Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: bQ7YaOWSgMSu91cCTqybYSmfipfhcvNJW/ZokOLgiB8=
Subject key identifier: 33:CB:6D:72:52:3E:E1:85:34:13:79:21:5A:EC:C9:58:4C:53:8A:34
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 0197B77CABEA475CAD569807599945F43A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 0290
Signing time: Sat 28 Jun 2025 17:01:30 +0000
Manifest this update: Sat 28 Jun 2025 17:01:30 +0000
Manifest next update: Sun 29 Jun 2025 17:01:30 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: DbzA/yQxI0RNnkQnwzd0kiemODBhVnyXYdVJbXwyPfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ab:ea:47:5c:ad:56:98:07:59:99:45:f4:3a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: Jun 28 17:01:30 2025 GMT
Not After : Jun 29 17:01:30 2025 GMT
Subject: CN=33cb6d72523ee185341379215aecc9584c538a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:57:5a:41:bf:e9:1d:95:96:6b:37:ea:6b:
19:56:b2:10:04:3d:55:f6:39:4a:ba:1e:a2:28:45:
af:62:2f:1d:b2:c2:ec:7b:9b:3a:5a:75:0b:ee:cd:
1f:70:eb:52:dc:fd:e6:ae:79:41:64:cd:a7:79:41:
01:22:39:8d:64:33:4f:55:a4:f4:3e:ba:bc:2e:ef:
5e:e3:5e:39:e1:8e:f8:7c:39:63:55:72:c8:f7:b0:
05:28:03:79:90:ac:22:31:93:12:e5:a9:88:c3:96:
a3:f7:a7:32:7d:39:c2:76:ce:87:92:13:61:0f:eb:
fd:fe:e8:5a:13:47:b9:5e:bd:cc:13:c4:63:52:4b:
1a:fe:87:49:ef:1a:27:6b:d9:de:d7:bd:ab:fb:6e:
7a:ca:42:f2:81:5b:da:d9:f1:2b:99:b2:0e:8a:fa:
46:40:de:fb:60:82:4a:94:64:1d:64:e0:b5:75:a3:
19:0e:7f:25:4b:8b:af:2d:1c:15:2b:0f:0d:f6:6e:
36:99:8e:0d:fe:2a:33:d7:49:84:ca:89:c7:d1:db:
5b:74:b3:95:c3:37:52:96:5d:30:92:13:d1:42:21:
cd:9d:a8:aa:f4:4b:5d:38:fb:2e:f1:4d:9f:e9:33:
c5:75:eb:c0:29:25:a5:78:3a:ce:04:ab:ad:f5:31:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CB:6D:72:52:3E:E1:85:34:13:79:21:5A:EC:C9:58:4C:53:8A:34
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:b6:b7:f7:16:f7:47:24:f6:bc:3b:b0:d8:fa:3d:6b:75:
94:62:5e:a7:68:a7:5e:81:f7:8f:6f:fc:f6:86:51:26:70:e2:
79:59:69:3a:eb:2f:f7:0b:ed:6d:4f:33:14:67:4c:96:4e:22:
5b:c8:c4:cb:94:27:2c:01:28:bd:17:c2:68:c1:62:06:b7:6a:
7f:c5:d7:74:02:e2:32:79:4b:1f:c9:1b:92:77:ea:28:a0:c9:
e6:66:bc:7a:b7:51:59:e3:1c:6e:23:fd:eb:e4:76:f6:a8:eb:
ac:0f:0d:0f:18:b5:b0:67:e1:b3:8d:c4:9e:4e:b3:ee:7b:c6:
35:52:2e:9f:1f:32:df:7b:9c:12:55:40:f0:8a:e9:ac:6c:a6:
2e:8f:65:61:e7:79:b9:f5:9f:b0:e5:a3:9e:1d:20:1a:74:5f:
75:b5:22:e6:4b:68:09:62:c7:64:05:9a:4d:61:19:65:b0:b8:
42:fe:60:ba:63:9c:63:fe:c4:0a:02:43:9a:62:f7:01:75:b5:
1c:1d:57:a8:27:64:68:da:8c:6e:96:a1:33:40:72:88:16:c3:
22:dc:16:f5:9f:c1:c9:87:81:3e:e2:23:da:30:4d:94:7a:f3:
b8:06:72:63:49:50:26:c9:db:f2:4c:1f:57:3b:34:f9:54:8d:
a9:1e:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:36 2025 by rpki-client