Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
File: x_SYwou91eWf9XaMbTikEMqCZkA.mft (raw, json)
Hash identifier: np59G59sA72MCCifNxTOOKFS1AYVjMfcfNfyEiR/UXM=
Subject key identifier: 27:65:61:B6:8A:D6:5A:37:47:9C:41:95:FE:91:CE:D8:2F:F1:51:47
Authority key identifier: C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
Certificate issuer: /CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Certificate serial: 0197488C29618EB69F01EDE963EA2EE2C63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
Manifest number: 0D69
Signing time: Sat 07 Jun 2025 04:00:34 +0000
Manifest this update: Sat 07 Jun 2025 04:00:34 +0000
Manifest next update: Sun 08 Jun 2025 04:00:34 +0000
Files and hashes: 1: x_SYwou91eWf9XaMbTikEMqCZkA.crl (hash: jpmk414UwHo+46vxonQp/t+FxOPXBRn+y7dMzGSfE9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:29:61:8e:b6:9f:01:ed:e9:63:ea:2e:e2:c6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Validity
Not Before: Jun 7 04:00:34 2025 GMT
Not After : Jun 8 04:00:34 2025 GMT
Subject: CN=276561b68ad65a37479c4195fe91ced82ff15147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:8f:4c:2c:d3:09:93:2a:2f:5e:a3:e9:e4:
6e:d3:65:5a:1a:a8:5f:54:ec:f0:92:88:40:15:e6:
35:03:b8:b9:54:92:e0:c5:f7:a1:a9:eb:d3:09:23:
30:00:64:03:cd:85:99:05:ca:7b:01:2c:72:70:91:
7b:ee:c2:08:30:da:b7:85:14:4e:5c:45:76:8a:93:
c7:8e:bb:1c:5f:5c:be:d6:7c:ff:28:fc:5e:64:40:
5e:56:28:3f:ce:e6:6c:05:4e:61:97:f2:67:1c:34:
f5:f0:81:ed:db:85:74:51:a2:00:74:05:5d:49:f7:
55:9e:6c:e0:e1:ad:1f:52:3a:1d:ae:88:75:f0:83:
f4:18:45:6c:9c:73:9b:1c:85:e7:d9:de:95:39:31:
7f:07:6c:d0:b5:a6:b2:77:87:31:28:1b:97:64:f8:
d2:61:d4:b6:3d:24:69:ed:7f:f0:0a:df:db:d6:e4:
49:31:c9:cd:01:81:26:4b:64:2e:76:60:ad:6f:c5:
c4:7e:e4:e9:73:61:ab:50:37:41:0f:53:63:21:a3:
b0:d6:95:6c:3c:20:a1:a6:c4:c0:6d:36:d3:5e:e6:
04:24:c1:f4:ee:1f:f2:3f:e0:9e:90:87:04:37:ad:
72:32:eb:08:01:fc:03:50:28:37:e3:2b:67:24:8b:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:65:61:B6:8A:D6:5A:37:47:9C:41:95:FE:91:CE:D8:2F:F1:51:47
X509v3 Authority Key Identifier:
keyid:C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1a:b9:94:bd:ef:d0:1c:b9:23:d4:5f:39:fb:3a:0f:ad:5e:
4a:dc:19:5e:d6:0c:f3:31:8c:76:e8:c9:8d:1a:61:01:ab:69:
a7:56:24:13:5a:a3:eb:2b:82:72:d4:51:f5:a9:53:ac:9f:9c:
eb:81:52:d6:a5:a2:5f:ef:02:84:9e:2f:f5:b2:17:7d:df:e3:
81:ca:14:5b:3b:14:21:4f:2f:8d:59:48:23:11:3a:ac:24:c6:
75:b5:aa:46:63:63:63:4c:84:f9:c2:34:a9:58:5a:64:0d:ad:
e2:34:1f:d4:69:ff:9f:d0:60:c3:2e:15:d6:29:ea:de:a1:e5:
e6:2d:64:98:2c:d1:6a:99:7f:16:7c:4b:6a:a7:86:16:44:d5:
08:9c:c8:be:2c:86:8c:a0:a4:ff:61:b0:c4:d8:3a:18:b0:12:
83:1c:d3:c3:7e:a9:3f:a9:d3:8d:2c:0c:25:3e:39:c2:6c:d1:
10:0f:58:c3:ad:3a:1d:1f:ea:27:c6:92:ad:55:91:32:ed:76:
8c:3a:f3:26:96:98:c9:ba:37:30:78:4a:03:d8:10:6e:cc:34:
cb:d6:2f:dd:03:0b:9b:20:52:88:d2:e4:c2:ab:47:62:eb:e7:
29:50:d4:d5:66:ff:e6:58:47:c0:ff:97:9a:5c:96:e5:87:d6:
0d:af:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:35 2025 by rpki-client