Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
File: mdXL9__sUlSnHvex7fem12x1liU.mft (raw, json)
Hash identifier: n5sNzOd0CnF0SGBEVizdQwTxjLT+QxUQqQee0oXUX40=
Subject key identifier: 3A:1F:CD:A6:EC:4C:E2:84:CC:2B:75:9C:70:4F:BB:B5:45:A0:91:CB
Authority key identifier: 99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
Certificate issuer: /CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Certificate serial: 0197488CF1CF0638FE9F0A062C22CF12B31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 04:01:25 +0000
Manifest this update: Sat 07 Jun 2025 04:01:25 +0000
Manifest next update: Sun 08 Jun 2025 04:01:25 +0000
Files and hashes: 1: mdXL9__sUlSnHvex7fem12x1liU.crl (hash: DKwd01N9JvAkkbR+gJNJ5y0qf16GTqjY3zY4kmRgHEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:f1:cf:06:38:fe:9f:0a:06:2c:22:cf:12:b3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Validity
Not Before: Jun 7 04:01:25 2025 GMT
Not After : Jun 8 04:01:25 2025 GMT
Subject: CN=3a1fcda6ec4ce284cc2b759c704fbbb545a091cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:96:a4:e3:59:c0:86:fa:eb:53:65:5e:cf:
b8:ba:b9:c9:fd:5f:16:78:d5:58:74:81:a7:98:7e:
6e:1f:6a:a6:e4:b9:1b:d9:f7:e1:cf:38:c3:5b:47:
02:69:eb:bc:08:11:8b:e3:b7:5b:56:6d:dd:5a:0e:
ab:e9:b8:ae:df:ac:25:24:4d:55:31:1a:b3:30:58:
34:ae:7a:95:49:72:e6:f6:e0:24:d1:d5:91:f9:65:
a5:69:43:fb:92:bc:15:11:89:ae:0e:6e:0a:66:2a:
5d:e5:58:f3:90:a9:14:35:a7:70:b1:66:63:11:3d:
c0:dc:66:ac:08:4a:a8:b5:6a:97:6c:b3:2c:9f:64:
c2:9a:54:a5:63:b1:9d:34:20:28:3d:60:92:4b:58:
5a:a4:1d:31:e5:2f:10:cb:40:cd:75:19:55:28:3d:
55:09:05:8c:3d:91:94:48:14:c0:0b:ec:d1:8d:a7:
ba:49:11:a6:25:06:94:45:a1:1b:5c:30:0a:86:34:
d5:20:d1:49:3d:8c:c1:bd:b3:3d:0a:f3:b9:5e:7b:
2e:c1:39:14:d1:4d:bc:ed:ca:80:9c:86:4c:7b:64:
79:d1:c4:4b:1e:ad:3b:b8:01:0f:67:19:2e:f8:73:
c4:ec:6d:bc:2b:d7:26:7d:64:15:ee:53:7e:6b:85:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:CD:A6:EC:4C:E2:84:CC:2B:75:9C:70:4F:BB:B5:45:A0:91:CB
X509v3 Authority Key Identifier:
keyid:99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b4:e5:c2:79:a5:e5:dc:51:02:bf:f7:08:d7:0b:82:77:a9:
3c:31:5e:2d:3e:c6:0e:d5:96:a0:57:58:bd:1a:84:6b:b6:dc:
09:37:2b:b1:f6:a0:d8:f3:6a:81:2b:13:2d:e7:85:47:20:d8:
ea:be:cf:6e:30:49:7d:31:85:15:15:94:c3:71:bc:30:ea:5f:
81:f4:19:58:51:1d:ff:5a:12:4a:a2:54:59:10:5c:1d:4c:1c:
56:90:53:17:cb:54:ed:5b:df:01:8b:b5:ad:3e:87:b7:98:d4:
28:fc:aa:b4:20:7d:2d:30:48:00:00:3b:3c:a8:39:ad:42:91:
1c:66:62:3d:d4:39:84:45:fb:39:8e:e0:24:b7:e0:93:12:39:
21:f0:51:05:dd:06:bc:23:e1:67:0b:63:9d:ed:1f:e2:39:c1:
2f:dc:f0:a7:81:a5:45:12:d4:d7:c5:8e:3b:8a:94:36:d8:b9:
64:e0:0e:59:3c:40:93:9e:9d:88:c3:ee:7e:84:7d:9b:9c:b3:
c4:df:84:e3:90:58:aa:50:9b:ed:57:ab:3c:c2:f6:0e:34:59:
08:6d:72:71:a5:6d:c0:0a:f6:88:a9:47:c6:ce:ca:16:f7:2e:
89:18:bf:d7:75:89:25:39:55:4d:54:8f:8c:a6:e2:8f:a8:a9:
7d:e4:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:26 2025 by rpki-client