Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
File: Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft (raw, json)
Hash identifier: rnAu7/Hr210lVOyBFMiCXTMMbweUiCr9OErYfMQZqlg=
Subject key identifier: 98:B8:F8:F8:BA:DB:73:43:BB:B2:7A:59:DD:A4:8C:43:31:0E:25:0D
Authority key identifier: 5E:FA:30:EE:35:8E:25:0E:1C:C6:6B:46:81:93:A5:65:D8:24:D4:48
Certificate issuer: /CN=5efa30ee358e250e1cc66b468193a565d824d448
Certificate serial: 0197B7EA5CC9789C67DCAA72E70FDC4D5E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
Manifest number: 01B4
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl (hash: PtKxVxjyDQv0O99QYgZVHJN5Xi+ghn7/RUPNQRYrpU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5c:c9:78:9c:67:dc:aa:72:e7:0f:dc:4d:5e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efa30ee358e250e1cc66b468193a565d824d448
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=98b8f8f8badb7343bbb27a59dda48c43310e250d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:64:04:e0:ae:a3:14:12:c9:3d:ce:bf:81:
f8:b0:a9:42:90:2c:e4:48:32:25:14:9d:d9:71:d7:
09:1d:89:91:a2:d4:82:2f:4e:5d:18:a9:17:1a:02:
83:dc:2a:88:67:5c:56:60:4f:81:12:f4:fa:a3:d8:
17:dd:7a:ef:12:0f:c5:e4:d1:f0:8b:c5:37:79:a8:
30:35:3c:93:26:84:5e:ac:34:04:51:f6:fd:e5:22:
28:9e:b3:4b:af:8a:09:33:15:bb:03:3d:30:d4:21:
d5:4e:4c:6f:1b:86:8a:6c:b1:c2:7a:b6:c9:90:3d:
75:98:d6:d9:8b:42:ce:4f:ea:fd:c3:8d:ad:70:c8:
82:e9:67:1d:9a:ba:0c:53:8c:f1:17:02:ae:7b:e1:
7f:9b:4e:e5:8e:7a:8b:d9:8e:cc:ab:99:85:04:a1:
5e:46:b3:ac:d4:01:14:72:27:35:7c:6d:a4:d5:c8:
9a:2c:4d:22:7f:ca:b6:13:db:27:8d:d2:94:13:55:
fa:b7:4d:85:ab:48:74:53:20:51:09:8c:0d:8a:6a:
72:0f:22:eb:b5:b9:c4:78:c5:13:ba:fd:08:1e:c6:
b8:2e:19:06:26:7b:53:2c:3d:4c:fb:d3:36:a0:2c:
c4:63:e1:57:a4:e8:38:ea:30:22:2f:f4:81:1a:ec:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B8:F8:F8:BA:DB:73:43:BB:B2:7A:59:DD:A4:8C:43:31:0E:25:0D
X509v3 Authority Key Identifier:
keyid:5E:FA:30:EE:35:8E:25:0E:1C:C6:6B:46:81:93:A5:65:D8:24:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:48:5c:43:ad:42:b0:01:84:ee:dc:10:8e:33:1c:1e:08:57:
56:a9:16:d3:a7:0a:ae:ac:f6:3d:50:5e:65:9e:46:64:91:2c:
bd:c9:03:90:d7:08:b4:96:f9:25:09:a7:eb:6c:f2:49:aa:c0:
fd:31:7d:2e:07:03:e5:bb:0b:f5:70:ea:dc:25:60:48:10:47:
33:ce:a4:fd:3f:46:ee:e0:76:0d:dc:59:c6:53:9f:0b:7f:b2:
7c:0a:ef:81:3d:38:45:d8:23:1a:7c:60:18:cf:fb:57:20:ca:
ae:9e:9c:0e:20:12:c4:47:22:51:df:21:20:7d:b1:7f:6d:7a:
f6:64:f8:72:0d:e3:4a:c5:0f:37:16:85:21:19:d6:51:cd:f6:
eb:ee:6a:09:4e:b9:eb:ce:9b:18:8a:37:d8:cf:ed:e4:63:e3:
6b:0b:8c:0e:86:ce:5e:fc:da:3b:69:02:85:40:04:85:92:8c:
7d:09:09:6a:87:53:07:31:c4:3d:6d:72:b0:90:c0:34:8d:20:
6f:bf:8b:de:1a:af:23:b4:70:f0:05:0f:48:12:85:e9:08:02:
ea:b9:36:18:ae:22:ea:6b:32:91:38:c3:cd:b7:89:66:d8:17:
b8:5a:d8:81:34:b5:af:18:56:40:36:f0:af:44:4e:2c:5e:31:
f2:6c:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:29 2025 by rpki-client