Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json)
Hash identifier: HucEIgGMT6Fgl2M1ApE+queZiS4+CbtqFAAFHqy2e6Q=
Subject key identifier: 7D:6F:30:E9:65:EB:A9:EB:6E:E4:A3:DB:63:07:9E:D7:45:11:01:91
Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Certificate serial: 0197B933DC48BD694E5282E163FECE0BA815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
Manifest number: 078C
Signing time: Sun 29 Jun 2025 01:01:12 +0000
Manifest this update: Sun 29 Jun 2025 01:01:12 +0000
Manifest next update: Mon 30 Jun 2025 01:01:12 +0000
Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: NFq6U+YJjab3K5uUvBrB0mVtApWTyY435JtmExjeo8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:dc:48:bd:69:4e:52:82:e1:63:fe:ce:0b:a8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Validity
Not Before: Jun 29 01:01:12 2025 GMT
Not After : Jun 30 01:01:12 2025 GMT
Subject: CN=7d6f30e965eba9eb6ee4a3db63079ed745110191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:60:a6:d2:5a:66:95:82:0b:64:2b:89:b5:
b1:c9:a5:84:b5:65:ff:4f:25:1a:8c:f8:b0:78:4a:
db:cc:c2:11:cf:d9:00:95:27:02:6b:dc:89:e4:1b:
a6:be:09:d0:c0:00:5a:e1:2c:de:35:b7:73:e6:53:
0d:d3:38:dc:cf:22:3d:7e:b3:6f:03:39:72:59:79:
6d:28:58:af:c8:17:ac:5d:60:ee:b8:b6:c3:6c:41:
91:ac:f2:fb:5d:a2:c6:b1:3a:89:d2:cc:00:3a:2a:
2f:fb:db:b2:40:af:23:0b:e2:7b:69:55:58:e5:fd:
67:b3:af:ab:80:6a:74:af:65:b0:a0:07:42:69:08:
43:4d:3a:76:ce:5f:cf:b5:65:a4:15:b4:18:82:96:
d0:65:76:f7:f2:9b:c2:54:37:5d:e7:03:eb:40:b0:
f4:ac:0f:de:d3:ff:83:9b:f6:2e:5b:48:40:b5:21:
64:ac:6d:17:03:05:ee:94:ce:2b:8a:78:18:be:94:
65:25:c2:ff:97:a2:8d:74:fc:0e:97:39:0e:b7:f7:
d0:67:43:5d:58:02:46:ce:63:c6:a2:71:5e:4b:4d:
4a:39:08:ef:6b:b0:f2:bb:df:96:e1:dd:dc:52:d1:
29:6d:54:f5:41:1e:54:b4:02:07:0c:ba:43:30:09:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:30:E9:65:EB:A9:EB:6E:E4:A3:DB:63:07:9E:D7:45:11:01:91
X509v3 Authority Key Identifier:
keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a7:7c:ef:08:44:ea:41:ea:5c:ba:91:aa:b0:cf:86:46:3a:
c8:82:02:d8:d7:ce:1f:ad:2d:fd:72:fe:3c:90:a5:10:d0:da:
00:da:7c:26:10:8e:7d:45:f6:38:45:62:f2:ea:10:69:02:20:
8a:f8:18:90:0c:f5:5e:8d:b9:b5:d1:c7:a7:cd:0b:5f:1a:36:
93:d3:f7:61:c3:35:c5:83:45:9c:51:de:29:e0:d0:11:f5:ce:
45:ba:c8:2d:6f:7f:5d:05:80:71:1d:ab:a6:74:6c:91:37:e8:
fa:f0:e0:b7:fe:f4:fe:80:75:34:31:d2:72:8f:d3:cc:b9:e8:
dc:88:b9:c1:b7:1e:4f:20:8b:be:89:93:60:f4:d0:e2:5e:d6:
95:52:d8:28:4d:0e:fd:af:58:fa:a9:49:a8:90:1b:4e:fd:55:
c8:9e:68:bd:90:5b:26:2f:a1:4e:9d:c6:bc:ea:74:35:dc:6c:
9e:bb:96:24:fa:0b:9b:c8:c1:65:09:df:98:60:1e:1b:b9:ec:
04:0c:9e:f9:e5:52:b6:9a:da:c2:e5:5a:91:f2:c7:5e:ee:00:
ae:74:02:43:c4:2a:7a:20:fb:fe:b1:49:5b:a5:5a:25:8c:ce:
2e:4e:c1:e0:7b:c8:33:b9:f9:3f:23:10:29:b5:b7:e5:61:33:
3c:47:0d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:32:02 2025 by rpki-client