Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: qEeEqb5lhi419I2tkk5L+pbrdB1HcpUOTf5bYS+Ernc=
Subject key identifier: D0:3E:1C:EB:F2:7C:A2:83:92:80:EB:D5:EF:A0:8C:B9:51:69:83:17
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 01974855156DA284AC7BC0A002F0920C4BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 02C8
Signing time: Sat 07 Jun 2025 03:00:24 +0000
Manifest this update: Sat 07 Jun 2025 03:00:24 +0000
Manifest next update: Sun 08 Jun 2025 03:00:24 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: TOxsL4cdzjKkIUiEoGlwNTDGgx9kteXCO+qQNA/voBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:15:6d:a2:84:ac:7b:c0:a0:02:f0:92:0c:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Jun 7 03:00:24 2025 GMT
Not After : Jun 8 03:00:24 2025 GMT
Subject: CN=d03e1cebf27ca2839280ebd5efa08cb951698317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:1d:46:83:9d:a5:19:87:c0:a9:43:3a:84:
0a:45:81:45:8b:c3:ca:a1:62:d1:23:8a:ec:1d:24:
b3:40:30:96:e2:9f:19:22:d2:82:b5:ea:be:96:ea:
bf:25:cb:8b:13:ae:ac:4f:6b:af:17:18:71:46:b9:
5c:09:e2:aa:7d:dc:e0:36:9b:42:e7:27:1d:52:73:
dc:a0:10:c0:6b:3b:66:6b:07:92:7f:ae:ea:77:72:
d8:76:82:94:70:20:a8:65:34:a0:2e:ee:01:c3:6b:
8e:e3:29:2b:ab:22:61:d5:6b:be:c9:cf:32:94:c6:
aa:c0:d8:1f:94:7f:bf:d4:b1:f8:7e:34:9b:65:af:
b3:01:76:d9:26:ae:b9:31:11:63:92:84:89:73:d8:
66:01:87:5c:a6:7d:ec:18:ec:03:21:34:95:94:3b:
29:76:ce:b2:ac:62:4b:40:0c:e3:e1:a0:fc:ea:ff:
9c:4c:56:07:6a:b0:5f:2e:72:5b:2a:7f:59:67:31:
93:b3:70:74:9e:30:d9:22:db:f9:18:4e:ce:b0:d9:
9c:5b:8d:ac:0e:ec:ab:14:4c:c3:b6:cb:eb:7b:c6:
7b:3d:fd:51:25:8f:11:79:e8:0d:7b:1b:a5:33:29:
bb:5d:84:01:f1:77:9b:34:bd:cb:d1:e9:16:9f:e4:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3E:1C:EB:F2:7C:A2:83:92:80:EB:D5:EF:A0:8C:B9:51:69:83:17
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:78:05:2d:b6:87:ef:9b:7f:2a:1c:ff:90:71:26:6c:31:35:
2b:5e:86:f6:62:74:62:69:52:a5:91:e3:60:6b:73:b0:f4:a6:
0a:01:32:5a:ae:3a:4c:65:bd:f1:ae:07:17:59:3c:e0:f4:ff:
d6:97:4a:93:b0:64:75:41:33:21:db:28:a8:e8:cf:b9:c6:bf:
8a:11:b3:62:56:68:5e:d9:f9:0c:56:9c:0c:f7:9e:ca:17:1a:
5a:29:ee:cf:52:04:20:bf:e2:70:72:0c:21:6c:e3:cb:f1:36:
1f:b4:d2:e0:4b:a0:7f:89:71:06:bb:0a:e0:ad:20:27:32:a1:
5d:c3:25:b8:cf:07:69:67:aa:2b:0a:35:d9:6a:89:5a:31:82:
02:75:df:7a:59:32:78:42:f3:4c:76:eb:8f:e5:ab:66:8c:cf:
14:79:a1:2a:a4:30:06:69:3e:42:74:a2:2b:6b:29:e0:95:38:
08:f5:2c:f6:4e:66:5a:18:a6:0f:8b:f9:21:8a:52:19:ec:ad:
8b:80:74:93:73:22:af:5c:1a:6a:ca:8d:5d:3b:6d:4b:8f:13:
62:87:84:1e:52:2e:6d:70:2d:6e:41:1a:44:91:89:77:c7:75:
59:de:4c:b6:bd:3f:c5:57:4d:43:d9:0a:8a:b4:a8:d1:f9:3b:
16:6e:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:11 2025 by rpki-client