
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier: ZalgzyasEnOXw2F8lZezrTdQHvuKCgWIMiBp2GMq8Kw=
Subject key identifier: 74:B8:AD:6B:EB:1C:5E:4D:9C:D6:BE:A9:F9:7D:28:81:CD:42:28:22
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 01974AE8F58E2B7CD6B3E99B6E10A8425844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number: 054E
Signing time: Sat 07 Jun 2025 15:01:10 +0000
Manifest this update: Sat 07 Jun 2025 15:01:10 +0000
Manifest next update: Sun 08 Jun 2025 15:01:10 +0000
Files and hashes: 1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: Mlb0gH21EYUhNhOcbqDfmOvP8Dl9P1G0HILBTuRTcfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f5:8e:2b:7c:d6:b3:e9:9b:6e:10:a8:42:58:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Jun 7 15:01:10 2025 GMT
Not After : Jun 8 15:01:10 2025 GMT
Subject: CN=74b8ad6beb1c5e4d9cd6bea9f97d2881cd422822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:98:35:f6:17:18:c4:b7:f1:1f:41:69:de:
9f:00:d5:b4:85:36:64:c9:42:d1:ff:97:f1:82:84:
8a:ef:c0:88:c0:2b:90:ca:77:07:07:73:86:7c:45:
18:a6:30:83:61:ea:9f:58:46:7b:b2:e3:ab:3c:dc:
9e:53:19:e7:5d:75:91:d6:af:d8:65:b5:b6:f8:e1:
5f:47:f5:78:cd:99:d0:5f:ba:0f:bc:e4:df:1c:2b:
09:e2:8e:2e:44:eb:02:ef:70:5a:59:46:9d:c2:a5:
d6:b7:c0:ef:ad:b7:42:74:53:22:70:f6:7e:84:d0:
19:78:01:96:ea:6c:e7:a5:de:9b:71:86:2d:e7:fe:
a9:5c:88:98:41:58:c4:c4:ac:7e:55:03:e0:32:65:
3c:e4:7a:e9:30:91:5e:cd:f1:40:01:67:7e:a1:8b:
e6:4d:ea:77:f7:31:99:84:fb:5d:71:e3:68:65:f4:
60:b7:dd:c0:3a:04:7b:8d:0a:08:d4:74:84:7e:42:
0b:38:1f:ac:d3:82:24:f5:c0:ee:1d:50:31:d4:95:
8c:95:b4:52:35:07:6a:a1:5d:72:9b:5b:ab:62:f9:
4a:6b:9e:2d:2d:3f:5f:ca:41:15:6a:7b:28:31:7d:
7d:e1:c2:73:72:45:1f:83:0d:42:55:52:e6:a8:f3:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B8:AD:6B:EB:1C:5E:4D:9C:D6:BE:A9:F9:7D:28:81:CD:42:28:22
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:16:2c:d5:a8:b0:0f:ca:c8:2f:2b:55:b8:16:90:66:75:9a:
89:9b:b2:99:46:6d:be:69:01:ed:36:e6:b9:80:ca:e5:16:bd:
c9:e2:bb:b4:cb:e3:e6:82:7f:71:51:87:e8:b5:c3:df:6a:c2:
d3:c7:83:1d:92:27:eb:80:e2:fe:bb:1e:d4:40:86:5f:3d:6c:
5f:4b:d0:d2:22:11:d9:57:57:b6:44:11:a5:2c:39:3e:7f:a2:
23:75:a6:a8:8a:6e:3a:ed:3e:70:b4:17:01:6f:65:9e:4c:2a:
f5:1f:ac:75:2c:03:74:3d:6d:72:4f:17:f0:60:e0:09:c8:ed:
16:66:af:73:0f:de:4d:87:31:20:f4:ce:69:e2:f0:d8:b3:2b:
a3:9a:82:47:48:16:97:14:67:f3:9d:e7:de:f4:12:9d:2f:97:
83:8b:35:18:b3:48:fd:3e:f3:08:04:c9:86:96:52:a6:b7:45:
03:c8:59:fd:94:9f:a5:65:02:4a:5d:d1:bf:3f:36:f1:1f:a9:
b8:0e:59:a0:d5:a5:9c:70:6c:9f:4c:1a:48:a0:f1:9f:72:de:
ae:d6:84:aa:08:67:18:b4:51:3c:bc:14:08:2d:02:72:f1:75:
59:04:d2:fb:9b:48:13:82:8f:03:fb:fd:4e:00:5f:f9:ce:07:
fa:bc:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:51:49 2025 by rpki-client