Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: sxZglYmUC4lKCT+Atfp176ES8dpfw/QSy8SzBgYDO1U=
Subject key identifier: 35:96:E5:93:70:D4:4F:AE:A9:B0:91:8F:4F:76:33:82:2D:1C:1E:30
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 0197B7B325BFE0CBB9BC18CECE6CF3EB1938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 1401
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: 2pPcjsG0ryRL20GFP8NPJSg68pdgHJcBB+zk3TZokA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:25:bf:e0:cb:b9:bc:18:ce:ce:6c:f3:eb:19:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=3596e59370d44faea9b0918f4f7633822d1c1e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:44:da:0c:a3:2f:ea:66:a2:51:c6:d4:5d:
39:fb:8b:e6:95:7d:88:49:46:00:cc:6d:30:d7:67:
10:62:65:cc:b2:dd:cb:81:fd:ea:a8:bf:4a:3b:c2:
37:b3:ba:db:cd:cb:d8:aa:c4:09:7c:bf:56:80:57:
62:78:b0:88:85:9a:2d:a8:36:53:80:4b:cd:6a:0f:
34:a4:8f:a5:cd:58:6b:8a:86:ac:4a:b1:c0:95:2b:
b1:b8:c6:c9:5a:84:1b:93:42:99:72:09:4d:42:4a:
7c:ff:40:0c:34:55:e7:56:b8:4f:78:c8:aa:fa:a7:
d6:4e:a6:dd:d0:b9:c1:f3:fb:4d:95:b1:da:c6:65:
f7:b7:0a:45:bc:71:18:86:89:4e:b7:6f:65:05:56:
32:22:14:e1:09:0d:10:8b:68:d3:8d:cc:32:c5:b3:
9c:0a:20:9d:cb:73:09:df:d3:27:53:66:ab:dd:4c:
91:68:58:4e:bc:e1:c6:d7:e1:74:05:90:e8:0d:35:
e5:a9:28:2c:b3:fc:8e:ac:7a:e3:4e:aa:0c:1f:34:
8d:50:23:95:a9:3d:f8:b2:95:80:c5:3b:e1:c3:3d:
7c:22:74:e8:3e:82:d3:83:58:99:34:4f:71:47:4f:
9f:32:1c:f4:af:bb:f1:14:f8:68:99:06:8a:50:82:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:96:E5:93:70:D4:4F:AE:A9:B0:91:8F:4F:76:33:82:2D:1C:1E:30
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6f:55:8e:72:ba:f6:73:24:4c:54:66:71:ef:e9:d9:88:e4:
57:66:ef:99:34:a6:f3:ce:dd:3c:59:b6:e6:6f:10:a6:31:9d:
93:89:d9:04:df:f8:24:ad:2a:20:6e:6c:eb:27:1d:bd:aa:58:
18:b1:42:aa:90:ad:42:07:a1:83:22:75:d5:5f:45:f8:2d:4b:
27:77:df:d3:12:5a:00:6d:f7:53:ee:9d:44:8d:e6:dc:34:10:
bb:7b:e9:dc:51:d5:d9:ea:28:73:12:3a:a1:dd:74:bb:38:14:
71:2f:62:64:3f:1f:a2:6c:d1:2c:18:79:61:c1:cf:d1:8b:d8:
d8:8d:24:70:af:67:fe:02:83:89:c6:b4:2e:16:a3:30:45:7d:
a1:33:24:9b:02:c7:94:3c:f3:ad:c1:01:72:cc:39:49:5b:e5:
65:f8:35:5b:9c:a8:b6:d5:af:c6:b8:e1:48:39:f2:d3:16:66:
b4:e5:e3:3c:bc:d0:1b:c9:32:23:d0:0c:0e:81:09:1a:fd:30:
d3:81:8d:19:9d:36:5a:9f:af:60:b7:82:5f:7d:d1:bd:a4:27:
da:87:07:89:76:26:3d:69:1f:47:ce:a3:66:a0:18:0f:e2:44:
52:c8:2f:3f:96:90:00:06:cc:d3:67:86:1b:54:e9:d7:3d:f2:
09:6f:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:56 2025 by rpki-client