Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier: 4C3ssOQJGCgM09LTCGt77TTncIahFcU5lHDxALBNQ4s=
Subject key identifier: DF:6D:35:6D:5C:28:FB:AC:94:56:D8:99:95:C8:13:B3:1B:52:30:6F
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial: 01974E5833C66C83925B0AB5D830D9487E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number: 12D7
Signing time: Sun 08 Jun 2025 07:01:32 +0000
Manifest this update: Sun 08 Jun 2025 07:01:32 +0000
Manifest next update: Mon 09 Jun 2025 07:01:32 +0000
Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: 3EVbT5iIZYBXHugQqsQ3LbftXmB6EPOqBRw9jgVNK5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:33:c6:6c:83:92:5b:0a:b5:d8:30:d9:48:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Validity
Not Before: Jun 8 07:01:32 2025 GMT
Not After : Jun 9 07:01:32 2025 GMT
Subject: CN=df6d356d5c28fbac9456d89995c813b31b52306f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:f5:03:fd:e5:1d:62:5d:7c:31:a5:57:06:
ee:ac:9f:40:12:a9:bb:54:a8:52:5e:69:f5:4f:5c:
57:2f:ef:1a:79:3d:7e:0d:c3:44:dc:4c:8f:da:92:
7b:aa:99:de:3f:d5:aa:23:36:7d:51:67:03:c2:39:
df:ef:a9:bd:86:81:1e:c2:d0:5c:a3:54:b9:b3:fd:
c4:15:53:78:29:5b:05:62:0f:c4:0e:56:af:30:0c:
d1:9a:d8:db:fa:c1:ea:2a:d8:49:8e:80:e0:3e:6d:
e2:4f:a5:74:10:01:07:b6:d9:80:ec:a7:6d:f5:fa:
9a:fb:bd:c6:da:6d:11:2d:01:02:f7:ca:15:40:d3:
6b:35:c6:77:35:4f:44:0e:14:b9:53:c3:26:a9:c5:
2f:25:09:d4:ae:32:44:3f:a0:88:99:ec:64:0e:17:
d7:07:ea:16:f2:a4:0c:82:87:50:4c:e0:69:8e:0a:
ef:89:8a:c2:a4:46:18:d8:de:dc:20:08:df:7f:9e:
7a:c1:56:b6:fc:2c:00:63:7f:88:a1:74:fe:32:7e:
2b:6f:08:45:aa:e0:4d:66:c3:5d:3c:6c:c1:1c:23:
94:fe:80:75:4b:e8:9b:65:d0:05:fe:2a:e5:59:f5:
69:d9:de:1c:4d:c3:5d:19:84:f6:62:2e:7e:c2:83:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6D:35:6D:5C:28:FB:AC:94:56:D8:99:95:C8:13:B3:1B:52:30:6F
X509v3 Authority Key Identifier:
keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ec:78:46:f7:b1:d9:8d:04:76:d6:27:5e:1d:a9:0a:b2:c1:
90:ea:6c:e9:39:9b:6a:26:a9:92:a1:10:c7:1e:1f:6d:b8:09:
04:75:05:89:49:e1:0b:a2:11:dc:dd:f7:10:ed:25:98:ca:3a:
25:ca:f2:c6:34:89:f0:bb:a7:ea:4c:a2:4d:65:58:12:23:66:
ca:45:f6:79:c5:1d:c3:d0:bc:59:72:58:f5:56:fa:8d:4d:1c:
46:6b:0f:b5:2f:fd:fc:9d:1d:7e:c8:1f:74:f2:c7:c0:f0:73:
71:5b:bf:0c:c8:c4:2a:b9:fb:46:d9:1e:74:3c:86:68:50:81:
2d:d5:bb:ed:1a:79:04:ad:2a:27:12:ea:a3:a8:c4:ef:82:46:
fc:b2:8a:7d:a1:df:53:73:ae:64:56:e4:b1:d4:e0:52:1e:0d:
b2:60:0c:1d:93:29:0b:c2:a5:06:d3:83:92:86:2d:58:ad:65:
c2:ec:ef:8b:db:cf:48:6b:ef:4a:0b:1a:e4:5f:0b:bb:ac:6b:
6b:61:58:76:99:45:aa:4f:2e:e5:da:f1:07:d4:d0:ee:ab:9e:
f6:98:95:22:52:04:61:64:64:39:5b:c5:78:cd:af:07:ba:cd:
6a:1e:58:78:3e:7c:07:7c:71:63:64:00:9c:97:21:96:85:e1:
a5:e7:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:42:39 2025 by rpki-client