Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
File: XJF3tPVOZX44dlbmc6-MDuCmCRc.mft (raw, json)
Hash identifier: 6mzdJhjLb00vj4URER/HXs2XXURE4hySGyoTMM9zBpk=
Subject key identifier: A3:69:24:A3:57:11:B4:7B:EA:36:CE:3E:07:AD:F9:C8:C2:48:51:8E
Authority key identifier: 5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
Certificate issuer: /CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Certificate serial: 019748F9C69181C31E329737AC8C80995D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
Manifest number: 0123
Signing time: Sat 07 Jun 2025 06:00:18 +0000
Manifest this update: Sat 07 Jun 2025 06:00:18 +0000
Manifest next update: Sun 08 Jun 2025 06:00:18 +0000
Files and hashes: 1: XJF3tPVOZX44dlbmc6-MDuCmCRc.crl (hash: SJjUQZwzKA9uiLb2q7fW8R78ocxaOy0bDyQH59pGCVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:c6:91:81:c3:1e:32:97:37:ac:8c:80:99:5d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Validity
Not Before: Jun 7 06:00:18 2025 GMT
Not After : Jun 8 06:00:18 2025 GMT
Subject: CN=a36924a35711b47bea36ce3e07adf9c8c248518e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:ba:aa:54:94:e7:32:d6:6a:08:5d:ee:cf:
ac:1d:7d:a1:a4:da:40:d0:ce:e7:6f:26:4a:6a:8a:
dd:3b:26:e4:68:3a:17:7d:48:a6:2a:84:98:2c:ec:
d1:ce:55:8b:5f:cd:27:74:9e:dd:15:3d:b8:4f:d0:
17:82:61:d3:17:13:ec:45:48:12:3a:10:ed:ad:4d:
9d:2c:a5:7a:d4:59:52:8e:19:f2:99:ce:e1:da:fa:
39:63:50:49:a6:14:82:bf:b3:41:0d:7f:f5:3d:20:
30:f3:29:4f:b6:88:0d:b5:6c:35:26:05:d8:7f:68:
76:39:88:70:2b:7c:e8:39:3b:95:89:fc:26:17:f1:
09:39:8d:0d:57:cd:b3:f6:e1:fc:c8:a7:05:84:aa:
bc:c0:a7:ec:ea:d3:9f:0c:5e:36:83:ef:99:29:e9:
49:3a:7e:8d:02:9d:f7:b0:d4:45:8b:e3:ed:28:07:
78:d5:82:c4:30:dd:39:31:e1:af:2b:f6:34:85:ae:
98:94:73:04:33:d8:b9:9e:cc:10:44:96:04:24:ff:
33:d8:a5:c2:de:cd:62:b4:98:3f:67:3d:bb:81:75:
b8:4c:48:76:1e:20:79:57:1a:7e:62:3b:12:98:08:
9c:41:1c:18:f3:39:40:2e:5c:ea:fc:bc:c8:83:46:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:69:24:A3:57:11:B4:7B:EA:36:CE:3E:07:AD:F9:C8:C2:48:51:8E
X509v3 Authority Key Identifier:
keyid:5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:39:1a:7f:c7:5e:01:e9:20:65:f3:4c:a3:b6:51:99:98:60:
76:b8:50:6c:a3:78:a6:b5:78:b8:d3:07:e5:6b:9d:7c:e0:29:
98:9d:38:06:24:6e:82:6a:8f:4a:b1:f8:3c:17:ac:20:61:c5:
3d:dc:d1:92:da:97:c9:ff:61:28:a5:2e:dc:b3:fc:fb:87:74:
da:7e:97:02:43:cd:34:82:90:f5:8c:8a:ba:a9:88:b0:07:aa:
4c:4a:48:35:76:31:e0:ea:be:97:a1:87:e6:5c:34:46:75:79:
5d:57:02:9f:c9:f5:49:a5:62:e3:0e:20:34:60:e1:10:36:a8:
d9:a0:d9:4c:73:89:1a:70:a3:2e:76:b2:d4:33:8e:07:18:46:
6e:05:3f:ea:af:87:7a:4b:4b:24:d8:df:c4:dc:09:92:a8:3b:
28:cf:3e:fc:72:cc:cf:ce:a8:2b:0e:b9:03:fa:af:c3:38:10:
6a:03:b6:23:e3:55:39:12:1a:20:5c:97:2b:6b:17:c5:e1:10:
59:74:58:a7:23:80:77:ec:60:95:ac:0b:ad:12:cc:2e:90:b6:
23:92:dd:73:ed:28:3f:47:5d:45:81:f2:2a:94:7c:75:ac:b0:
84:73:c2:c8:d1:e7:99:71:fd:95:b8:77:6a:da:f8:0d:6f:4b:
d9:97:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:03:07 2025 by rpki-client