Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: mdm8EpFb3WvtY77Znt/+WGQOWuzNvuJXWzapN/eYkiw=
Subject key identifier: C7:C1:E4:53:7B:1A:A2:06:9E:1D:A2:AE:96:67:F7:F3:33:6B:6C:35
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 0197B70F106A86692065462F4B55241537E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 02CF
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: 7uKpyj4AcCbivFCODaz4r+g1tq41YY+uiqwmxNH556E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:10:6a:86:69:20:65:46:2f:4b:55:24:15:37:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=c7c1e4537b1aa2069e1da2ae9667f7f3336b6c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:24:14:ec:be:70:52:cd:36:40:3f:af:6b:
2e:1c:f7:a9:07:a2:91:ca:15:f6:0e:ad:da:ce:6f:
9c:aa:72:ca:63:d2:c7:ad:c3:b6:aa:31:0c:76:3f:
de:69:b5:9f:15:00:fc:23:39:2f:71:ed:3c:71:2b:
88:98:f5:66:cf:b9:06:74:5d:0b:f7:89:0b:1b:54:
b1:9b:b9:9e:08:b6:5f:ff:bd:5f:ed:8e:a8:bd:62:
e9:09:90:30:aa:96:26:e3:32:5c:02:6b:45:31:a8:
24:95:4b:9f:da:d1:7b:a6:68:b7:a4:05:bc:1e:e3:
fd:82:80:46:d5:a4:df:9d:a8:4b:9b:30:2b:87:3c:
92:73:05:6e:f2:b0:ac:d9:30:31:49:8e:17:c6:5f:
c2:32:aa:af:84:5f:5a:1c:63:7e:d2:52:7e:28:aa:
cc:f0:e0:df:02:0a:99:fd:7d:e6:2d:ec:42:03:e1:
7d:1b:05:1a:c5:be:ef:a3:90:d7:87:29:0a:1d:fd:
13:7b:98:4a:1a:4d:40:80:6f:a9:5a:77:8f:21:cb:
a5:61:68:11:a1:25:dc:79:f4:9a:ce:c3:97:0c:f0:
8a:48:27:ed:b1:e6:ea:7d:e7:ea:fd:bb:7c:e4:26:
f6:e4:0b:6b:67:25:35:96:49:a7:24:57:53:f1:65:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C1:E4:53:7B:1A:A2:06:9E:1D:A2:AE:96:67:F7:F3:33:6B:6C:35
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:ee:7c:d6:c9:98:17:7b:61:c4:00:70:48:ba:47:49:5d:
75:c2:e4:a6:fc:bc:00:f2:0a:ed:2a:da:f3:ad:5f:a8:cc:44:
9e:22:ef:a6:22:91:00:72:30:0b:1a:66:ef:d2:91:d5:c0:f9:
54:ac:6c:c5:82:14:33:63:8f:fc:78:2d:8c:3a:39:b2:85:68:
18:c2:83:6c:87:e3:cf:6a:d0:87:f7:21:58:59:b4:67:d2:a8:
d9:03:ac:94:da:06:9b:32:25:3d:a4:2e:48:31:27:a6:b6:32:
e6:cf:80:ae:6a:ec:f5:b5:4e:5a:bc:d9:59:54:80:66:89:2f:
8a:94:23:31:4f:13:d7:f2:81:83:76:29:83:9d:85:73:4e:16:
ee:bc:4a:c1:9f:3e:33:00:ce:13:23:97:35:63:f1:69:f9:74:
66:80:d1:22:67:47:15:b9:f0:b6:32:02:b9:d9:b0:f6:bf:d0:
2b:df:6d:ca:99:38:15:f7:f0:0d:71:79:c3:81:ee:4a:15:78:
78:a7:16:5b:a5:cc:db:d5:99:43:5c:4a:c1:1b:d3:23:f0:7a:
ea:c0:e7:cc:1d:8f:1b:c3:b2:96:07:f4:3a:d5:ce:df:f4:81:
be:46:7e:00:ca:fb:6c:86:1c:d5:55:d1:ee:90:72:3b:48:db:
e1:e1:cd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:24 2025 by rpki-client