Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier: +IkPsaMWywYC9TO9WXrv9NuesT7+y82O4DyzinOIb1c=
Subject key identifier: B2:9A:6A:1F:F4:1D:7C:F0:BC:11:89:95:B3:30:32:67:A6:B6:0E:F9
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial: 0197C049ED7F50F334DFE44E85068F00A35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number: 0A1B
Signing time: Mon 30 Jun 2025 10:02:39 +0000
Manifest this update: Mon 30 Jun 2025 10:02:39 +0000
Manifest next update: Tue 01 Jul 2025 10:02:39 +0000
Files and hashes: 1: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: aKRs/VeCJOf40fS5RF5XPeBTc2Qxb/pk+keg3o0tepU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:ed:7f:50:f3:34:df:e4:4e:85:06:8f:00:a3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Validity
Not Before: Jun 30 10:02:39 2025 GMT
Not After : Jul 1 10:02:39 2025 GMT
Subject: CN=b29a6a1ff41d7cf0bc118995b3303267a6b60ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:9c:3c:48:bb:0e:51:12:07:c5:51:e0:c9:
58:66:6d:ee:7f:4a:b0:a8:6a:1d:61:91:c8:dc:4d:
b6:ad:1e:68:64:25:ce:0e:b2:98:ef:ac:a3:9c:58:
98:11:d9:e9:e7:44:c8:24:d9:18:d2:68:97:bd:85:
44:0f:0e:2a:2d:fc:bd:b5:78:21:3e:7d:7b:11:84:
d1:67:69:d4:cd:48:b4:bd:e1:bf:ea:0b:b3:03:23:
0f:86:12:56:be:35:23:e5:96:32:70:55:3c:4d:c3:
57:17:25:f5:f2:20:8c:8d:25:90:97:f8:0d:84:85:
ea:a3:b4:52:d5:e4:e8:d1:6c:94:bc:01:d6:5d:c4:
c4:79:89:c6:89:72:eb:15:81:89:8d:81:8e:b2:c1:
6d:66:2d:00:f5:46:56:5b:27:6c:9f:13:e2:95:78:
33:67:aa:de:ff:dc:51:a8:f6:02:98:da:90:2b:ab:
33:ea:e9:c1:d7:c2:d5:f1:ce:85:0f:60:5a:0d:34:
6f:ea:16:68:f2:b9:56:cc:d1:1c:9a:52:62:89:2e:
84:d7:3c:77:79:73:3b:7b:3f:00:bc:51:b8:84:46:
7b:a1:21:e6:9f:ef:04:ce:f4:38:f0:de:47:99:47:
25:8a:10:70:67:e2:de:49:f4:bf:98:c8:a4:e9:8e:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:6A:1F:F4:1D:7C:F0:BC:11:89:95:B3:30:32:67:A6:B6:0E:F9
X509v3 Authority Key Identifier:
keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:16:3c:88:1e:c8:8d:b5:2d:d6:71:25:13:b1:5c:ae:4f:22:
5d:8d:41:1e:1a:32:3c:51:69:91:60:1f:2f:2d:d6:b7:1a:48:
42:b0:70:ba:9f:cf:c2:8f:30:23:33:e5:29:d8:b3:f1:8e:c0:
39:49:37:84:7d:b1:26:5c:3b:5a:4b:16:4f:2c:7c:41:2e:1b:
34:34:65:19:aa:38:c2:73:36:5d:3d:f2:60:d1:c2:63:66:22:
4d:e0:37:8c:60:23:80:13:f7:86:61:1d:a7:24:b8:8e:8a:1c:
53:3f:41:db:3f:23:35:b8:67:5d:e5:28:92:b7:4f:8a:ec:ef:
7b:cc:40:54:ac:46:f6:d4:cd:d3:01:0e:98:85:49:e4:0c:ed:
fe:08:00:56:ac:43:75:b5:4c:f3:fb:80:28:b2:35:7d:b1:fb:
bb:92:59:65:1d:2d:00:57:fc:2d:f5:0b:e9:06:79:03:81:84:
69:5b:92:2a:e2:55:2f:9a:26:b4:92:08:af:4d:2c:36:7c:e6:
64:5c:3c:9d:26:4b:2c:3c:8e:52:11:1b:2b:da:67:93:fe:f3:
34:eb:fe:de:6f:02:51:73:8b:0c:90:f3:36:16:15:75:1d:95:
d0:8d:ea:50:a6:2c:f3:34:e0:15:73:38:eb:b3:d9:53:3d:5a:
63:07:6b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:13:13 2025 by rpki-client