Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
File: xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft (raw, json)
Hash identifier: ZliQBh/gwQM1ZqPnWJeMW5hC6L4bX3FLx4l74QDxuxI=
Subject key identifier: 17:28:67:EA:5D:43:1F:4A:D7:E5:F4:22:EF:6D:F3:EF:40:3A:2F:0D
Authority key identifier: C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0
Certificate issuer: /CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0
Certificate serial: 0197C048E6C464D0E95A3A669ED5B9312E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
Manifest number: 15B7
Signing time: Mon 30 Jun 2025 10:01:32 +0000
Manifest this update: Mon 30 Jun 2025 10:01:32 +0000
Manifest next update: Tue 01 Jul 2025 10:01:32 +0000
Files and hashes: 1: xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl (hash: CxCPmpz+SKeHaXbADwvqAnyNFQSyF4hoUKHAe9kYQJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:e6:c4:64:d0:e9:5a:3a:66:9e:d5:b9:31:2e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0
Validity
Not Before: Jun 30 10:01:32 2025 GMT
Not After : Jul 1 10:01:32 2025 GMT
Subject: CN=172867ea5d431f4ad7e5f422ef6df3ef403a2f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:ab:dd:e9:ec:3f:4c:cf:28:37:df:b6:12:
81:3c:ee:59:e9:3c:30:fd:0a:15:64:06:81:ba:69:
ae:34:d2:97:37:bc:b0:fc:b7:46:7e:93:fd:f6:c3:
80:76:af:3e:e9:d8:7b:d6:88:2b:0f:7b:da:9d:41:
78:7b:d6:d9:30:af:1b:5e:eb:eb:41:c3:ec:b8:33:
75:39:29:5a:13:fb:9b:46:1e:59:3c:5a:d2:eb:a5:
98:b3:cb:4f:c2:9e:86:d5:fb:c9:4f:1e:e1:dc:70:
16:8a:f6:2f:81:29:2e:91:c8:b2:b2:a5:27:1b:1e:
34:5d:4d:0d:5f:80:4b:dc:b8:fd:bf:cf:76:e3:78:
f3:3c:f1:11:9d:f4:38:8f:f9:4c:58:57:c2:c3:d7:
63:70:4b:b4:09:34:0e:72:0b:8c:59:12:6a:35:9c:
ea:06:fe:5c:d2:0f:86:02:9d:95:e5:0f:f4:f2:25:
33:46:e3:b9:96:12:84:be:35:a6:87:13:6c:9e:f0:
29:93:1a:bd:10:48:4d:7e:8b:a9:cd:eb:ce:59:9c:
16:9c:04:e4:00:50:42:65:dc:60:11:8a:7b:ba:1d:
22:c2:dc:9f:b3:e4:a8:bd:87:b3:42:36:1c:b2:4e:
53:ed:0d:67:7d:40:a0:5a:fe:91:7c:52:e4:4b:d3:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:28:67:EA:5D:43:1F:4A:D7:E5:F4:22:EF:6D:F3:EF:40:3A:2F:0D
X509v3 Authority Key Identifier:
keyid:C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9b:a0:ad:44:8f:c7:bd:5b:d6:69:e0:1d:a3:85:da:14:56:
32:7a:e3:74:1b:5a:e7:2b:d1:82:6a:60:b4:86:30:f3:94:f9:
0f:2c:bd:44:20:f9:97:33:78:01:c9:1f:de:40:0b:41:f8:b0:
82:6a:35:96:3c:dd:17:5e:66:9f:f6:af:65:64:7e:78:78:4b:
96:14:20:d4:55:10:62:ff:f1:a9:04:75:1f:97:37:e1:e8:c6:
68:59:fa:4d:f4:60:37:2b:9c:22:96:2a:18:81:44:15:ba:09:
82:94:fc:01:26:4a:bf:6c:6e:f5:9d:15:7c:36:28:34:ed:12:
34:c0:ea:6f:92:b5:9d:5b:5e:69:72:db:d6:58:f5:b6:6b:7f:
7a:5f:4e:63:5a:d7:b8:dd:fb:9a:2b:e6:bd:0e:9b:a2:44:91:
2b:97:48:f5:3e:62:9e:31:1f:24:c7:22:12:c8:4d:22:b5:43:
ed:f2:56:dc:a2:b5:1e:5c:6c:41:64:bc:35:f2:4a:bf:01:b4:
32:d9:52:09:4c:13:bb:b1:b2:14:0c:b3:57:51:99:d2:dd:32:
4a:94:0a:27:05:0f:53:6e:73:14:5c:fe:44:4d:43:de:2f:f9:
1d:69:ac:58:97:d2:22:b9:23:48:2f:4b:37:5e:f4:49:4b:18:
24:a5:89:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:23:28 2025 by rpki-client