Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
File: mXZKyKibCft4hQ10xo4dqo8-KvE.mft (raw, json)
Hash identifier: Fs6Pzfegf6lg94wczNtQek2yO8oDiRI5NVhQIy4M9Ms=
Subject key identifier: 23:6E:E3:F5:CA:B0:67:7B:9C:6D:C4:B3:91:B7:35:80:36:5D:92:A7
Authority key identifier: 99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
Certificate issuer: /CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Certificate serial: 01974EC5A650CDA86C5C7CBDD7D0ECA76C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
Manifest number: 0792
Signing time: Sun 08 Jun 2025 09:01:05 +0000
Manifest this update: Sun 08 Jun 2025 09:01:05 +0000
Manifest next update: Mon 09 Jun 2025 09:01:05 +0000
Files and hashes: 1: mXZKyKibCft4hQ10xo4dqo8-KvE.crl (hash: pxAWCpTDSSWAK7Nlo1bdVtejzHujPWK5q8UgvSTsGUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:a6:50:cd:a8:6c:5c:7c:bd:d7:d0:ec:a7:6c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Validity
Not Before: Jun 8 09:01:05 2025 GMT
Not After : Jun 9 09:01:05 2025 GMT
Subject: CN=236ee3f5cab0677b9c6dc4b391b73580365d92a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:ad:f6:0a:3a:c6:63:24:91:4b:f1:46:aa:
db:f7:20:72:31:90:0f:68:e0:4f:a6:a6:c0:d7:50:
ae:09:f2:6d:79:18:2b:2d:c2:67:c3:c9:1d:d8:02:
22:57:5b:fa:8e:10:3b:dd:51:41:69:f6:2d:16:69:
69:16:c0:4b:3f:dd:d4:30:ce:a4:94:ec:cf:5d:8b:
d5:ca:c4:45:c0:7f:f9:64:a3:01:86:8b:98:2a:2b:
9b:d0:55:44:1a:5e:2d:7c:32:b2:54:f4:7f:5a:bd:
4d:af:fc:5a:34:0c:c0:1f:99:8d:66:fb:89:e4:14:
7c:a2:76:01:1a:a9:10:ef:e1:c9:c4:93:53:ec:cd:
37:b8:9f:bb:fc:ee:43:cc:0d:61:6c:e6:f9:90:c8:
3f:33:c5:38:bb:a7:b2:b1:a1:0b:29:b4:8e:1f:32:
78:de:4a:49:07:e9:63:a2:04:ad:a1:3c:66:f4:b9:
62:9f:c5:80:b7:4c:0b:8e:1a:61:85:08:a6:e2:2f:
11:f2:db:66:39:e5:ce:2b:19:2a:b9:49:aa:c6:47:
3e:c9:22:36:d6:e4:f8:8f:84:6d:f8:a0:83:60:45:
89:ce:95:ca:1e:0e:8f:a7:96:61:a3:87:8d:80:44:
da:90:1a:7a:da:6b:e7:60:6d:c7:9e:0a:99:8e:5f:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:E3:F5:CA:B0:67:7B:9C:6D:C4:B3:91:B7:35:80:36:5D:92:A7
X509v3 Authority Key Identifier:
keyid:99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bf:85:a9:dd:50:d5:d7:88:c9:2e:56:8b:fa:e1:2a:79:0f:
91:de:8e:f5:8c:8e:ee:76:d3:b8:b9:c9:8a:35:70:3f:0c:9f:
a5:33:3f:1b:31:51:97:b6:b6:03:b8:99:22:f5:0e:b1:06:88:
61:71:57:d5:d7:06:6f:29:bf:10:e4:95:08:8f:07:d2:d9:de:
80:25:87:0a:71:1d:db:67:89:52:78:cb:f2:df:85:0c:19:24:
cf:82:02:ff:3f:c1:4d:b9:5b:d0:3b:08:0b:c8:d2:b3:98:53:
c9:9b:45:96:4b:53:92:ef:bb:66:f1:70:44:ac:84:50:83:40:
8e:36:90:8b:67:0d:a0:03:94:0b:53:ae:83:18:06:b3:32:f4:
d1:e0:36:8e:3a:af:48:c3:5a:f4:5a:0d:6f:eb:23:68:bd:5f:
e4:55:8b:e9:25:9f:a4:cd:9a:06:96:3a:11:a2:91:af:aa:e7:
ce:f4:5a:5e:21:3c:23:3b:c2:ba:de:ed:6d:4e:6d:e5:5f:28:
a4:0e:40:b9:79:8f:f2:ec:64:1c:da:2c:3e:61:55:bc:e6:a3:
dd:ab:7c:99:ae:6c:1c:5b:3e:51:d5:55:74:5c:13:a4:3f:13:
0d:12:db:57:32:13:8d:0c:cc:0a:6f:02:aa:03:08:ab:cd:1e:
67:db:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:38 2025 by rpki-client