Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
File: XO56utwc1TZH4rILdg1aXHqxp8w.mft (raw, json)
Hash identifier: wOkoHagTd5COC6rPNZThKe0f7RiRfyUo2UaU4SDHVsQ=
Subject key identifier: 18:12:50:C4:AD:D9:6D:B9:DE:E3:F7:8C:E4:FF:D0:92:F6:CB:79:50
Authority key identifier: 5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
Certificate issuer: /CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Certificate serial: 0197B77C18E8EFCA02FCE381C0FF7888B57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
Manifest number: A2
Signing time: Sat 28 Jun 2025 17:00:52 +0000
Manifest this update: Sat 28 Jun 2025 17:00:52 +0000
Manifest next update: Sun 29 Jun 2025 17:00:52 +0000
Files and hashes: 1: XO56utwc1TZH4rILdg1aXHqxp8w.crl (hash: gzQW+1cra1NWBqGYQK3v3C62rNv7Q+tTf05tLKFmapw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:18:e8:ef:ca:02:fc:e3:81:c0:ff:78:88:b5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Validity
Not Before: Jun 28 17:00:52 2025 GMT
Not After : Jun 29 17:00:52 2025 GMT
Subject: CN=181250c4add96db9dee3f78ce4ffd092f6cb7950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:f0:e8:d3:58:31:03:11:70:90:01:d9:c1:
7e:e4:f6:cb:d8:27:cf:c6:0c:77:24:33:f6:d1:1d:
41:fe:44:92:78:2d:94:84:12:ec:78:ba:d2:57:cc:
a2:2d:10:e5:1e:2e:e3:a6:21:b3:7a:40:27:a9:ff:
85:8d:e8:a4:af:19:a6:8e:81:53:64:ad:8e:e4:e9:
bd:f9:a2:75:0a:64:3f:8b:ec:20:98:5e:14:19:64:
a2:c3:b2:05:1a:e8:84:37:c8:a8:56:96:5f:d0:0c:
c6:13:d2:ee:ff:6e:4b:f7:77:cb:e2:f2:6c:cc:e7:
26:eb:e4:a2:6d:35:a2:fa:ab:f7:af:a2:fc:ad:b5:
2b:dd:8e:46:d9:0a:d4:2a:0e:af:17:48:b8:67:fe:
96:01:41:02:a0:74:7b:3f:15:4d:d9:7b:c7:8c:e7:
6c:9b:d2:24:71:58:7c:b0:85:10:87:a6:f0:29:7c:
c6:92:b9:de:3a:c9:6a:0a:95:e4:d6:e1:1c:60:68:
20:80:08:f7:15:7f:b5:ae:54:f4:7b:78:a3:06:74:
0d:8f:07:76:b8:a3:78:69:d7:20:0c:4d:e6:92:f2:
3d:4d:c0:8b:ae:79:d5:c2:06:e4:57:39:30:5b:aa:
a5:f7:6e:11:c5:8a:73:06:a2:dd:2a:7a:e8:6d:14:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:12:50:C4:AD:D9:6D:B9:DE:E3:F7:8C:E4:FF:D0:92:F6:CB:79:50
X509v3 Authority Key Identifier:
keyid:5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:82:af:43:1f:b0:9c:72:7d:62:ca:7a:e8:48:6f:56:ab:39:
90:4a:57:6f:e1:41:83:f6:e6:a6:cf:a3:a4:8d:d1:cc:f4:9f:
b3:d7:a4:1e:d7:ca:f5:ef:5b:3e:b1:1c:b4:3e:8a:42:04:3e:
75:5c:01:e6:5a:6d:c4:0f:b2:67:47:69:f4:34:62:f4:7f:64:
40:c0:74:74:a6:60:fa:b3:bd:7d:f0:4f:89:cf:36:de:e2:70:
a5:56:32:41:50:63:27:3c:b3:c6:3c:c2:09:00:e4:89:0f:74:
4c:40:54:fe:8e:81:a4:43:8d:1d:04:27:ec:88:c4:a3:dc:5f:
ba:98:47:8e:cf:24:ac:b3:ae:c6:17:6a:a0:3d:c5:21:b0:64:
44:a2:d3:f7:26:59:96:02:23:37:c9:74:14:69:53:18:c4:8c:
d3:99:9a:ae:3e:90:fb:da:2e:b3:21:48:8d:a9:af:0d:15:ab:
75:10:95:a5:8b:87:fe:43:10:a8:8d:8f:7e:46:7a:e8:74:cb:
5a:bb:96:e1:ca:51:aa:f4:64:1d:bb:c6:32:a3:37:17:9d:3c:
0a:9e:58:f2:b4:54:73:ff:b2:d8:c6:50:77:66:02:67:20:a3:
05:bb:d7:16:37:29:57:c6:ec:b7:86:a2:71:42:8a:b7:8a:30:
64:d5:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:44 2025 by rpki-client