Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json)
Hash identifier: vF8jsBB8kfO+Rx5LS+oY3JLVItAmM88tRCZigIi4WOE=
Subject key identifier: 77:BD:0B:D3:DC:0E:A1:78:C8:D5:4E:C0:4A:2B:0A:1A:F2:A0:04:B3
Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Certificate serial: 01974AE909D9F18A04F71DC7A24CE31B2189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
Manifest number: 08DC
Signing time: Sat 07 Jun 2025 15:01:15 +0000
Manifest this update: Sat 07 Jun 2025 15:01:15 +0000
Manifest next update: Sun 08 Jun 2025 15:01:15 +0000
Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: 6u++VLkH4IOCC6dOjwlP+XOCDkwymxXb7eu1cWm1860=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:09:d9:f1:8a:04:f7:1d:c7:a2:4c:e3:1b:21:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Validity
Not Before: Jun 7 15:01:15 2025 GMT
Not After : Jun 8 15:01:15 2025 GMT
Subject: CN=77bd0bd3dc0ea178c8d54ec04a2b0a1af2a004b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:7c:e5:19:9c:95:17:ff:66:02:36:f6:4b:
f7:af:fe:92:98:1a:2d:21:ce:2a:72:ed:e7:6b:db:
ce:7f:32:61:95:ce:67:bb:cb:0c:b4:a1:2b:14:9d:
b3:6a:02:bb:11:f1:e8:47:8e:c9:f0:98:9f:f3:f7:
d3:c4:d6:48:bb:0d:7a:34:57:61:90:c4:fc:11:a8:
fc:ac:b7:f7:9a:72:30:30:41:e6:11:02:10:a1:aa:
3a:57:36:5e:ab:e1:72:99:5c:4d:e2:7d:3d:fb:cc:
11:68:43:8e:43:d5:7b:45:ce:80:51:d3:f7:d7:b1:
e8:40:ba:65:b0:68:e0:6c:7f:a0:b5:e7:ab:e6:24:
5c:cc:a9:a2:c8:a1:1f:56:ee:28:c9:73:2d:39:c2:
f8:d2:9d:1e:0b:45:fc:4b:10:17:b7:72:88:64:50:
59:89:b9:0f:5d:2e:70:f1:85:23:04:98:e0:4b:17:
28:72:2a:fb:8c:28:2c:7c:d3:70:0b:60:68:2c:b1:
87:48:3d:0b:68:ab:b7:35:ca:94:de:12:3a:5f:a9:
9c:a2:4e:9e:b1:a4:cf:ee:dc:5d:36:fb:e5:a9:0c:
c7:d2:4b:7a:64:68:98:5e:e5:e0:dc:e9:2a:b7:2a:
07:2d:5a:00:95:9b:87:27:c4:eb:4d:b6:f0:25:cd:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:0B:D3:DC:0E:A1:78:C8:D5:4E:C0:4A:2B:0A:1A:F2:A0:04:B3
X509v3 Authority Key Identifier:
keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:10:d6:56:a0:d4:bf:89:9d:ce:e0:9d:01:02:55:ae:7e:c1:
f9:a5:ef:72:49:c8:39:95:d5:ef:37:07:7c:93:ef:ec:a4:09:
cf:e5:a5:65:48:a7:54:3b:55:3e:2c:a7:7f:9d:a9:af:34:8b:
6d:96:36:42:e4:c6:ae:51:78:ae:fb:7b:5c:8c:9f:b9:15:21:
f2:9c:09:55:d5:7f:c7:28:fd:48:a6:ee:83:a7:40:44:3f:7e:
7d:a3:ff:23:0a:b1:70:69:75:3a:32:05:22:86:19:d2:10:aa:
c6:27:e5:2c:61:cc:36:fe:0c:6b:ff:36:1c:3a:9a:98:be:21:
1f:38:94:61:15:71:3b:7f:59:0f:95:5d:c4:c8:bc:df:34:20:
3f:2d:97:79:80:9f:ec:ff:96:2f:78:d9:23:1b:d5:b6:c5:49:
61:d9:c6:5a:d6:26:d0:f3:fc:65:45:b4:f5:07:fb:31:ba:74:
c4:18:8d:ed:8f:d8:77:22:fa:2d:0a:85:f3:a5:f9:2e:8c:da:
b1:32:c8:fb:58:b3:e2:6a:cc:07:fe:33:a0:bd:fe:9c:1e:74:
32:7d:67:53:4a:3d:d2:31:ff:f2:45:85:c3:5e:48:49:79:1c:
60:6c:e6:8b:aa:8f:bb:18:ca:d0:ef:9d:0b:5e:a1:4a:24:34:
f5:f6:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:21 2025 by rpki-client