Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
File: xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json)
Hash identifier: PLHwwdehQM264YziIfqgnt3j13di6onnBlBw2tlUTjw=
Subject key identifier: F7:44:41:07:AF:B7:91:52:0B:D5:40:97:CD:60:AA:4F:BB:18:1F:F4
Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
Certificate issuer: /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Certificate serial: 0197C312F13008418B19FEE95EF37FACEABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
Manifest number: 03B8
Signing time: Mon 30 Jun 2025 23:01:27 +0000
Manifest this update: Mon 30 Jun 2025 23:01:27 +0000
Manifest next update: Tue 01 Jul 2025 23:01:27 +0000
Files and hashes: 1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: 4P0aTA7SI/L3TpYQZWdTgqsWXr+ZNUF+2kKAw71zn1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:12:f1:30:08:41:8b:19:fe:e9:5e:f3:7f:ac:ea:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Validity
Not Before: Jun 30 23:01:27 2025 GMT
Not After : Jul 1 23:01:27 2025 GMT
Subject: CN=f7444107afb791520bd54097cd60aa4fbb181ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:01:15:02:69:84:a6:35:48:65:73:33:63:de:
46:a3:06:f2:3f:2e:e9:09:08:d1:00:22:d4:bc:58:
d7:0b:e0:6d:da:39:e2:f3:50:44:3e:2f:04:f7:fd:
5c:24:1f:65:c2:29:86:a7:dc:f7:a8:55:91:be:6f:
35:fd:04:29:84:70:7c:ea:e8:ba:3f:ee:88:bc:ef:
58:ac:02:13:e2:db:de:2a:5b:7c:4c:22:46:23:18:
01:01:25:7a:29:51:5e:6a:e8:80:60:6b:a0:cc:c9:
78:6c:4b:e0:6b:b9:cd:1b:e4:bf:10:8e:e2:7c:f9:
f0:a4:10:69:66:75:c8:6e:6f:06:e4:75:b3:43:c7:
09:2b:f7:c9:ac:b9:bf:4c:bc:87:9d:c1:51:a3:1d:
95:27:84:e3:91:17:19:bc:45:09:f4:b9:2a:1f:b8:
02:f9:ab:20:67:d0:34:2d:64:f4:cc:c3:38:9a:25:
aa:a7:00:3a:f5:3f:d0:ae:35:46:37:3f:a0:37:2c:
3d:5a:9d:b8:22:55:42:04:b4:a1:1f:ae:71:73:03:
77:ae:32:2f:c4:4e:2e:73:1e:7c:cb:85:64:e7:bf:
48:2e:53:ae:82:c2:c4:02:60:41:32:f9:7e:1d:4c:
9a:5a:5f:30:42:44:c8:56:83:31:51:0d:e3:5d:06:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:44:41:07:AF:B7:91:52:0B:D5:40:97:CD:60:AA:4F:BB:18:1F:F4
X509v3 Authority Key Identifier:
keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:47:e7:4a:61:e8:62:05:f7:75:be:24:f9:7a:29:79:2d:d7:
0d:97:3e:d1:43:9d:18:be:fd:1c:db:5f:3b:26:98:c4:a6:15:
62:ec:1e:11:57:1d:f5:8a:df:44:33:a1:15:72:d9:a7:29:58:
e7:ca:7b:21:02:ca:a9:a6:46:d7:cd:50:91:5d:74:d2:25:32:
44:63:94:52:cd:5a:a4:24:38:5d:86:8d:63:fe:67:70:80:fd:
79:f7:6b:5f:2c:40:35:32:8e:da:92:31:36:fc:e0:a4:9a:94:
98:0e:e0:87:4a:1d:3a:93:d8:2b:89:a7:4d:05:a1:25:bc:ec:
54:0a:f4:69:31:c3:38:44:0f:f6:20:59:ca:94:6e:7d:d4:a3:
b7:37:85:77:de:e1:6b:52:2b:7c:a9:b3:95:68:63:cb:25:12:
20:1c:fa:0a:c1:0e:34:cb:9f:d7:05:e6:b1:0b:e0:f7:eb:c9:
2d:7a:09:06:ee:19:10:c2:55:b7:f6:35:70:67:a5:10:72:66:
8a:81:a4:5d:c9:a7:e1:c7:c1:5b:78:f6:4c:9a:e9:d9:99:7c:
1d:fc:cc:17:1b:57:1d:0c:e1:d2:a7:60:93:ee:8b:38:4d:82:
2d:94:82:e8:92:77:18:0e:7a:87:db:72:af:32:4c:fc:bf:f5:
21:65:c4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:07:14 2025 by rpki-client