Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier: 97IHfu8Oi/HEGNhZb4/WM/SkiKOtQe0l4HRDyIwIbWE=
Subject key identifier: 89:E8:5C:5D:90:8B:13:E3:B9:9D:7C:9F:97:37:92:BF:3E:00:B5:40
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial: 0197B77C27C2B08D02F7BB2CECDFF9773A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number: 0614
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: 25w3n0WQ33t5OEmzHuB38ptJTYwnRfhAgpu900GT7Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:27:c2:b0:8d:02:f7:bb:2c:ec:df:f9:77:3a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=89e85c5d908b13e3b99d7c9f973792bf3e00b540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:88:aa:d1:36:91:2d:72:a7:81:e9:62:ce:
25:21:d9:a4:2a:b6:09:f7:65:db:18:88:94:3c:36:
9a:bc:28:f3:85:34:35:f3:ce:94:92:c4:77:c2:17:
cf:a1:c8:23:3d:6a:a1:61:33:58:fa:1c:4c:e8:3f:
87:e4:70:3b:70:ae:3c:7d:8a:24:5a:e4:db:c9:79:
34:32:e4:32:10:9e:4b:dc:74:08:bb:be:64:4a:5a:
d5:b8:5a:09:a9:2f:00:95:de:0a:52:5b:87:a3:de:
e3:0a:a6:d6:c0:60:b4:b6:3b:55:86:07:02:65:77:
f9:d7:cb:1b:51:06:a5:6e:7f:76:b2:04:c1:12:fc:
2b:22:60:22:d3:7a:91:41:4f:98:ea:5c:13:5d:29:
d9:e2:62:1e:5c:b9:03:31:f5:d5:1a:f7:08:a6:36:
6b:4c:de:e5:c9:83:bb:77:42:0b:34:8b:51:64:28:
d6:f5:9f:a3:45:58:f2:1f:02:ae:2d:c5:72:0a:6e:
d7:6c:9f:67:b6:60:87:92:68:53:da:10:ab:7a:23:
f1:f9:56:7e:18:72:d1:18:2c:23:83:0e:1e:26:38:
1c:4b:ad:84:b1:03:df:80:a8:92:dd:42:20:8f:22:
13:a1:ce:bb:ba:74:9f:b6:08:d7:c0:f6:a9:47:e7:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E8:5C:5D:90:8B:13:E3:B9:9D:7C:9F:97:37:92:BF:3E:00:B5:40
X509v3 Authority Key Identifier:
keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:56:09:55:c4:7e:c2:ef:07:7b:3c:8d:63:bd:d2:20:dc:29:
b1:b3:91:b1:1e:ef:3f:db:fa:dd:a1:97:a1:c6:69:42:f3:b9:
e5:fe:8d:b2:ad:5a:1f:59:4c:1c:07:39:93:74:16:c3:97:55:
3d:65:ac:1b:77:28:de:c0:1b:38:bc:31:6f:2b:e6:3e:0a:06:
db:82:03:d1:38:c8:62:ab:9b:32:cc:b2:6d:f6:11:66:3b:d5:
ac:f5:4c:25:e8:a4:ef:1d:d8:34:1e:df:fd:50:cf:3b:d6:dd:
2e:44:98:c0:ec:98:f3:0c:8a:94:73:4e:0c:98:ba:d2:b0:ee:
cf:a7:08:58:5c:77:7a:df:70:37:cb:b4:16:36:27:e8:72:97:
94:90:80:b2:a5:62:8f:b6:99:48:f1:14:d5:7f:2a:7f:20:59:
4e:e1:3b:42:98:03:ef:2f:f9:b1:df:bc:89:56:35:3e:02:41:
10:51:f7:73:74:ac:c1:64:a3:2b:56:1b:7b:a4:66:84:45:31:
09:6f:79:1e:25:90:e0:d6:ed:34:95:63:e3:c2:9b:a0:98:e3:
a4:af:29:38:d4:b4:58:df:45:e3:bb:bc:1d:a6:36:e4:bd:3c:
08:3c:7e:cd:dc:05:ca:e2:a4:f8:b0:8e:b0:81:96:e8:2e:29:
c6:7d:e0:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fCfCsI0C97ss7N/5dzoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2ZhMmZjNGYyZWU5ZWJjODNiZTc5MzY2YjBhZTk0ZDFm
MmJmYzcwHhcNMjUwNjI4MTcwMDU2WhcNMjUwNjI5MTcwMDU2WjAzMTEwLwYDVQQD
Eyg4OWU4NWM1ZDkwOGIxM2UzYjk5ZDdjOWY5NzM3OTJiZjNlMDBiNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRGIqtE2kS1yp4HpYs4lIdmkKrYJ
92XbGIiUPDaavCjzhTQ1886UksR3whfPocgjPWqhYTNY+hxM6D+H5HA7cK48fYok
WuTbyXk0MuQyEJ5L3HQIu75kSlrVuFoJqS8Ald4KUluHo97jCqbWwGC0tjtVhgcC
ZXf518sbUQalbn92sgTBEvwrImAi03qRQU+Y6lwTXSnZ4mIeXLkDMfXVGvcIpjZr
TN7lyYO7d0ILNItRZCjW9Z+jRVjyHwKuLcVyCm7XbJ9ntmCHkmhT2hCreiPx+VZ+
GHLRGCwjgw4eJjgcS62EsQPfgKiS3UIgjyIToc67unSftgjXwPapR+ckRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInoXF2QixPjuZ18n5c3kr8+ALVAMB8GA1UdIwQY
MBaAFMTPovxPLunryDvnk2awrpTR8r/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmIt
N2M1NzNiNmUwMGVhLzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmItN2M1NzNiNmUwMGVh
LzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0FYJVcR+
wu8HezyNY73SINwpsbORsR7vP9v63aGXocZpQvO55f6Nsq1aH1lMHAc5k3QWw5dV
PWWsG3co3sAbOLwxbyvmPgoG24ID0TjIYqubMsyybfYRZjvVrPVMJeik7x3YNB7f
/VDPO9bdLkSYwOyY8wyKlHNODJi60rDuz6cIWFx3et9wN8u0FjYn6HKXlJCAsqVi
j7aZSPEU1X8qfyBZTuE7QpgD7y/5sd+8iVY1PgJBEFH3c3SswWSjK1Ybe6RmhEUx
CW95HiWQ4NbtNJVj48KboJjjpK8pONS0WN9F47u8HaY25L08CDx+zdwFyuKk+LCO
sIGW6C4pxn3gWw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:01 2025 by rpki-client