
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: q5tVNXXBQy7weEfe3oL3poT9PFM2d4lLAPr9pp3vhhM=
Subject key identifier: 32:A0:6E:39:B2:1E:26:7B:65:72:5A:D3:27:5F:FC:B6:76:CB:E4:67
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 0197C6B88ECF60FC90B267614138E6DF5F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 092E
Signing time: Tue 01 Jul 2025 16:01:13 +0000
Manifest this update: Tue 01 Jul 2025 16:01:13 +0000
Manifest next update: Wed 02 Jul 2025 16:01:13 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: rmC5hebngcP//5II+IT5IYdHJBp2HLCxLcgE4eHfTRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:b8:8e:cf:60:fc:90:b2:67:61:41:38:e6:df:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Jul 1 16:01:13 2025 GMT
Not After : Jul 2 16:01:13 2025 GMT
Subject: CN=32a06e39b21e267b65725ad3275ffcb676cbe467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:e7:01:c0:d6:25:af:10:84:21:4c:3f:c1:
99:75:86:91:26:c9:bc:d0:82:c2:0e:ab:ff:65:aa:
c6:4a:79:b0:12:75:7a:fe:ed:b9:a1:65:09:3e:52:
85:12:fd:f5:6f:82:10:36:0a:3e:7a:95:96:35:83:
4f:5f:78:34:ec:5b:58:e0:3b:c8:89:ad:c8:93:7a:
37:df:34:56:14:4e:bb:6d:b0:7e:3e:cf:af:bf:a9:
06:b9:a3:ac:6c:59:ea:5d:74:28:82:b8:ae:3f:a9:
6b:6f:56:7b:5b:63:90:3f:f1:26:74:a5:fb:02:d3:
6f:f3:43:20:62:34:0f:83:3f:0a:5c:3b:84:01:ba:
2b:09:4d:b4:07:23:bb:65:90:93:00:ef:fd:03:dc:
44:4f:9f:07:a4:3b:90:cd:fb:71:d9:aa:d9:35:77:
cf:d7:92:ab:8f:fb:b8:ff:f0:21:48:8e:b1:72:ad:
ac:6e:b0:7a:53:03:b1:10:f5:c3:da:84:54:cc:bc:
25:1d:36:40:df:8d:e4:6e:70:da:bf:9a:54:a9:d0:
52:a7:b5:73:be:16:20:22:7d:ab:6e:03:f0:e5:f5:
fe:38:b3:46:22:8e:af:2d:af:01:58:c1:46:77:5d:
9d:cd:da:78:14:36:6d:bf:bf:49:a3:36:c1:dd:56:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A0:6E:39:B2:1E:26:7B:65:72:5A:D3:27:5F:FC:B6:76:CB:E4:67
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6a:56:ab:20:83:e1:3c:0f:95:85:2a:fa:5d:30:5a:d7:d3:
10:9d:0a:89:3d:76:8d:13:77:3d:5d:91:87:4b:9b:58:56:03:
e1:52:4f:83:2b:44:c1:06:eb:1a:bc:fc:a4:9d:8a:97:94:46:
b8:53:12:8a:d5:95:c7:52:a8:1e:6e:c8:32:46:e9:b2:ef:04:
54:e3:a2:2c:2f:a1:b8:dc:03:35:a4:2d:b3:fa:94:14:e8:8f:
d5:c7:26:06:ff:be:75:6b:97:3e:f0:41:83:f5:e6:a1:a8:dd:
33:18:1c:6a:95:a7:b5:57:1f:fe:37:7c:6d:18:7f:6a:d9:29:
b8:35:f9:4f:c6:bd:79:8e:7a:8a:47:d1:77:97:ec:7f:a2:79:
bb:39:fb:43:bd:e6:dd:ec:97:45:09:c3:c3:1e:c2:9a:81:2d:
be:c4:1c:92:50:04:fc:c4:a1:3f:93:19:e5:84:4d:48:74:b5:
9d:fb:22:33:98:30:a4:f9:ae:be:e6:6a:3d:aa:3c:f4:9f:40:
15:ea:88:db:15:f5:6d:25:e4:7c:f5:14:ce:2e:64:a6:c2:3b:
68:c3:72:ca:50:e0:e4:05:82:0d:f4:8a:3d:d7:52:8b:16:20:
d0:33:84:ad:cf:6f:47:a9:76:f4:68:ae:54:9d:13:86:16:d4:
77:51:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:36:42 2025 by rpki-client