Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File: xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier: vEOBYhr7ax9fG20RfxaRxCd3gc1nQc9I5p9IwexkU58=
Subject key identifier: 16:57:B6:20:49:39:71:32:4D:BA:79:78:5E:FF:6E:6F:97:F6:D7:7C
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer: /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial: 01974B1F7B6F4C77DABB98AB9C91B14F7DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number: 0C89
Signing time: Sat 07 Jun 2025 16:00:43 +0000
Manifest this update: Sat 07 Jun 2025 16:00:43 +0000
Manifest next update: Sun 08 Jun 2025 16:00:43 +0000
Files and hashes: 1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: B4P+FMCpdCPOEVMjG0/Lez3ymQtqkIaNrE6A2QGi8Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:7b:6f:4c:77:da:bb:98:ab:9c:91:b1:4f:7d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Validity
Not Before: Jun 7 16:00:43 2025 GMT
Not After : Jun 8 16:00:43 2025 GMT
Subject: CN=1657b620493971324dba79785eff6e6f97f6d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:8b:a9:e9:6a:7f:17:27:51:ee:02:84:11:
7f:5f:f1:38:02:23:8c:fa:37:84:3e:fd:72:ca:65:
93:f5:5e:47:b4:7e:65:fc:40:90:33:15:20:e2:de:
36:64:cd:33:54:ee:10:5d:1d:6d:be:aa:e1:77:2e:
1c:12:99:2e:7e:a3:a2:f6:bb:2a:86:7c:e0:9b:38:
24:8e:04:4f:71:77:40:5a:37:8c:97:0f:55:cd:8e:
0c:9d:33:ce:ca:a9:4d:64:e6:19:e5:ba:a1:7f:4c:
76:82:dc:b5:89:1f:b1:d0:d2:06:a4:12:00:c7:c6:
fb:b0:76:f9:91:d3:5f:45:6c:a6:b2:de:7d:b2:2c:
95:6b:15:7e:e3:d2:af:b1:cc:fa:87:b2:04:36:ac:
41:4a:a8:7b:0b:28:58:61:92:1f:77:62:0d:2f:b1:
40:0d:ac:33:2a:60:08:ef:49:fb:3e:a0:03:2e:ea:
c4:56:08:5c:59:fb:68:bf:10:45:73:2a:f6:82:5e:
2e:19:a5:cf:22:92:17:54:0b:8a:ac:7f:31:70:25:
09:9d:ad:8e:ea:db:cf:70:29:d1:5a:76:c9:45:96:
7b:50:38:84:b2:1b:7b:9d:a6:fe:55:81:e5:a0:5e:
b3:5e:9a:53:85:d3:d4:5d:c3:b9:fb:b3:a0:d6:03:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:57:B6:20:49:39:71:32:4D:BA:79:78:5E:FF:6E:6F:97:F6:D7:7C
X509v3 Authority Key Identifier:
keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f2:be:cf:05:c2:cc:b5:c4:81:4c:8f:b7:f3:8a:a0:83:96:
4a:f3:f0:8b:9b:9a:aa:49:16:f9:cb:a7:90:ec:17:c3:c8:eb:
25:1b:de:9b:72:7c:c9:90:29:7a:95:19:71:25:f3:cc:b3:23:
d9:cf:b2:33:17:b2:fc:3a:76:b3:ec:d3:f3:01:07:dd:bb:54:
5c:2e:4d:62:a5:34:66:0d:22:f2:08:ad:03:45:25:0e:16:a2:
b8:95:7e:ef:19:ff:66:d4:24:12:6c:ff:a4:8a:12:da:57:b6:
ce:93:05:d9:44:95:e1:d7:0a:9c:c6:9e:94:8c:5d:91:da:0f:
ec:bf:8d:7a:27:3a:6a:8e:2c:24:ea:25:d1:72:04:d8:e7:d0:
68:d1:d7:19:21:32:ae:4f:9a:af:a0:d4:b3:8a:41:60:94:77:
89:83:dc:d9:fe:c7:d4:44:7a:cf:8f:37:25:57:b7:8f:60:1e:
ca:f4:bb:37:a7:b5:45:62:42:38:e9:f6:db:d2:1e:9f:05:e0:
92:4f:6b:d4:69:c3:50:fd:00:cb:fb:c3:ee:5f:53:6f:f1:44:
28:ba:5e:3d:0d:0c:44:dc:ec:b6:69:7e:f2:37:04:40:21:e7:
f7:51:2d:0d:5b:fc:e7:c0:58:24:82:86:b3:62:83:ea:4b:6b:
8c:fc:8d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:47:49 2025 by rpki-client