Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
File: XzoD6voEyDkjvYaTJGGFDfX3gUY.mft (raw, json)
Hash identifier: UpI83VO0O2rh9XTA6zGfzZB/akMGFYdTrgRrCJtLXok=
Subject key identifier: 53:08:E7:A3:32:2B:08:78:37:6E:97:70:A5:50:54:5D:6D:72:2F:26
Authority key identifier: 5F:3A:03:EA:FA:04:C8:39:23:BD:86:93:24:61:85:0D:F5:F7:81:46
Certificate issuer: /CN=5f3a03eafa04c83923bd86932461850df5f78146
Certificate serial: 0197575A8C9424F23F3FB64D7A244A062855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
Manifest number: 11DE
Signing time: Tue 10 Jun 2025 01:00:41 +0000
Manifest this update: Tue 10 Jun 2025 01:00:41 +0000
Manifest next update: Wed 11 Jun 2025 01:00:41 +0000
Files and hashes: 1: XzoD6voEyDkjvYaTJGGFDfX3gUY.crl (hash: G89NqJZ4TrKoTcbEEzBnt/grPH7HI1ZXJXCrzMF+SJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:8c:94:24:f2:3f:3f:b6:4d:7a:24:4a:06:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a03eafa04c83923bd86932461850df5f78146
Validity
Not Before: Jun 10 01:00:41 2025 GMT
Not After : Jun 11 01:00:41 2025 GMT
Subject: CN=5308e7a3322b0878376e9770a550545d6d722f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f9:b1:2d:16:b7:a8:ae:fc:39:66:fc:70:e8:
58:31:c9:65:c2:14:61:8f:7c:16:6e:1d:d1:cf:56:
50:70:09:26:98:de:5a:bd:c9:31:28:ae:d2:34:61:
93:a8:b1:db:77:d2:00:9b:e4:a5:b7:59:76:0d:f2:
62:07:78:4b:0a:1f:f1:57:d7:48:b9:5b:ae:e7:40:
71:9c:bc:de:cf:7d:9a:96:f8:c5:de:a0:fd:05:32:
4a:4b:1c:64:eb:31:58:43:53:82:fc:40:83:b1:1b:
ff:dd:65:24:83:e0:21:04:d1:9c:d7:a2:8b:72:8a:
82:c5:d2:b6:f4:c7:16:bd:4e:af:f0:55:7c:d7:50:
b8:ac:11:2a:05:df:bc:92:72:8e:73:14:cf:a4:9f:
6c:d0:a3:ee:e4:1e:ab:9a:bc:6a:1b:0e:01:29:a2:
92:02:ad:7c:41:64:bf:a9:e4:ac:4c:f0:43:6a:12:
62:75:00:3a:3a:6d:3a:7a:d3:a1:0d:e6:a2:34:34:
ed:b9:07:b3:8c:79:db:7a:95:ef:26:26:7c:0c:cf:
73:1c:18:e6:9f:c6:31:d6:fb:80:92:1b:d1:02:c0:
5c:f1:f1:7f:c4:20:b9:47:95:7b:51:00:dc:c4:88:
28:55:ef:c8:5a:a5:a4:25:70:c4:6b:6c:56:f5:5f:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:E7:A3:32:2B:08:78:37:6E:97:70:A5:50:54:5D:6D:72:2F:26
X509v3 Authority Key Identifier:
keyid:5F:3A:03:EA:FA:04:C8:39:23:BD:86:93:24:61:85:0D:F5:F7:81:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a5:ca:27:19:de:1c:52:5e:e9:df:69:14:39:9e:61:30:ca:
dc:3e:9f:3a:1b:4e:e1:c7:ef:ba:b5:49:33:b0:f0:85:3f:eb:
51:63:48:ed:7d:ea:27:c5:38:8e:ed:44:29:8c:78:c2:19:e8:
7b:a2:07:c9:b0:4a:cd:2a:a7:8b:7b:2a:ea:11:57:c3:74:2c:
b0:51:f6:8f:b7:2a:dc:a0:a2:c8:65:f0:e4:c9:28:28:bf:15:
36:9f:7b:56:ac:72:74:fa:ca:c6:f2:c9:4d:a2:4f:1f:fe:55:
bc:1d:56:e9:6d:e6:fa:19:74:62:b7:b0:0c:7e:6a:49:71:7f:
1f:26:c4:32:a8:4e:4f:8b:a3:99:4f:2e:84:58:cd:59:dc:31:
c9:35:c4:ca:c7:f2:63:8c:c9:91:9a:b2:ad:b8:ab:b3:c5:56:
3b:b5:18:fd:16:b8:02:77:8a:f2:d0:89:fb:4d:64:5f:46:65:
15:53:c8:60:4d:d8:92:3c:72:11:35:02:59:2f:59:5c:cc:47:
2a:71:82:3d:cd:39:67:70:14:1a:ef:bf:ef:0f:f2:80:bc:73:
a1:6c:ec:f3:e6:a2:79:f0:fd:98:54:dc:39:0e:54:25:81:1a:
7d:b3:ff:1b:25:d4:a3:a3:d6:1b:c2:95:2f:ba:49:37:e2:d1:
b8:f6:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:32:18 2025 by rpki-client