Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
File: xwy87PJahmXDWnjIIdEes6ZCNiE.mft (raw, json)
Hash identifier: q8Rqae5IXsXtOU5A2iFkk1OG6jEUpG0FCL1+TwVwizg=
Subject key identifier: 9A:19:62:DF:7B:85:51:50:BA:6F:13:F1:E4:F5:57:3B:0F:6E:B1:33
Authority key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
Certificate issuer: /CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Certificate serial: 019747E7875900B155AF5DDB628AA18C88CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 01:00:45 +0000
Manifest this update: Sat 07 Jun 2025 01:00:45 +0000
Manifest next update: Sun 08 Jun 2025 01:00:45 +0000
Files and hashes: 1: xwy87PJahmXDWnjIIdEes6ZCNiE.crl (hash: 0OfbsDyjtoxhsHtkCdJ1ELpPREMsmf78GV2FrbDTUC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:87:59:00:b1:55:af:5d:db:62:8a:a1:8c:88:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Validity
Not Before: Jun 7 01:00:45 2025 GMT
Not After : Jun 8 01:00:45 2025 GMT
Subject: CN=9a1962df7b855150ba6f13f1e4f5573b0f6eb133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:52:ff:fb:c4:a8:ac:aa:5e:c3:f0:df:44:
30:93:5d:d3:34:b3:f6:8c:82:60:98:a5:40:12:29:
39:8d:41:87:23:c3:5c:fb:df:84:25:29:e8:b4:cf:
f9:7f:1c:57:a1:24:4f:0e:65:9a:4b:18:3f:b4:73:
1c:32:56:7e:54:26:74:53:9c:82:cc:75:06:d3:24:
31:ce:c7:a4:51:6d:88:0a:2b:7a:ab:99:96:c7:a7:
d4:2f:9c:9f:c2:44:da:99:bc:7a:7b:3c:7b:ff:b9:
65:78:44:9c:88:ab:a6:72:47:8c:b3:3f:d5:0b:65:
b7:5d:17:92:12:88:75:6f:db:c3:68:b9:62:4f:9f:
13:59:68:d5:ed:7d:ce:c1:7c:14:36:44:08:0d:04:
50:50:ad:80:39:44:0c:f1:9d:36:7d:82:3c:42:58:
c5:d2:db:dd:38:14:5c:64:ec:24:79:c1:0a:1a:49:
79:dc:d5:58:46:77:d3:f2:de:2d:c9:f2:0e:c1:e6:
14:da:0b:0c:ab:06:eb:8f:25:7d:0d:cd:9d:2c:88:
fb:a3:a0:20:e9:c9:94:f5:11:45:67:e8:03:cc:6e:
3e:61:9e:f5:0c:ee:e1:56:99:bb:cc:67:df:4f:42:
25:ac:8f:83:50:2c:8d:c7:96:3e:1c:90:d1:8c:ca:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:19:62:DF:7B:85:51:50:BA:6F:13:F1:E4:F5:57:3B:0F:6E:B1:33
X509v3 Authority Key Identifier:
keyid:C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:45:e2:01:b4:f1:42:6e:f2:77:17:bf:50:83:36:67:cd:07:
d6:b5:c2:83:7e:dc:a4:11:55:f7:10:f6:67:41:6f:80:d4:21:
07:30:9a:c6:e0:b6:4a:35:61:28:b0:c7:6d:ad:43:85:1b:86:
5a:16:2d:27:63:dd:0e:e8:21:d0:c1:ca:bb:55:c3:8e:4a:dc:
b2:c9:eb:83:ef:e5:ea:08:b0:37:c5:2d:11:95:f8:8e:b2:18:
6d:ae:02:8a:01:e8:59:b5:ce:9c:64:65:9a:7d:fd:11:d2:f9:
d5:bf:f7:46:41:d7:23:bc:a8:c6:25:0f:1b:9f:b6:8c:8c:20:
20:df:d4:3c:89:9c:5b:2b:b2:23:d3:e1:ef:8b:e1:4e:d3:2a:
5c:07:da:1d:f5:7c:30:de:0b:2a:b8:91:28:a0:91:d1:0a:75:
f8:65:98:d4:3c:28:48:6b:36:c5:c5:ac:7c:34:d1:4d:6a:a1:
46:b2:92:5a:20:4f:73:05:8a:dc:6e:1b:a6:8a:a6:0f:26:35:
2d:52:0e:1f:12:3a:1d:5a:3c:99:33:1b:ce:33:c5:1f:06:f9:
85:e1:66:b9:5f:22:b4:46:9d:25:a9:56:81:e9:0b:68:50:3a:
8d:71:05:b0:ca:59:11:79:b8:d7:7d:12:aa:1f:ff:47:e3:b6:
f5:3e:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:50 2025 by rpki-client