Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: MPTvcBZCzyQAGuzpFQwz4NidrU3uUz9sc64PoOcpCvY=
Subject key identifier: 96:A8:5B:FA:24:70:A5:A5:CF:7D:81:EA:0C:D7:83:9A:B8:D5:0E:BC
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 0197B6A13500A988DB63AA1D9EC40E953813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 108E
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: 8GoSwVDheniqHA/Yqbz1dIwVe0GBns5L8X8AqRQkgMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:35:00:a9:88:db:63:aa:1d:9e:c4:0e:95:38:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=96a85bfa2470a5a5cf7d81ea0cd7839ab8d50ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:39:7b:0d:0d:38:72:5f:16:ac:68:2e:6c:87:
0b:5c:71:39:95:4e:5f:1e:8e:9d:ba:11:e5:ed:a0:
f0:07:06:fc:e5:91:2e:6c:9f:5a:28:6b:d7:80:e3:
99:fa:0f:41:3e:44:f5:c8:bc:84:59:76:d2:e3:0d:
38:2d:c6:04:15:6b:d4:84:2f:3e:67:13:c0:f1:62:
fd:4f:4a:d9:e0:99:39:34:e1:aa:08:8d:17:45:33:
ff:a2:d4:32:3f:58:46:17:35:b0:93:bf:f5:bf:ac:
2a:77:1e:82:11:29:0b:ee:d2:e8:f7:55:fd:11:2e:
ae:70:8d:9d:84:ed:88:26:66:39:c5:94:b0:3d:35:
54:35:54:3f:fa:0b:8d:47:dd:3d:0d:c2:7e:0b:7d:
88:67:3e:3e:c0:e3:8c:10:ae:95:bc:8d:26:9f:a2:
58:c0:71:fa:bc:f6:3a:46:42:04:54:0d:71:07:39:
f8:b6:f7:e5:38:c3:20:e5:96:6d:bb:dd:d8:16:14:
df:df:7f:3f:d6:0e:37:1c:cc:3e:9a:3d:c9:7a:91:
12:3d:48:21:36:d9:a1:14:f4:89:ae:40:a7:d4:b6:
db:ff:f8:02:00:78:6e:12:a2:be:00:08:ca:ac:1f:
5a:0b:6b:b5:00:1e:33:3d:48:d3:e0:1e:69:e6:0a:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A8:5B:FA:24:70:A5:A5:CF:7D:81:EA:0C:D7:83:9A:B8:D5:0E:BC
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2b:a8:b8:be:97:2b:cb:ff:7f:ac:2f:19:9e:e3:42:dc:e5:
bc:43:c0:58:9c:e5:55:89:57:ca:4b:d0:9e:e2:03:a0:98:e2:
29:6e:6a:45:c0:89:e5:f0:4c:fe:89:eb:aa:c1:60:74:36:34:
a5:4a:4c:1a:76:e1:82:21:00:a0:67:7f:48:b2:45:bd:56:9b:
53:ef:ab:29:d3:cc:a7:31:3f:f9:eb:9c:b5:f4:d6:17:04:a0:
3b:35:c8:b0:f8:99:7d:5f:28:01:1e:88:c2:61:55:70:69:05:
bb:a3:14:c1:31:66:67:57:2f:98:14:c3:ec:e9:86:42:18:8c:
bd:95:87:f5:a8:08:10:69:7c:62:a8:99:7e:b0:1f:ff:a7:d0:
b0:55:21:ab:4a:1c:69:45:fa:a0:da:bd:4f:25:33:ec:7e:cd:
e0:4c:a4:f6:4f:95:45:5c:ad:7c:02:ec:7a:0e:36:4f:c2:19:
bb:0e:f2:fa:82:3c:6a:a8:a8:b0:09:47:0e:be:82:a9:cc:53:
f9:7b:3a:02:e9:bf:23:43:23:e1:49:39:89:e2:a4:0e:00:41:
73:4a:d6:51:b4:00:e5:47:85:35:c4:84:f1:0e:52:97:da:11:
5e:da:d1:10:89:76:83:8e:4d:38:fe:03:62:1f:f7:3b:56:18:
bd:5b:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:25 2025 by rpki-client