Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c24cbe-3375-44c3-ba63-c964220bae80/1/XN8wGsAVJtCM3sJCzFoUAUH7FT0.mft
File: XN8wGsAVJtCM3sJCzFoUAUH7FT0.mft (raw, json)
Hash identifier: G2CWH+exSoiqpSYahIUdsLiuhhYb9/LENQW1KZCGbK0=
Subject key identifier: 17:B9:81:0B:9D:DC:49:C1:F1:E6:E0:95:76:DC:90:00:D5:66:80:DD
Authority key identifier: 5C:DF:30:1A:C0:15:26:D0:8C:DE:C2:42:CC:5A:14:01:41:FB:15:3D
Certificate issuer: /CN=5cdf301ac01526d08cdec242cc5a140141fb153d
Certificate serial: 01976EBDD3BD77CF200F5867D163300D366F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN8wGsAVJtCM3sJCzFoUAUH7FT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c24cbe-3375-44c3-ba63-c964220bae80/1/XN8wGsAVJtCM3sJCzFoUAUH7FT0.mft
Manifest number: 01B4
Signing time: Sat 14 Jun 2025 14:00:23 +0000
Manifest this update: Sat 14 Jun 2025 14:00:23 +0000
Manifest next update: Sun 15 Jun 2025 14:00:23 +0000
Files and hashes: 1: XN8wGsAVJtCM3sJCzFoUAUH7FT0.crl (hash: Gf8g3JKiIKitbj3rBAIxFeEkTYsRLp01SuthZQsXbH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c24cbe-3375-44c3-ba63-c964220bae80/1/XN8wGsAVJtCM3sJCzFoUAUH7FT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c24cbe-3375-44c3-ba63-c964220bae80/1/XN8wGsAVJtCM3sJCzFoUAUH7FT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN8wGsAVJtCM3sJCzFoUAUH7FT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:d3:bd:77:cf:20:0f:58:67:d1:63:30:0d:36:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdf301ac01526d08cdec242cc5a140141fb153d
Validity
Not Before: Jun 14 14:00:23 2025 GMT
Not After : Jun 15 14:00:23 2025 GMT
Subject: CN=17b9810b9ddc49c1f1e6e09576dc9000d56680dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:d5:d4:7d:65:66:12:f6:ae:b8:2f:99:c8:
31:30:e6:94:ba:74:f2:6c:77:a8:56:75:81:3c:8e:
e6:ff:0a:b2:d5:6b:23:65:39:63:09:78:3a:83:f9:
18:45:80:ce:04:d9:da:3e:9d:7b:45:ca:50:94:f3:
87:a3:00:a8:c0:72:92:61:bb:26:2e:64:ae:97:7e:
74:87:8b:40:97:4d:a5:b8:48:bc:92:b3:18:d6:22:
cb:3a:e6:7b:1d:8d:bd:a9:7c:b7:d6:ac:9e:1d:5d:
d7:94:07:b4:0a:51:ce:15:a9:c7:b9:9c:fc:13:55:
c5:0d:10:d5:c6:0b:d3:95:70:42:f5:bb:dc:61:6b:
50:d7:33:0d:ce:d4:47:ae:85:3c:ef:8e:5c:82:7c:
48:d8:c1:0a:08:dc:23:d0:32:4e:62:1f:c8:1e:8f:
48:04:55:5b:58:c8:4d:7a:45:dc:a7:f3:27:21:32:
eb:46:7d:cf:87:75:56:96:b7:9c:35:40:f6:93:15:
12:d0:81:ee:2c:03:eb:ea:8d:17:5c:30:d1:a6:29:
de:36:b9:8a:ff:00:4f:9a:53:8b:66:23:e9:4e:de:
4a:44:57:23:17:3d:71:e9:73:e5:eb:6b:eb:7d:0b:
1d:b4:b2:41:7d:af:46:64:4b:d0:63:6f:62:59:81:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B9:81:0B:9D:DC:49:C1:F1:E6:E0:95:76:DC:90:00:D5:66:80:DD
X509v3 Authority Key Identifier:
keyid:5C:DF:30:1A:C0:15:26:D0:8C:DE:C2:42:CC:5A:14:01:41:FB:15:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN8wGsAVJtCM3sJCzFoUAUH7FT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c24cbe-3375-44c3-ba63-c964220bae80/1/XN8wGsAVJtCM3sJCzFoUAUH7FT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c24cbe-3375-44c3-ba63-c964220bae80/1/XN8wGsAVJtCM3sJCzFoUAUH7FT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:25:7b:3c:e9:6c:de:0c:1c:a4:80:b3:07:1d:97:17:66:87:
ca:1a:07:44:eb:c4:9d:7b:e4:1c:7d:a9:a6:ce:26:1c:49:46:
26:1c:0e:80:de:29:a6:68:fc:bb:48:9d:61:bf:b9:0f:01:53:
8e:de:9f:d1:6e:37:6a:81:06:a1:37:1d:ae:28:18:2d:5f:42:
5e:60:f0:6e:7d:b0:da:ca:5a:1c:09:98:a7:9e:39:cf:a2:9b:
22:00:d4:83:c1:1e:c7:31:f2:34:49:96:04:a7:1f:39:15:6f:
88:90:fe:d4:84:a6:7b:fd:bf:d6:55:3c:0b:ef:79:28:26:70:
9b:4e:23:00:e3:03:ad:c7:0a:2f:5c:41:58:0d:c9:61:05:fa:
62:6b:c6:7d:e6:6e:f7:7f:f8:34:29:fd:7c:4c:71:fb:78:2a:
9e:56:d5:97:14:6a:f2:6b:db:4a:aa:82:bd:75:22:56:1f:7a:
37:a7:02:64:17:3e:b1:3c:e8:0e:85:0e:6f:98:ee:d7:18:f0:
87:96:03:21:01:82:f1:e0:3b:10:7c:f1:77:7d:5e:a3:2e:bb:
32:06:55:eb:20:18:2a:b5:e6:64:36:00:31:23:fa:e5:25:7e:
d1:43:42:31:bf:e4:a5:aa:95:83:d7:fd:fa:60:8f:5a:c9:6a:
92:e4:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:37 2025 by rpki-client