Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
File: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft (raw, json)
Hash identifier: 2IxeRH9lQcO4EuFJISrKF3pQbf7iUi98ow3WazUTtAY=
Subject key identifier: 7F:46:63:6B:CD:C7:87:AC:C5:46:28:A6:8E:FD:1C:32:37:9D:45:EF
Authority key identifier: 5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D
Certificate issuer: /CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d
Certificate serial: 0197B5C4A82883BADF495F150E90F0F28320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
Manifest number: B3
Signing time: Sat 28 Jun 2025 09:00:53 +0000
Manifest this update: Sat 28 Jun 2025 09:00:53 +0000
Manifest next update: Sun 29 Jun 2025 09:00:53 +0000
Files and hashes: 1: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl (hash: kkTa9/kn6w6N3gAFFjglYiQEVcNnUKauSJ4AYLR3UAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:a8:28:83:ba:df:49:5f:15:0e:90:f0:f2:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d
Validity
Not Before: Jun 28 09:00:53 2025 GMT
Not After : Jun 29 09:00:53 2025 GMT
Subject: CN=7f46636bcdc787acc54628a68efd1c32379d45ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:7e:f2:c6:95:9c:94:d3:15:86:bc:f8:6c:
28:53:9d:2e:73:33:6e:7f:be:89:12:be:04:9f:81:
1b:57:44:6c:27:7d:be:57:33:c0:5d:66:24:5e:e8:
9d:f2:69:29:46:56:cd:74:12:d5:fb:d7:96:01:b5:
11:d4:19:c4:cd:ce:e5:58:c5:bb:a4:ff:75:9c:5e:
58:0d:fe:be:bb:07:85:f5:b0:b5:83:00:03:14:61:
46:77:45:94:d2:f8:84:7a:02:cc:dc:15:05:af:03:
f6:6c:52:1e:e7:ce:2f:ea:c5:f6:88:b0:b4:0e:4c:
7a:13:c3:3d:65:3d:cd:26:5c:dd:48:e0:02:c6:12:
d1:87:b7:e3:0f:da:94:12:f1:f7:ab:f1:ec:b0:08:
92:ee:1a:ab:bf:8a:e3:8f:27:f7:19:96:f4:69:05:
19:ec:26:2e:8a:c4:d5:70:02:b5:31:57:36:54:50:
e2:c0:7e:ee:00:01:5d:5a:3b:d2:14:37:7d:b3:ae:
35:95:e9:a8:16:03:6b:3c:28:e7:0d:28:c2:75:cb:
ca:79:a2:e2:e6:66:28:f1:54:17:89:2a:42:73:e5:
67:a7:4b:8b:46:b9:29:55:42:2b:cf:6c:d3:32:c9:
f1:32:65:c6:f4:35:3f:69:15:8c:fc:90:01:c0:df:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:46:63:6B:CD:C7:87:AC:C5:46:28:A6:8E:FD:1C:32:37:9D:45:EF
X509v3 Authority Key Identifier:
keyid:5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2c:5b:eb:ec:f1:50:c2:52:5e:7e:c1:71:15:b5:bf:ce:75:
94:23:a9:2b:62:bb:c3:54:2a:b4:58:8d:03:ad:8f:57:a2:ec:
e8:95:d3:53:37:47:5e:37:b1:7f:9c:ec:75:d2:aa:10:12:73:
6b:f8:65:97:18:40:13:8e:64:39:cf:d2:0d:f4:21:93:83:ec:
1c:32:da:8d:7e:b8:4a:47:12:5e:9f:15:78:af:d7:88:57:00:
7f:52:14:c4:25:0f:80:c4:f8:74:cb:9c:61:36:df:11:c0:35:
3c:39:65:7e:7e:61:16:ef:dd:e4:c7:96:da:9e:49:bd:4b:ca:
f2:72:95:8c:11:30:2f:c0:a4:19:64:a4:5e:e8:ac:44:98:0c:
7e:18:29:a9:19:06:0a:d4:ae:51:26:e6:96:6c:90:17:63:46:
4d:1f:0d:25:a1:df:1e:90:01:57:2e:af:e3:8e:eb:4a:1b:c9:
55:96:10:ea:fa:bb:98:94:ac:4b:6f:94:77:fd:19:9d:ee:c9:
86:b3:92:f0:ba:d3:c4:9e:94:61:be:eb:1e:df:73:1d:ab:bb:
78:23:19:c8:58:b9:af:9c:3c:d6:fd:28:55:45:9e:c8:d3:9a:
94:94:bf:38:7d:7a:05:41:73:63:89:60:36:fd:17:eb:0d:42:
83:d8:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:12 2025 by rpki-client