Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier: gi6c5h7OvGM0Sk51qLab8fjJb9i94ie/4FhGBMy1Nw4=
Subject key identifier: D5:48:85:80:6A:29:D4:1C:50:D0:93:AB:FC:93:9D:C4:0B:AB:BF:75
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial: 01974D7BE04D699D2EAE7F085C8D7CEB7679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number: 0147
Signing time: Sun 08 Jun 2025 03:00:53 +0000
Manifest this update: Sun 08 Jun 2025 03:00:53 +0000
Manifest next update: Mon 09 Jun 2025 03:00:53 +0000
Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: 1o3g6phsi7UF9m1323TBX+4zd/xIVwxtmE4yK4MrSZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:e0:4d:69:9d:2e:ae:7f:08:5c:8d:7c:eb:76:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Validity
Not Before: Jun 8 03:00:53 2025 GMT
Not After : Jun 9 03:00:53 2025 GMT
Subject: CN=d54885806a29d41c50d093abfc939dc40babbf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:ef:7f:a7:bb:4c:0e:86:cc:2c:94:d9:04:
40:fd:f8:19:8b:af:43:59:2a:1d:ab:ee:24:aa:b7:
84:27:72:25:e8:21:a4:15:8d:a6:af:7a:fe:41:cb:
c0:c5:99:f4:12:62:2e:7c:95:8a:42:a2:69:84:e3:
32:72:f0:cf:71:a6:e0:af:94:db:29:93:04:64:dd:
ff:34:d6:11:e4:f5:11:29:32:67:04:4d:05:17:20:
b6:62:50:d2:ff:0f:c6:3d:8e:95:51:61:fd:8e:5f:
23:19:63:8e:61:34:d8:9b:a4:16:f2:07:32:4e:7f:
56:b8:09:39:e6:af:46:1c:3d:a8:98:34:0d:f4:eb:
c3:f7:33:8a:f5:6f:7d:74:af:ba:6d:a3:cf:c3:33:
85:8d:88:20:99:55:b5:59:85:c1:58:69:2d:cd:4f:
9d:f1:5b:cd:06:78:41:a2:05:0b:c8:d6:55:80:58:
30:ed:eb:fa:16:19:2c:b5:44:fe:fe:06:f3:4a:16:
36:c9:35:bd:10:a6:39:c5:95:2d:15:7a:6a:ef:d0:
2c:5f:e5:66:da:6c:8e:bb:c1:89:50:ee:63:2e:cd:
d2:a4:84:11:3a:94:7c:01:12:ad:8a:db:36:80:dd:
45:2a:55:5c:a5:30:7a:10:de:35:b9:db:8b:3e:85:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:48:85:80:6A:29:D4:1C:50:D0:93:AB:FC:93:9D:C4:0B:AB:BF:75
X509v3 Authority Key Identifier:
keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:73:38:f9:f5:29:96:1e:fc:b7:e0:aa:dd:9b:6b:39:dc:21:
89:e6:9b:7b:3e:b9:63:f3:f7:df:da:9e:f9:33:66:3f:a1:76:
3d:2a:c6:8c:f5:5d:29:d3:80:2e:4f:31:94:5f:69:74:f3:ce:
d8:b1:6f:c6:84:98:5a:f8:f9:14:6e:7d:74:98:b8:03:1c:bb:
4e:9e:ba:7a:27:6d:09:f2:06:dc:59:2f:96:71:28:a3:9f:4c:
3c:c5:c6:54:89:73:a2:91:97:16:04:bf:61:b4:ca:17:cc:e1:
1b:16:58:87:9b:ad:c4:05:6c:d9:74:df:65:59:9e:ce:b6:fa:
6d:f7:76:96:6b:23:a5:30:76:fa:95:07:f1:bc:b5:3b:18:03:
27:09:63:1a:d7:f4:d1:45:3f:23:90:c7:28:00:48:32:22:93:
7a:d6:f2:7a:12:a6:8c:e0:c5:7b:ee:bf:a8:7d:c2:6e:da:a0:
d8:3c:1e:83:66:b2:38:40:43:36:c5:26:b7:e8:04:49:f5:22:
34:e2:33:e7:c7:01:da:cb:5a:35:4b:86:86:92:cd:da:de:6d:
28:e9:47:1e:bb:b4:88:7d:66:03:44:e1:eb:73:5a:e8:bf:ff:
a8:39:a1:f7:26:0e:18:a3:05:8e:13:30:03:b3:a9:42:33:65:
48:ea:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:44:13 2025 by rpki-client