Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
File: XbdXv1dG8moHySCHAbDVS2m8M2Q.mft (raw, json)
Hash identifier: mTNMM8pxpr5HZbVkEF7PV8H7a5yJeM3xbaTKQbECjWs=
Subject key identifier: 18:AD:5D:0C:17:BA:67:F5:F3:64:92:3F:04:4E:49:6C:E4:75:13:00
Authority key identifier: 5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
Certificate issuer: /CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Certificate serial: 0197470BB0078B9ADC96FF28F4B727B320D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
Manifest number: 0447
Signing time: Fri 06 Jun 2025 21:00:37 +0000
Manifest this update: Fri 06 Jun 2025 21:00:37 +0000
Manifest next update: Sat 07 Jun 2025 21:00:37 +0000
Files and hashes: 1: XbdXv1dG8moHySCHAbDVS2m8M2Q.crl (hash: FsNiWr7WhyFjAx8cdW3yesFf9Gc7nh9p3BUMvlUlJb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:b0:07:8b:9a:dc:96:ff:28:f4:b7:27:b3:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Validity
Not Before: Jun 6 21:00:37 2025 GMT
Not After : Jun 7 21:00:37 2025 GMT
Subject: CN=18ad5d0c17ba67f5f364923f044e496ce4751300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:7e:a6:b0:3e:2c:ac:2d:51:b2:b6:04:37:
35:44:9d:0d:a2:3b:cc:1c:71:67:a2:d1:5a:11:18:
8c:a3:ba:f6:93:99:35:fe:20:2c:4f:17:95:71:6a:
8f:b6:7d:aa:eb:02:84:13:b6:fa:b8:72:59:2f:a2:
4e:e4:78:86:71:c6:1e:19:da:61:cf:08:83:50:fd:
0a:8f:de:89:cb:1f:3a:4e:dc:f2:25:b8:ae:87:55:
00:50:19:27:b8:51:32:60:b0:c2:53:82:02:36:4e:
bf:c7:91:39:ea:74:ea:78:b5:8e:07:78:d5:8e:db:
30:bf:1b:70:24:cf:f3:c3:3f:a9:84:c1:db:39:b4:
f9:8f:1d:34:37:96:13:8d:97:34:48:f2:49:6d:1c:
24:d0:45:33:bc:2a:a1:86:4e:03:85:8e:f3:6b:90:
5d:4d:69:2a:df:b2:01:fd:08:f8:26:33:06:63:dc:
4b:7e:96:ca:5d:c8:a3:ca:7f:cb:3b:27:88:1a:f6:
79:ac:e7:52:04:4a:72:2f:f2:77:b9:db:7c:e2:67:
0e:c7:59:cf:3e:c1:c5:5a:4f:f3:d3:65:1b:ca:b2:
7f:67:0e:10:a4:b7:7d:b2:25:d6:ea:15:81:4b:29:
19:18:1b:39:89:e7:30:54:d7:30:29:8b:ab:e0:b6:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:5D:0C:17:BA:67:F5:F3:64:92:3F:04:4E:49:6C:E4:75:13:00
X509v3 Authority Key Identifier:
keyid:5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a9:df:78:f7:3a:50:e0:59:5f:a2:2b:da:f8:bb:2e:cc:73:
61:20:c9:10:73:59:99:2c:61:72:00:6d:84:52:39:3f:94:1f:
5d:e7:37:8b:a4:48:f3:ce:4c:04:28:a9:36:51:67:d3:50:ea:
7a:2b:c2:66:d0:05:39:e0:cb:b5:30:7d:5e:2a:a5:56:a3:ae:
e5:4a:67:0f:fa:32:1b:d9:29:e5:7b:53:56:d3:81:f8:1a:8e:
f1:44:af:f3:16:1b:c3:ab:64:a6:25:cf:9d:ae:16:9e:36:02:
9b:a5:5e:14:24:f3:79:28:9a:79:47:b1:61:c8:e9:32:5a:0d:
96:fd:99:4a:3e:a2:46:5a:be:39:c3:fd:53:c8:9c:6a:ee:d8:
76:b9:f2:05:e6:16:b7:54:83:52:9b:9a:db:eb:bb:59:fd:56:
92:ef:98:bc:6f:9f:fe:b2:1b:36:c4:8b:6d:55:96:1c:2e:bf:
d3:1e:e6:9c:a5:87:ff:7e:8d:4d:3e:84:ff:45:27:d4:71:66:
1e:cb:33:37:83:dc:23:29:de:b8:76:5f:74:7e:c9:3d:20:57:
dd:8a:c2:86:6d:6e:0c:22:fd:13:8b:4f:fc:e7:cb:05:98:d1:
2d:ca:8d:bc:b7:18:b9:9f:4a:e9:08:ee:32:29:1f:de:57:c9:
1a:f0:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:31 2025 by rpki-client