Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: L77Jo3XmXlIeZ+l9PO5R9o/gDbW/kTR/DZEKY6TYV0c=
Subject key identifier: AD:C7:7E:B2:93:62:76:37:E8:95:00:CC:EF:D0:1F:54:3F:0E:58:A4
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 0197C237C933AF14D20A84F0469D8FC018B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0A0B
Signing time: Mon 30 Jun 2025 19:02:05 +0000
Manifest this update: Mon 30 Jun 2025 19:02:05 +0000
Manifest next update: Tue 01 Jul 2025 19:02:05 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: XG7B3SyVOq0OlUWpQ9AvuruS/6Grjjuw8ETzQGN8KrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:c9:33:af:14:d2:0a:84:f0:46:9d:8f:c0:18:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Jun 30 19:02:05 2025 GMT
Not After : Jul 1 19:02:05 2025 GMT
Subject: CN=adc77eb293627637e89500ccefd01f543f0e58a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:09:d8:e7:4c:1c:41:35:e8:73:45:93:1b:
d6:89:a6:c9:7a:da:03:53:e1:6b:2c:97:ee:13:6a:
e5:1f:6b:e1:fd:3f:bc:6c:97:ee:16:6c:57:7c:34:
d1:15:e5:b4:b4:5c:50:e1:ed:d7:37:6b:b4:f4:83:
74:1c:21:48:29:ed:44:3f:87:da:1d:d3:7b:d7:79:
bf:da:ce:c2:0e:b5:59:d9:c1:91:b0:b9:02:f8:de:
1a:a4:6f:0a:58:97:ea:00:cb:4c:ff:c5:8d:28:2b:
52:eb:b1:64:d0:68:af:94:47:c9:a5:d6:7b:62:60:
93:d0:d1:8f:8d:c1:b8:07:e6:ab:a0:5d:51:9b:9b:
be:64:21:e5:79:11:42:06:6f:cb:e3:8b:a7:83:e5:
03:0a:18:5e:d7:3c:21:11:88:6c:9c:a4:74:8d:78:
2c:45:41:e5:c2:9e:8d:54:cf:95:90:29:fa:74:47:
bf:97:61:4f:3f:79:b2:6b:fb:3a:f3:d6:b8:51:dc:
d9:c6:5f:2c:4c:dd:15:d9:0d:ca:88:e6:09:5b:08:
71:e1:e8:cc:05:1a:32:8c:b2:f0:98:55:6c:1c:e8:
0d:18:89:ea:6e:c0:42:ec:31:8f:b8:ce:8b:10:fe:
ca:30:d3:c0:33:3e:ad:33:73:8c:07:40:36:08:0a:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C7:7E:B2:93:62:76:37:E8:95:00:CC:EF:D0:1F:54:3F:0E:58:A4
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:28:de:d0:3c:ae:b3:c5:67:4d:bf:74:72:1a:7f:f9:d8:90:
6b:1e:39:b3:a0:7b:fa:e9:e0:b4:aa:9e:41:43:ef:fe:e5:ea:
c3:30:6d:7d:25:39:6f:c9:ec:4b:c0:d8:89:98:d4:66:16:78:
74:1f:fa:7f:c5:9a:f1:ea:b2:56:3f:ba:98:50:9a:4e:b3:05:
f9:e7:65:a9:47:ac:a3:d8:6d:67:8b:9f:65:e4:1d:e8:70:6e:
ab:4e:09:bd:b9:82:94:47:ad:0d:79:f3:43:aa:4f:2a:83:e1:
c5:13:95:64:bd:84:08:3e:b7:8c:f5:a6:0d:3b:ba:44:c3:2c:
d2:69:60:03:22:7d:dc:2b:0b:c9:68:34:ee:d8:87:30:c2:c8:
03:ca:da:ca:7f:f7:f8:56:2c:b1:28:19:5c:ec:bc:16:fa:a2:
1a:80:a2:ab:d4:78:37:f5:3c:98:8a:84:1e:f6:3e:b7:be:b1:
5b:63:89:9f:c9:3a:50:70:1f:af:57:04:f7:d2:d1:6b:a2:b6:
94:1c:87:55:4e:b8:05:fe:be:8d:fb:32:2e:7f:a5:b6:eb:49:
68:dc:36:ff:50:7f:25:87:4a:d4:f1:ee:63:f5:d2:40:d9:36:
87:9c:3f:5a:20:87:8a:dd:a6:d5:5e:43:b5:1a:57:37:22:f3:
6a:9f:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:47:53 2025 by rpki-client