
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier: zkgBq0fKXrH/98rNDPvrRTtcoBuA+BhRhdB6y/UfeJc=
Subject key identifier: 0D:12:66:04:29:56:DB:4E:44:9E:27:7B:BD:97:79:9C:02:3F:26:7C
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial: 0197C537DFB8E66D70757B27051A42FD8C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number: 0185
Signing time: Tue 01 Jul 2025 09:01:02 +0000
Manifest this update: Tue 01 Jul 2025 09:01:02 +0000
Manifest next update: Wed 02 Jul 2025 09:01:02 +0000
Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: aBH9I7xV1lFWZ72mHDEakxDsmxDMLID+THudpWfEqa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:df:b8:e6:6d:70:75:7b:27:05:1a:42:fd:8c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Validity
Not Before: Jul 1 09:01:02 2025 GMT
Not After : Jul 2 09:01:02 2025 GMT
Subject: CN=0d1266042956db4e449e277bbd97799c023f267c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:4b:09:bf:ec:92:a4:b6:35:5b:d3:6d:af:
7b:8d:af:cd:e7:73:72:a3:1d:62:a4:13:3c:1e:5f:
1e:54:4d:ed:90:58:d6:e7:36:ee:e3:53:6b:2f:a2:
07:90:52:2f:3a:39:f7:c8:c1:b0:32:49:5c:f4:97:
c8:58:49:c3:3d:39:cb:9f:f8:3f:83:38:8d:e1:07:
04:b0:ea:b9:50:7e:8d:19:31:8a:e8:fc:1f:72:51:
9e:45:55:b3:bb:31:fa:df:8f:21:31:88:17:e1:3a:
91:cf:1d:63:98:c2:89:07:fb:86:cd:2f:6c:5c:06:
54:6c:55:33:dc:c7:46:4e:6c:a3:e2:a5:51:b3:39:
bc:50:ed:84:11:8b:36:a8:15:2b:9a:2c:93:a7:18:
72:3e:6b:b3:62:7c:69:ae:3f:1e:12:83:48:03:76:
09:80:a8:e5:91:8c:c7:79:51:8e:0e:5b:74:67:16:
ac:fb:f3:c4:da:c8:20:6c:4f:a1:ce:b7:4c:60:0b:
ba:cd:d5:3a:34:79:e0:5c:ef:8d:5c:8b:be:90:26:
37:4e:a6:38:67:14:3d:17:23:15:5d:0c:fc:f3:ef:
17:3b:01:25:bd:8a:f8:96:74:7e:f7:5b:c5:a8:8d:
b4:6d:27:36:54:c1:f0:04:c7:ea:6b:bb:91:7a:87:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:66:04:29:56:DB:4E:44:9E:27:7B:BD:97:79:9C:02:3F:26:7C
X509v3 Authority Key Identifier:
keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:51:6e:88:b4:36:8a:0f:44:e4:80:6d:42:90:9f:41:f2:af:
c5:58:1c:52:2d:0a:71:69:34:82:1b:3e:c4:b6:74:cc:c4:32:
49:87:4c:a7:db:bc:a8:c7:55:c2:f4:dd:c3:35:0a:45:a6:e7:
a0:1a:29:0d:ad:73:67:c4:c0:7c:db:b3:01:a2:c3:15:d7:79:
2e:0d:eb:a3:2b:3e:9f:19:83:ad:28:9a:ab:3c:e4:7b:5e:a7:
46:a0:f2:58:c7:60:af:ba:f4:79:32:e0:0f:4b:10:55:f3:76:
aa:f0:17:83:8b:47:2e:32:11:90:fb:1e:a3:13:c5:64:78:80:
a7:1f:0a:0e:6e:d2:35:6a:ae:76:1a:49:24:c5:0c:cc:f1:65:
1f:d8:bf:34:9e:80:dd:4f:3e:83:84:de:cd:aa:0c:63:1c:8e:
b3:2d:1f:88:00:2d:57:41:c5:53:e5:38:0c:01:9e:3e:84:39:
cf:4f:31:20:17:88:b5:6c:07:16:a0:f3:df:27:a1:1d:09:f4:
d1:d6:61:fb:5c:41:a5:a2:dd:81:a2:20:74:16:46:76:27:3b:
e9:d0:8e:f1:e8:a6:ac:36:ee:ae:de:8d:cc:bf:bd:4a:35:16:
22:55:0f:bb:43:71:fe:d4:9f:64:4a:da:73:5e:81:bb:82:26:
86:57:9e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:29:51 2025 by rpki-client