Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: 1UWSn/oIbFzjzVZjysfws57DSAiE6Yg5u/qEQXnuWvo=
Subject key identifier: D3:A5:37:C6:C3:6D:3B:40:1C:C4:E2:02:83:98:3B:7F:50:E8:85:F7
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 0197B70EDA576749DA9934DE92D9E985A5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 12A3
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: /lrvy11DfbUKfhYi4ArO1FyiK0v9k8T5nXg8oHB81sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:da:57:67:49:da:99:34:de:92:d9:e9:85:a5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=d3a537c6c36d3b401cc4e20283983b7f50e885f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:82:d5:af:94:33:d6:a5:18:59:8e:5d:89:
5b:d2:53:c9:7b:27:10:27:08:be:e3:ab:eb:9e:12:
f8:a2:95:65:a4:ff:96:68:5a:73:dc:24:00:a6:14:
bf:12:01:d0:98:78:04:76:ac:c6:af:96:9b:2e:5a:
db:c0:d5:cb:b2:db:ea:e4:0b:02:ad:a3:a0:ab:6e:
19:fc:80:a9:7c:1b:b2:85:a6:2e:4c:ae:bf:af:50:
e4:e7:4b:ed:ce:98:a4:1d:79:d6:10:90:eb:fc:c1:
e7:bd:87:61:ed:75:7e:a6:92:8f:92:5a:cb:f5:d3:
52:4b:71:fb:fd:5a:9f:76:59:84:11:97:5e:92:36:
8b:d7:e4:b8:ba:f1:fe:31:8a:bd:de:9c:20:b8:33:
37:79:72:a2:3f:94:3c:f6:53:b1:85:a1:96:a7:3e:
9b:a1:04:f9:bb:88:4a:5d:92:d7:ad:0b:bd:94:7a:
02:65:57:85:8c:cb:e2:24:89:34:b8:ff:a6:b2:ef:
1b:1a:cb:34:f4:18:c0:2f:ec:3a:40:74:52:10:46:
68:84:73:68:ad:a8:87:0b:de:ba:7e:63:0e:56:72:
47:41:a3:0c:60:ec:f3:52:4c:ad:5a:cf:75:94:80:
5e:d0:a7:83:72:78:e5:a7:29:09:c2:75:90:43:bd:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A5:37:C6:C3:6D:3B:40:1C:C4:E2:02:83:98:3B:7F:50:E8:85:F7
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ee:99:3b:3d:5d:d8:01:e0:a0:3b:ce:25:90:2a:16:54:ce:
0b:e4:4d:2b:0a:b8:a1:9e:37:25:8a:b3:8a:7c:76:3d:2b:2b:
3b:af:36:8f:25:56:f0:b3:9c:e5:9d:b4:eb:50:07:bd:13:f8:
85:dc:a3:03:e5:e5:04:5f:98:e6:26:f5:6a:1c:b3:f0:8a:39:
e7:5f:f4:54:a1:b5:da:43:b4:2a:dd:f2:12:3f:6e:7b:ab:11:
4d:f7:3e:3b:90:44:20:84:02:88:5a:d0:e5:06:e1:cd:35:4c:
c1:be:e9:b5:f3:c5:e4:b4:43:9f:99:52:c4:08:f8:8e:37:7f:
80:ea:2a:0c:60:2a:a5:24:32:c9:b6:59:c2:83:c7:52:9d:ca:
60:2e:a9:44:23:27:68:c5:13:a3:1a:27:0e:58:7b:9c:56:4c:
46:5d:74:09:a3:7f:7c:d5:fa:b2:a5:cc:a9:68:de:ba:58:04:
7c:0f:f4:ae:cc:56:f9:fd:0a:48:39:e6:1a:2c:ae:a6:55:25:
a4:18:6c:08:b2:58:dd:72:aa:bd:b6:d4:cc:53:08:bb:64:8d:
b8:bb:d1:00:08:23:ae:55:9c:57:5a:fa:d5:68:55:77:be:1c:
c3:7c:96:9e:a8:ca:7a:37:eb:d9:59:13:ba:5f:15:b5:dc:34:
af:26:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:50 2025 by rpki-client