Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: piNwHMG/RaeEGVS81anIzNhGQN0LI6hpEBBGJFOovag=
Subject key identifier: 72:E6:22:55:A4:A7:A0:EC:55:56:59:19:58:F7:05:9F:5C:74:B7:F0
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 0197B6A1E00AD12DCAD9DA2AC22A8B582710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 0928
Signing time: Sat 28 Jun 2025 13:02:31 +0000
Manifest this update: Sat 28 Jun 2025 13:02:31 +0000
Manifest next update: Sun 29 Jun 2025 13:02:31 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: 0gGR/zemnLHB99hL4bLO0I9Os5m5/fnPeN7dz8p9I+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e0:0a:d1:2d:ca:d9:da:2a:c2:2a:8b:58:27:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Jun 28 13:02:31 2025 GMT
Not After : Jun 29 13:02:31 2025 GMT
Subject: CN=72e62255a4a7a0ec5556591958f7059f5c74b7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:59:1b:00:53:64:ed:51:86:88:e9:40:ce:
9b:85:e8:13:e3:c5:96:d6:64:23:6d:76:41:33:a7:
8c:f8:69:3f:69:c8:b4:9b:51:df:8a:9a:2a:39:e1:
0d:b3:4c:b1:69:04:ef:91:1e:78:52:5b:76:e0:1d:
8c:e0:50:63:59:eb:98:24:c2:65:a8:7a:e0:b5:9f:
2e:fc:8e:57:40:5e:2d:5f:c1:6b:cb:52:ce:ff:88:
22:8e:63:60:52:64:f9:90:3c:35:5f:92:58:8a:e7:
bf:a7:67:b4:6b:ad:0f:db:0d:6b:ab:1c:b6:44:e3:
dc:a3:32:db:bf:b7:84:05:40:d7:d6:2d:77:81:fa:
59:96:1c:92:bd:c2:1b:8d:e3:1f:e1:59:25:e3:9d:
ee:92:1d:98:e8:1b:bb:21:13:4b:85:f1:68:dc:28:
54:2b:d2:5e:c0:67:a9:6f:64:dc:c2:6a:7e:ea:7e:
4a:4a:72:8a:21:de:a0:b9:60:df:05:87:7f:bf:c5:
55:a4:32:6b:55:a0:90:72:8f:6c:a9:62:54:8f:21:
bd:39:ee:58:20:e0:c8:d0:d1:52:6d:40:b5:58:4e:
e6:d2:98:22:be:44:10:d4:0e:79:c3:9a:69:f7:44:
b0:5b:c6:19:e3:73:27:b6:39:3f:ef:f9:4c:08:f0:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E6:22:55:A4:A7:A0:EC:55:56:59:19:58:F7:05:9F:5C:74:B7:F0
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6b:7e:15:35:94:b5:fc:f7:f7:a5:42:45:9c:0f:6c:c4:5d:
27:2f:58:4e:61:41:b0:5d:3a:05:76:d8:1f:73:01:7c:91:82:
60:32:33:53:49:68:5c:d6:de:ba:7a:83:78:e1:3f:ba:41:f3:
56:08:db:3c:f2:1e:e0:fe:20:b5:2a:cd:b9:a9:f1:ef:80:b1:
84:a7:cc:07:8e:66:80:25:36:a0:d8:e1:35:92:1c:fb:af:af:
12:d7:74:02:e5:66:b0:54:ce:71:ca:f7:49:bc:e7:41:b4:92:
aa:83:d1:41:5e:44:62:85:ca:17:e3:ff:96:93:b8:f0:8d:fa:
9a:9d:41:07:cb:2a:83:5f:05:3b:2c:92:c7:80:d5:55:76:72:
5e:cf:a3:7f:b7:f4:16:29:c6:2d:01:6b:2c:3c:60:76:0f:6f:
ba:43:86:f8:ef:f2:1c:83:f5:0c:40:91:88:f3:44:e0:42:e3:
17:a2:3d:13:0c:eb:76:a5:13:b1:a3:3c:6f:2e:86:04:c5:9c:
fb:58:34:76:d8:7a:63:e3:98:b8:93:52:48:19:e4:4e:88:92:
e7:63:e2:5d:cd:97:9f:41:f4:bc:eb:82:3e:9d:5a:28:92:7f:
45:80:9e:74:7b:bb:68:ad:8b:ca:d8:6d:84:b3:46:a2:6a:f8:
58:37:0c:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oeAK0S3K2doqwiqLWCcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OThhZDU3OTdjYWQ5MTUwYWVkMmJjMGI1ZDM5Yjg4YjFi
ZjJiZjQwHhcNMjUwNjI4MTMwMjMxWhcNMjUwNjI5MTMwMjMxWjAzMTEwLwYDVQQD
Eyg3MmU2MjI1NWE0YTdhMGVjNTU1NjU5MTk1OGY3MDU5ZjVjNzRiN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GdZGwBTZO1RhojpQM6bhegT48WW
1mQjbXZBM6eM+Gk/aci0m1HfipoqOeENs0yxaQTvkR54Ult24B2M4FBjWeuYJMJl
qHrgtZ8u/I5XQF4tX8Fry1LO/4gijmNgUmT5kDw1X5JYiue/p2e0a60P2w1rqxy2
ROPcozLbv7eEBUDX1i13gfpZlhySvcIbjeMf4Vkl453ukh2Y6Bu7IRNLhfFo3ChU
K9JewGepb2Tcwmp+6n5KSnKKId6guWDfBYd/v8VVpDJrVaCQco9sqWJUjyG9Oe5Y
IODI0NFSbUC1WE7m0pgivkQQ1A55w5pp90SwW8YZ43Mntjk/7/lMCPBMzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLmIlWkp6DsVVZZGVj3BZ9cdLfwMB8GA1UdIwQY
MBaAFMSYrVeXytkVCu0rwLXTm4ixvyv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZTJlODgtOGY1ZS00NDZhLTgzNzIt
YTZjNGNjOWY3ODQwLzEveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZTJlODgtOGY1ZS00NDZhLTgzNzItYTZjNGNjOWY3ODQw
LzEveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmt+FTWU
tfz396VCRZwPbMRdJy9YTmFBsF06BXbYH3MBfJGCYDIzU0loXNbeunqDeOE/ukHz
VgjbPPIe4P4gtSrNuanx74CxhKfMB45mgCU2oNjhNZIc+6+vEtd0AuVmsFTOccr3
SbznQbSSqoPRQV5EYoXKF+P/lpO48I36mp1BB8sqg18FOyySx4DVVXZyXs+jf7f0
FinGLQFrLDxgdg9vukOG+O/yHIP1DECRiPNE4ELjF6I9EwzrdqUTsaM8by6GBMWc
+1g0dth6Y+OYuJNSSBnkToiS52PiXc2Xn0H0vOuCPp1aKJJ/RYCedHu7aK2Lytht
hLNGomr4WDcMHA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:10:59 2025 by rpki-client