Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
File: XZOOJrKYSy-hYarAewS9uFCq3RY.mft (raw, json)
Hash identifier: ZVwAvZ276xDgdaB84COBSNrr59W32HpDw1xc4sPPUxg=
Subject key identifier: 88:5E:17:33:F5:B1:1E:20:27:D8:32:5F:56:F9:C1:62:7B:9E:D9:DD
Authority key identifier: 5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
Certificate issuer: /CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Certificate serial: 0197B77C30528F9913750FD804CAECA1F928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
Manifest number: 099B
Signing time: Sat 28 Jun 2025 17:00:58 +0000
Manifest this update: Sat 28 Jun 2025 17:00:58 +0000
Manifest next update: Sun 29 Jun 2025 17:00:58 +0000
Files and hashes: 1: XZOOJrKYSy-hYarAewS9uFCq3RY.crl (hash: BMzOcfv0dDn6QHz5L5k6Hw9N350VSm0xeZ1bW1W7Wi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:30:52:8f:99:13:75:0f:d8:04:ca:ec:a1:f9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Validity
Not Before: Jun 28 17:00:58 2025 GMT
Not After : Jun 29 17:00:58 2025 GMT
Subject: CN=885e1733f5b11e2027d8325f56f9c1627b9ed9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:64:d9:dd:1b:6c:c4:1d:76:07:e8:61:5f:
7e:3d:e6:34:e3:ba:80:bc:df:06:ef:9b:98:57:36:
7c:7c:56:ad:23:11:44:3f:8e:d3:49:e8:3b:7c:6b:
d6:fa:b2:31:20:07:b9:73:23:3d:30:4f:d4:0a:c1:
4f:db:b6:73:9b:68:92:6d:0e:9f:58:40:3a:e4:ee:
ba:6e:3a:3e:bb:25:cb:ef:b7:b1:85:1c:4e:1f:3f:
26:21:8b:99:0f:57:7c:a0:e6:7e:aa:b3:00:b3:8f:
f3:93:a3:b8:88:0f:fa:70:bc:ea:c5:3c:74:fb:51:
bc:b9:93:27:0d:31:16:fb:4b:d9:1f:a7:77:fd:e1:
9b:c6:a2:83:3d:34:54:04:1d:d1:fc:54:d3:f1:e8:
37:34:be:eb:e7:c2:73:97:c2:28:c0:4e:a9:55:ab:
30:d2:8a:f0:33:60:fc:71:01:72:a8:df:e0:f7:db:
15:04:3e:47:d0:87:56:e4:ea:fb:97:0c:ab:60:c9:
be:63:5a:d7:91:c9:b4:25:96:fa:20:58:76:c1:09:
14:4d:2d:dd:7e:31:62:73:67:c1:1b:a0:0f:1e:3c:
d6:77:10:93:89:9b:cc:f6:78:74:46:32:bc:d0:ec:
34:c4:1c:39:e9:d0:50:e2:82:57:0e:ce:3a:5f:a9:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5E:17:33:F5:B1:1E:20:27:D8:32:5F:56:F9:C1:62:7B:9E:D9:DD
X509v3 Authority Key Identifier:
keyid:5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:96:97:98:fb:19:57:34:7a:12:89:d7:61:81:d1:6f:2d:52:
de:5b:d7:25:7e:a1:3b:58:37:75:0d:63:5c:96:1d:20:0d:bf:
ac:d3:16:21:a2:72:a2:6f:60:b1:7c:9f:7e:c5:d6:55:7a:ee:
44:b9:c5:57:96:10:3b:76:37:a2:04:dc:0b:aa:61:bd:d1:81:
7f:46:4a:1f:53:d2:17:4b:b8:7f:de:60:25:9c:d0:86:74:77:
37:e4:7f:4b:10:a6:e6:9a:82:e7:30:45:00:44:55:05:0c:0a:
c0:42:3f:df:f5:5e:31:67:4c:b3:c7:ad:0f:14:ad:e5:7d:89:
7c:47:6f:a1:b4:83:15:3c:20:83:33:0d:4c:28:a9:a8:0b:9b:
df:c8:7f:65:16:c1:7a:20:bc:05:07:de:52:c5:5e:c9:20:c7:
61:d3:00:75:93:5c:f7:78:ab:f4:b7:a1:b6:2e:80:26:cf:98:
bf:08:d8:ce:f6:25:2f:83:77:e5:f4:be:0b:4c:7c:29:9c:42:
75:23:17:f0:c7:ff:a9:06:7b:c0:88:34:5b:65:23:b9:2a:35:
b5:8b:c6:d2:a2:b9:8d:49:89:4c:e6:ef:bc:66:cb:b2:8c:a4:
b0:1f:1c:1a:c5:31:4b:ab:45:db:52:23:42:8a:bf:8e:a4:31:
81:fd:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:44 2025 by rpki-client