Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: q9wvlFvMg+oIe7N73zQQWin2vjV1oqt+TV/AwhAbrHw=
Subject key identifier: 35:D8:CB:85:B6:AF:12:26:F4:A8:F0:9D:B4:A4:4E:4B:37:C2:13:91
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 0197B9A1A2C0B4FBEF4B46454E22E7BDB1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 03:01:07 +0000
Manifest this update: Sun 29 Jun 2025 03:01:07 +0000
Manifest next update: Mon 30 Jun 2025 03:01:07 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: SRTZk2AK3ab3VSmPxv0AdQPCjMvtacIJsfXLUJizHGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:a2:c0:b4:fb:ef:4b:46:45:4e:22:e7:bd:b1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Jun 29 03:01:07 2025 GMT
Not After : Jun 30 03:01:07 2025 GMT
Subject: CN=35d8cb85b6af1226f4a8f09db4a44e4b37c21391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:fd:44:a8:a4:14:bc:53:8e:b5:6e:06:a6:
6e:ff:16:cb:52:98:f6:2b:58:15:28:42:49:50:46:
69:6d:8b:20:8e:ed:19:8a:f7:1f:f1:1a:cc:4a:25:
44:e9:7b:89:40:bd:17:19:cf:92:49:a2:57:2c:d9:
09:40:8a:33:d1:9c:e7:28:16:73:8e:80:b3:00:ed:
7a:ee:94:da:cf:17:bd:31:95:4b:97:7e:e5:4b:3f:
81:e8:72:61:ae:87:ea:eb:40:9e:82:9c:31:b3:ff:
ca:5b:46:b6:37:d7:20:c8:a3:78:5b:db:70:fd:c6:
75:a5:3f:a2:36:b4:5b:f3:47:97:bc:68:2f:e7:b6:
4c:52:0d:50:e2:e6:c6:9f:9b:21:a4:23:59:c3:6a:
fe:c4:57:98:1c:60:48:3a:61:26:78:c0:5d:15:75:
c7:55:df:9e:c4:fb:29:60:be:12:f1:bb:b1:3b:e2:
e4:52:e2:03:75:f2:7a:ee:93:9b:03:92:a1:4c:17:
b5:44:ec:00:66:eb:e7:e1:85:27:3a:b5:e4:7b:14:
58:c2:31:4b:78:d8:dd:0e:c9:73:50:95:b1:bc:da:
5f:b1:24:93:ae:c7:cf:4e:90:db:d9:05:72:f6:d8:
2d:d0:6a:06:33:93:3d:53:e0:8d:45:29:40:36:ec:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D8:CB:85:B6:AF:12:26:F4:A8:F0:9D:B4:A4:4E:4B:37:C2:13:91
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a4:64:41:ff:78:9d:ca:03:7c:73:0a:e8:fd:58:67:a5:0a:
c1:ba:4a:43:1d:8e:37:2f:dc:02:e3:98:1d:a4:45:83:fe:f4:
13:b4:50:80:12:ed:af:03:de:60:43:7a:85:a2:b6:fe:db:c5:
83:a0:da:4f:77:57:75:8a:47:28:2b:53:d3:fa:de:fa:d5:1f:
a6:b5:fc:16:b8:97:0b:dd:d9:cd:1a:6a:f5:b6:ea:bf:b0:11:
66:34:fd:79:98:8e:82:97:fe:2f:5e:4c:58:6a:0b:99:1d:19:
02:d7:79:fd:8e:50:5c:36:80:4b:0a:de:55:fd:32:88:db:08:
36:ec:8c:d6:b9:6b:6f:ea:ce:96:0d:7e:cc:71:2a:49:ba:fc:
1c:1d:a4:7f:1f:c4:fc:54:5e:1d:17:df:63:a5:a4:ae:be:99:
c7:e7:5f:11:f9:6c:77:ec:2b:2a:3b:d4:ad:06:e1:45:12:c3:
f4:fa:60:4f:eb:28:3b:6a:c3:26:80:74:18:ac:9f:47:0d:c8:
ce:6e:84:c4:be:eb:4a:b1:0f:b1:01:09:d7:cf:45:10:8c:e6:
bd:cf:29:5f:d0:ee:d0:8a:44:eb:2f:3c:9d:b7:f5:2b:9f:22:
20:34:95:26:c2:ce:47:36:4a:b4:89:fe:62:4f:14:55:66:ae:
12:42:17:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:54:06 2025 by rpki-client