Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: L4XNvoeUl8KcmkeqC3H3Ip9jqGC7FeZwRBZb4Onf784=
Subject key identifier: 54:52:F2:14:B4:6F:6E:3B:54:2C:07:C3:3C:F6:E8:E2:DB:30:54:09
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 01974DB26118F1F3F6BAE2BA7F30E67829EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 146E
Signing time: Sun 08 Jun 2025 04:00:25 +0000
Manifest this update: Sun 08 Jun 2025 04:00:25 +0000
Manifest next update: Mon 09 Jun 2025 04:00:25 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: xs2qW3yZGBP1G6/TyxnUqvufeU98e+6ppJ2bstovlHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:61:18:f1:f3:f6:ba:e2:ba:7f:30:e6:78:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Jun 8 04:00:25 2025 GMT
Not After : Jun 9 04:00:25 2025 GMT
Subject: CN=5452f214b46f6e3b542c07c33cf6e8e2db305409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:b8:18:fd:05:3d:36:76:9a:cc:cb:22:d1:
47:c1:53:72:0a:79:e2:23:b4:83:b4:80:fd:21:a1:
3c:06:a7:89:b3:a2:fd:40:a1:d2:de:0b:2e:56:8d:
a4:50:3b:ce:0d:c0:ad:2f:79:5e:0b:fb:a3:b9:5a:
08:3e:08:bb:7e:d3:a1:9b:4a:62:32:ad:1d:25:14:
21:73:96:f5:29:74:a1:15:7d:2b:0f:33:62:9d:f3:
5e:64:6e:69:41:ec:25:19:6e:ec:ad:e6:aa:d3:42:
e2:3d:0c:8d:2e:99:92:40:c5:3a:7e:81:28:21:20:
9b:61:46:cb:fd:b3:50:06:6a:ca:44:e0:af:6d:1d:
39:60:2b:b2:b7:ea:58:24:b9:3b:9f:39:a5:10:a0:
1c:f3:d6:cd:c1:33:4d:1c:1b:44:43:a5:67:69:dd:
f3:36:b6:0c:aa:c2:6d:76:d4:06:3d:e7:bd:dd:f9:
e2:73:5d:20:df:3f:7d:6a:cc:94:a5:e4:9d:c7:5b:
8b:d9:8b:c2:80:e0:02:28:84:74:b3:55:d3:e1:07:
da:61:c0:d4:a3:bf:a9:45:fe:6a:e6:99:1f:dd:3a:
a2:4a:94:53:40:c4:3f:6a:26:e1:f6:dc:c7:03:68:
1f:5a:a9:08:b0:aa:15:69:92:5f:7d:a2:db:7c:cb:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:52:F2:14:B4:6F:6E:3B:54:2C:07:C3:3C:F6:E8:E2:DB:30:54:09
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e2:94:4b:bf:3d:ef:92:01:7f:cf:f6:a2:10:c5:17:c5:e6:
f6:3a:ac:74:76:cb:0d:16:b6:d7:6a:e4:e3:cc:59:41:07:04:
c9:1e:b5:e8:94:ff:79:31:f7:0f:b1:b4:e5:f3:8c:fe:6c:be:
e6:91:a8:b4:fe:67:b6:2c:fd:47:60:1d:5b:35:53:7a:3a:e0:
8d:88:27:19:d7:4b:d2:f1:51:6f:49:25:91:07:b2:08:87:30:
0b:ea:2c:8a:b2:14:ed:ea:46:bf:ea:3a:70:ff:a3:ab:1d:4a:
44:c8:d9:45:f1:6b:de:0d:bf:81:9d:66:f3:b6:fa:74:44:1d:
30:b2:bf:4a:b7:70:96:98:bd:66:0a:9f:0f:04:21:19:c0:b9:
4c:96:0d:76:3a:23:e5:d7:a2:9f:20:2f:4e:60:12:19:64:be:
15:9e:eb:e4:07:64:23:0f:04:ab:cd:42:5a:4e:50:0d:fa:f3:
c7:af:76:33:d1:f4:6c:aa:f9:5b:d7:21:44:4b:22:db:6f:92:
85:50:c7:d4:1a:09:4f:07:e9:e8:81:04:43:2c:56:ee:b3:5a:
1d:bd:fd:25:9d:2b:ec:3d:01:0c:20:81:5a:2e:74:e3:10:30:
47:0a:21:5f:d0:32:d7:69:6d:9b:e2:86:66:57:1e:58:98:45:
bc:7a:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:51 2025 by rpki-client