Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File: xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier: JJ3RtTdwvhn6LSi99C0+X5N12zCAtWpNWicvop5/DN0=
Subject key identifier: 43:88:94:FB:D2:CF:79:C6:C5:FD:3A:8C:63:99:0B:67:9F:FC:29:E6
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer: /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial: 0197BB2256CD849C7CA5710FACDC9D2E8A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number: 0CC3
Signing time: Sun 29 Jun 2025 10:01:19 +0000
Manifest this update: Sun 29 Jun 2025 10:01:19 +0000
Manifest next update: Mon 30 Jun 2025 10:01:19 +0000
Files and hashes: 1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: DMwgm+Ok0wQbP8ynxBMUFw2hEdwTDJHeB+1rLngW12s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:56:cd:84:9c:7c:a5:71:0f:ac:dc:9d:2e:8a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Validity
Not Before: Jun 29 10:01:19 2025 GMT
Not After : Jun 30 10:01:19 2025 GMT
Subject: CN=438894fbd2cf79c6c5fd3a8c63990b679ffc29e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:04:1b:9d:d5:59:e7:fc:34:0f:d7:3b:e3:
fa:18:4e:6f:ad:c3:a0:c0:8a:b2:1b:89:14:44:34:
e0:a8:d0:93:f4:fd:e9:36:e3:e2:63:1a:9e:15:3c:
24:aa:81:76:aa:d2:d2:ca:8a:c1:b0:01:b5:b0:43:
24:56:a9:22:63:75:ba:97:98:4d:44:45:12:59:e9:
e2:2a:e8:fb:63:f3:d7:a8:74:9f:60:fc:09:fe:f0:
67:97:67:a4:fe:01:14:b6:52:48:48:36:07:cd:9b:
18:1a:2f:67:7e:93:59:6f:f7:bb:cd:72:99:4a:9b:
68:e5:22:34:71:d9:94:8d:ac:da:c7:1c:f7:f9:28:
44:13:5d:55:d3:06:4a:83:38:26:9f:21:34:45:77:
43:25:14:11:2a:cd:99:89:7b:35:70:9d:c0:f0:d6:
f4:a6:c0:dd:8d:13:41:27:34:14:04:af:f3:c9:80:
88:0f:fc:92:ba:c5:cf:9b:71:5e:72:95:9d:a6:26:
de:b5:ca:2a:24:58:19:2f:cb:2b:cd:84:5f:4b:79:
ec:62:9d:37:5e:f1:18:ce:41:37:61:89:ae:02:49:
28:ce:77:ab:d2:b5:47:03:2c:fe:83:64:d5:fb:af:
69:c9:20:08:36:1a:08:2a:78:3b:d2:c0:ea:ac:d6:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:94:FB:D2:CF:79:C6:C5:FD:3A:8C:63:99:0B:67:9F:FC:29:E6
X509v3 Authority Key Identifier:
keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4b:5f:f2:f0:ea:c3:da:90:b6:7e:3b:10:7b:f2:8f:ca:43:
d4:32:ba:43:c6:0a:f8:d1:f8:c3:f4:ea:4a:08:09:6f:d6:a3:
49:b0:57:de:55:08:fc:64:f2:fd:06:43:a1:0c:d4:6e:be:b1:
75:c9:16:ed:cc:ac:1c:37:78:8f:27:89:72:f4:dc:1e:40:62:
ef:6c:ac:b2:03:e5:9a:df:f8:6e:8e:94:f2:ac:6c:4b:cd:d7:
42:7c:2e:e3:9b:20:44:56:74:55:94:e0:a8:ef:65:eb:75:2c:
66:f9:dc:ab:87:35:05:6b:de:07:50:c6:63:78:9d:e6:f9:b2:
25:54:d4:c4:81:12:ce:00:50:27:1f:b2:c4:91:c2:e4:f0:67:
e5:18:ec:a0:a2:c1:14:31:ee:0e:63:92:0a:68:fb:9a:67:bd:
c5:8a:42:71:ec:00:a0:1a:15:7d:76:bd:31:5d:97:61:87:7e:
30:7f:68:56:27:1d:e8:fb:01:63:ba:93:85:b0:86:a6:26:cd:
72:f4:cd:39:fc:cd:b9:52:4b:3b:37:76:cf:78:5b:56:2b:27:
22:70:6a:07:2c:b5:a2:06:7c:4f:ec:d0:44:3f:80:e3:e9:06:
08:fb:d3:17:4f:a7:55:df:80:8b:9b:77:ae:83:7c:29:3d:4f:
4c:60:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:45 2025 by rpki-client