNjZj
MzZhZjQwHhcNMjUwNjA3MTUwMDE3WhcNMjUwNjA4MTUwMDE3WjAzMTEwLwYDVQQD
Eyg0MDg2MjBjYmMwYjVmZjVkMzIyYTRhZTgwMzU4ZDgzODEzM2I0MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l1LjNHZ8VnhrwZRXdLGYEzj1/MF
zpk/M77w/YfcBS7+s9QfE3jQr+wJ2RkKKm6ozY3+EVYCP4BEzLZZOiVE3nwqFBte
RcOP5u0C/cg1ezet1UUT62aVszEkFmD8eptjTAUfFSNtkA2jG9pMdMxT+q1nEmNH
p1Rgk41FqvI5RShIy52QCILLo0beKxXycdR31U4AHIf82TfqYvLxUjXN44lqJrP/
OHFDxDZVs9br74a5QUJ8iEwwYohD+JInbGOvNovvOy1iBolNWWFzQMo5dpCt7uZn
8uJKvFvxCr64K9h+joISVrD6gwrC8zbVLjihrVHTDf6f1adMq9CSLYAUzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECGIMvAtf9dMipK6ANY2DgTO0DdMB8GA1UdIwQY
MBaAFMQkkOaYC3n6SrF+X2Vzcdpmw2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83OThkYTgtYTBiYS00ODhjLTkxODQt
NThjMTg5YzZlZmVkLzEveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83OThkYTgtYTBiYS00ODhjLTkxODQtNThjMTg5YzZlZmVk
LzEveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpvN/MFI
1VZuhtvmXmQqZxFTm42mKFPRTgN1r3dBRiONhFOh0cS83jlrwVxv5jjrvmvdj/C3
kmsVjSh1Iq3xABS1fh0YoQ+IIYrJY/V89IHbytbmk5mh1rF5SZ3xFuZFU1BckWZo
daSUNBCeqW5+//2Byzt+hMilbiTCb80pBIgZGjJmIJ+6cIQn8CE1fhENTuGaRN/W
zZupR1bTPHDdQ4jFsDXCuDfnJsoxbFzCm6LDtPbpd8GpatZmTNigDmosci8+qNKw
BjF15xttokC/nDImLIkdWNCaYfrKJSj2QmvnslC9cZy2M66T37/NuwDOh6zZfUdI
phiQrjnkkwVLhw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:14 2025 by rpki-client