Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier: xPskE33GjKYzGEKcQgbDSWU5GZ39WBzgfK8cd/spOP8=
Subject key identifier: AC:47:A0:9F:88:EE:78:85:92:01:0C:0F:02:1B:FB:E4:10:65:F8:EC
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial: 01974E2046FF6AF83BC6CE273050999EE767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number: 09E0
Signing time: Sun 08 Jun 2025 06:00:27 +0000
Manifest this update: Sun 08 Jun 2025 06:00:27 +0000
Manifest next update: Mon 09 Jun 2025 06:00:27 +0000
Files and hashes: 1: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: Xs7e8Q0Jp6ip+FXRecu1Gp7tRAqvDqKnkkdccD0ZKbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:46:ff:6a:f8:3b:c6:ce:27:30:50:99:9e:e7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Validity
Not Before: Jun 8 06:00:27 2025 GMT
Not After : Jun 9 06:00:27 2025 GMT
Subject: CN=ac47a09f88ee788592010c0f021bfbe41065f8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:b6:f0:57:86:f9:44:26:65:0b:dc:73:84:
db:96:68:92:a2:fb:85:59:41:2e:07:fa:71:87:8a:
6d:20:33:c2:86:14:c0:47:3d:e8:bf:a2:4f:05:13:
29:e6:5a:6d:2a:37:dd:50:e0:89:58:c3:12:71:5c:
46:57:31:8e:20:89:79:d0:e9:ea:1a:be:91:a3:b4:
02:d2:24:bb:0c:fd:c8:7f:91:88:78:73:71:a5:0d:
50:7d:87:f3:48:6c:0c:4f:58:ba:f4:b1:ff:2f:61:
d4:da:c8:cc:29:5c:e5:75:9d:6d:0a:28:a3:ae:47:
04:3c:1e:6a:c1:e2:ff:13:a3:59:ff:4b:45:9a:2f:
90:8b:a0:90:9a:d7:c6:3b:18:42:e1:8c:c2:01:9d:
c3:5b:84:cf:13:48:83:c5:83:8e:4a:a4:74:ad:34:
5a:7c:7d:c9:48:ae:80:e6:54:54:77:69:7c:74:3a:
68:85:f0:fe:75:b4:8f:6a:b8:9e:18:73:4a:bd:3c:
09:fd:ed:31:a1:c7:e2:2b:d5:7a:8f:50:e6:39:36:
75:5f:b6:80:2c:19:08:31:b4:40:7b:c0:36:9a:c7:
68:70:d6:69:a4:a5:59:d0:62:6a:f0:7c:33:e3:05:
b7:87:98:2d:da:b8:ec:cc:63:77:03:82:10:7c:a3:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:47:A0:9F:88:EE:78:85:92:01:0C:0F:02:1B:FB:E4:10:65:F8:EC
X509v3 Authority Key Identifier:
keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8c:5c:6b:a4:a2:ab:8a:4b:93:d8:f9:44:97:10:04:cd:23:
10:79:06:12:f4:bb:90:18:eb:5a:16:18:52:d0:05:e5:68:76:
08:80:02:1d:0f:f3:3c:ae:cc:ad:e2:e8:be:b7:99:bf:48:13:
e7:86:b8:a2:07:60:c9:d0:4a:a3:dd:ef:e5:69:8a:d3:02:62:
ce:c8:58:de:9d:85:0b:03:d5:d0:8a:ac:f4:c3:54:59:17:12:
3c:30:05:cf:17:19:f6:6d:5e:ad:52:5c:d6:5e:5a:6e:d5:ff:
56:9f:be:e3:af:db:d0:bc:8f:41:e0:76:b4:fd:17:78:58:03:
40:8d:cd:df:ef:24:f6:f2:48:a1:3d:d6:83:e2:33:03:43:4b:
1e:f3:4f:42:38:fb:92:16:1b:a9:fb:da:06:c9:ac:69:64:28:
1a:0e:a9:0b:e7:76:ac:be:a2:5f:87:d1:8e:45:d4:0a:41:a3:
25:a5:a7:fa:70:8c:b7:7e:b6:3b:ff:27:32:eb:bb:7d:58:82:
82:6a:9e:9a:89:32:2c:21:cb:d2:de:33:b4:dc:50:8d:9c:85:
e4:4d:89:6c:a0:ab:92:18:1c:55:fa:bb:b9:de:24:54:30:f9:
dd:44:79:59:9a:55:e9:ce:5d:b8:4d:a9:72:48:29:81:ab:d0:
7e:d1:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:02:37 2025 by rpki-client