Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: Nouxms6M7DIkBN7AYTNNd2gcElIUeQ8/hM0X8zPYnVQ=
Subject key identifier: 0F:34:59:23:C8:63:A2:62:C5:B0:E4:B7:41:6C:5E:62:B4:C8:94:00
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 0197B8908AB4A8E1289AB084BFF8E40A704D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 0302
Signing time: Sat 28 Jun 2025 22:02:49 +0000
Manifest this update: Sat 28 Jun 2025 22:02:49 +0000
Manifest next update: Sun 29 Jun 2025 22:02:49 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: qeb2c0B/kBpEooNJ/c+hGJU9K9WfR+qN8Zr0aUIZt28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:8a:b4:a8:e1:28:9a:b0:84:bf:f8:e4:0a:70:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Jun 28 22:02:49 2025 GMT
Not After : Jun 29 22:02:49 2025 GMT
Subject: CN=0f345923c863a262c5b0e4b7416c5e62b4c89400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:61:21:44:45:14:28:35:1a:68:29:2f:d9:
80:d5:d3:9e:38:7f:a8:13:cd:14:fb:d0:09:5e:9d:
37:08:90:61:83:cb:d4:03:fc:36:0b:90:92:57:2b:
dc:50:bf:1d:bf:2c:92:13:ab:2b:0c:7f:fb:ea:dd:
2d:05:51:06:37:26:48:be:49:9c:7e:7f:08:5f:31:
f3:59:c0:d7:0a:43:47:e1:c7:4a:72:a9:a2:b1:cf:
b4:0e:9a:63:4f:8a:54:4c:36:f5:0c:6f:09:27:46:
04:a6:f8:39:26:4e:a5:ef:8d:65:5c:02:0f:d2:5f:
38:9d:8c:61:a9:b5:a2:07:45:ba:fc:62:24:64:1f:
5c:11:0f:53:e6:b9:a1:c2:c0:90:dc:55:35:e7:9e:
ed:2c:d4:4e:03:4b:b1:90:97:06:05:f5:23:87:bb:
a4:51:bf:44:1f:7b:67:ca:92:bd:b3:ed:6e:fe:ff:
7e:83:2b:6e:e3:15:5b:12:f5:b6:07:5b:2d:6a:40:
c9:d5:a2:a6:ac:27:1f:c0:27:35:47:c7:18:12:76:
15:da:b5:81:bc:76:54:11:89:ba:cb:1b:95:93:a0:
30:5b:06:89:c2:d5:50:08:f8:b8:f4:3a:9a:ff:5f:
09:60:7d:55:3a:cf:93:3e:f1:f2:7e:0a:27:11:37:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:59:23:C8:63:A2:62:C5:B0:E4:B7:41:6C:5E:62:B4:C8:94:00
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6f:f3:1b:8a:61:05:b8:28:a3:22:eb:d8:c5:5a:1a:f4:1a:
0b:b8:0a:5f:6a:bf:79:a1:68:6e:54:0e:14:68:d7:16:cc:61:
1f:0a:a1:23:c4:81:9d:e6:b5:59:da:fd:8d:6e:c1:f4:fe:1d:
d8:29:e7:cc:cc:cc:b9:fb:70:88:55:ef:5f:71:d7:59:92:2e:
ed:e1:f3:d3:db:41:f3:d8:69:cd:b8:d2:12:39:83:bc:ed:8e:
f8:75:b8:b5:1a:41:2b:46:94:60:86:b6:ee:63:09:49:16:c9:
f0:c4:21:a5:8b:8b:10:70:ac:19:46:0d:d4:a9:58:c0:7e:ff:
c2:15:2d:0b:01:dd:43:f1:61:b6:84:68:a8:07:99:ae:c8:3b:
79:74:f8:49:80:7c:15:0c:e5:38:32:90:31:d3:f5:ae:e6:d2:
c1:5a:90:74:a6:71:16:49:5e:91:60:a5:45:92:ac:ef:17:b8:
7e:9d:2b:ba:07:fc:33:28:5e:63:b7:2b:36:55:32:33:24:48:
d2:c1:ad:dd:39:3e:dc:c8:86:01:eb:96:f1:14:4b:66:b1:0a:
d7:9d:3d:e7:4d:8f:55:a3:4a:6c:37:0f:54:0c:f7:03:e3:cc:
da:b7:98:02:98:1a:e4:65:9a:db:cf:e7:a6:3c:1b:3e:2e:76:
08:e1:86:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kIq0qOEomrCEv/jkCnBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NDhjYmZkZTcxYTUzMDVjYWJmZDRlNzljZTZkZWU3MTQ4
MjgxNTEwHhcNMjUwNjI4MjIwMjQ5WhcNMjUwNjI5MjIwMjQ5WjAzMTEwLwYDVQQD
EygwZjM0NTkyM2M4NjNhMjYyYzViMGU0Yjc0MTZjNWU2MmI0Yzg5NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+dhIURFFCg1GmgpL9mA1dOeOH+o
E80U+9AJXp03CJBhg8vUA/w2C5CSVyvcUL8dvyySE6srDH/76t0tBVEGNyZIvkmc
fn8IXzHzWcDXCkNH4cdKcqmisc+0DppjT4pUTDb1DG8JJ0YEpvg5Jk6l741lXAIP
0l84nYxhqbWiB0W6/GIkZB9cEQ9T5rmhwsCQ3FU1557tLNROA0uxkJcGBfUjh7uk
Ub9EH3tnypK9s+1u/v9+gytu4xVbEvW2B1stakDJ1aKmrCcfwCc1R8cYEnYV2rWB
vHZUEYm6yxuVk6AwWwaJwtVQCPi49Dqa/18JYH1VOs+TPvHyfgonETexTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA80WSPIY6JixbDkt0FsXmK0yJQAMB8GA1UdIwQY
MBaAFMZIy/3nGlMFyr/U55zm3ucUgoFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMTZmMGQtMzQ3Yi00Y2Q5LWEwOWYt
YTlkMmU2YTNkMGYxLzEveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMTZmMGQtMzQ3Yi00Y2Q5LWEwOWYtYTlkMmU2YTNkMGYx
LzEveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW/zG4ph
BbgooyLr2MVaGvQaC7gKX2q/eaFoblQOFGjXFsxhHwqhI8SBnea1Wdr9jW7B9P4d
2CnnzMzMuftwiFXvX3HXWZIu7eHz09tB89hpzbjSEjmDvO2O+HW4tRpBK0aUYIa2
7mMJSRbJ8MQhpYuLEHCsGUYN1KlYwH7/whUtCwHdQ/FhtoRoqAeZrsg7eXT4SYB8
FQzlODKQMdP1rubSwVqQdKZxFklekWClRZKs7xe4fp0rugf8MyheY7crNlUyMyRI
0sGt3Tk+3MiGAeuW8RRLZrEK1509502PVaNKbDcPVAz3A+PM2reYApga5GWa28/n
pjwbPi52COGGNg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:38:14 2025 by rpki-client