Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
File: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json)
Hash identifier: WB3XYOT6r08n16R68bOLG5zXt81d4MzG2j5vQ7J8QTI=
Subject key identifier: 1D:3C:00:8A:6D:43:FE:EA:2F:9D:BD:8B:A2:BE:63:9B:79:C6:4B:64
Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
Certificate issuer: /CN=c618f03f9874370653aa3a026f6707c2e0e74764
Certificate serial: 01974D44CC0F8938CFD71B7FB55957CC2583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
Manifest number: 0663
Signing time: Sun 08 Jun 2025 02:00:43 +0000
Manifest this update: Sun 08 Jun 2025 02:00:43 +0000
Manifest next update: Mon 09 Jun 2025 02:00:43 +0000
Files and hashes: 1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: CFB8zzlY9AUWU9VReJIr11LQxIoEfG7bao6NVJCjgks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:cc:0f:89:38:cf:d7:1b:7f:b5:59:57:cc:25:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764
Validity
Not Before: Jun 8 02:00:43 2025 GMT
Not After : Jun 9 02:00:43 2025 GMT
Subject: CN=1d3c008a6d43feea2f9dbd8ba2be639b79c64b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:8d:4e:b4:45:01:73:0d:8d:6d:56:61:28:
39:68:a6:65:6c:98:89:83:40:a8:22:96:95:c4:05:
d3:b1:1b:f1:cb:84:8e:96:95:98:88:78:0e:66:00:
7c:cf:48:78:14:bd:3e:2f:80:44:b8:92:d5:3b:0b:
7b:8b:ee:33:c8:ad:c8:40:ba:33:07:f3:7e:9e:6e:
79:88:5e:c2:27:fb:68:70:ae:c7:2f:ec:83:61:66:
5d:9e:3e:88:f8:f7:6c:3c:67:49:32:d4:93:3c:12:
4e:cc:17:16:e0:68:8d:11:97:0d:09:d0:d9:a7:ec:
26:21:8b:f9:65:80:09:89:98:df:ad:a2:ea:23:58:
2c:ec:e9:8c:95:84:45:53:e9:2c:b3:d9:ac:9b:9d:
7e:a3:de:7a:b0:56:b9:eb:70:dc:89:8d:b6:24:d0:
ef:44:bd:59:72:4e:36:be:06:53:4a:e0:97:d9:16:
3e:5a:40:93:b7:7d:b3:af:b5:73:f1:53:84:52:f3:
6a:28:18:5a:e3:01:46:1b:ed:ce:58:72:12:17:3c:
1c:ce:fb:e2:72:e3:8c:54:81:7f:29:1c:57:af:4d:
30:8d:9b:89:46:0c:59:d2:55:8f:3b:01:b9:05:32:
64:7c:c1:4a:f9:b6:7f:80:48:61:e8:c4:cc:7a:46:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:00:8A:6D:43:FE:EA:2F:9D:BD:8B:A2:BE:63:9B:79:C6:4B:64
X509v3 Authority Key Identifier:
keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b0:96:47:20:c5:52:50:05:0a:a5:88:f5:30:41:66:9b:8d:
d1:f0:8f:97:d9:3d:9a:28:98:ec:51:f9:06:cd:9a:3b:d5:e8:
28:20:56:4a:16:c8:95:ae:70:71:50:56:48:dd:44:4d:98:93:
e0:0d:0c:b6:24:4e:f8:26:c7:02:e8:9a:1c:dd:bb:1f:6c:cf:
a3:18:9e:89:e8:95:93:69:55:a5:7b:1b:2e:51:b6:ea:78:d5:
c7:f8:53:b9:e0:85:cb:03:08:ef:32:a3:35:25:94:09:e7:52:
5c:0b:62:93:f8:5a:5a:c8:ed:e0:e5:24:74:2c:8f:98:d6:42:
f7:c8:76:20:ad:ef:3d:5b:5d:10:83:d8:04:40:ea:7a:ef:d2:
11:d8:c5:9d:a2:b5:ec:f9:9f:19:9c:7b:36:f5:a5:b1:04:76:
7f:6f:c4:0c:91:0c:3d:b2:bc:f3:29:1e:89:1c:98:61:dd:76:
39:96:1a:f8:b4:d3:b4:61:11:ea:ef:61:46:e6:da:50:9b:a2:
22:1a:7d:d6:19:58:cf:bc:0c:94:95:a3:47:e7:85:20:e3:d2:
0b:e8:34:b8:de:9f:ad:e1:0b:8b:eb:53:07:30:94:73:9e:83:
4c:b7:7b:9c:05:ea:53:bd:e7:41:6a:cc:15:05:fe:99:16:d3:
12:3b:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:14:13 2025 by rpki-client