Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
File: xIzPWOSy4trdSoSDPAZ87iuXRek.mft (raw, json)
Hash identifier: S31aBvElnhUX/CsguREX0X3VhBA1zgnR+GgJm/LRLaI=
Subject key identifier: 63:9C:26:B2:FE:B2:76:04:F5:2C:76:95:C5:57:59:04:EB:52:A3:67
Authority key identifier: C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
Certificate issuer: /CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Certificate serial: 0197B7EA4C3CDEFC0F1CC27526B81D1EDAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
Manifest number: 07E5
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: xIzPWOSy4trdSoSDPAZ87iuXRek.crl (hash: LFVvsqMQwbLCrLwDDQICyw1VYcfdIKOYXDY4IIEmbWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4c:3c:de:fc:0f:1c:c2:75:26:b8:1d:1e:da:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=639c26b2feb27604f52c7695c5575904eb52a367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:38:60:98:b3:ff:d1:8c:0d:e0:d7:75:a5:
fc:6c:f4:41:af:34:57:45:1c:9b:10:17:76:e8:1d:
e9:ae:bb:1b:b0:05:f4:eb:bf:e1:11:c2:9a:97:24:
b3:b0:d2:f8:be:8a:05:45:9f:a4:44:70:0c:36:86:
2e:ad:8f:39:4e:7e:7a:ac:25:d4:75:c3:d2:b7:b0:
94:5e:62:79:78:b2:06:8b:90:62:26:3b:a3:10:e8:
12:f0:20:14:44:71:2d:44:32:8c:58:5c:7b:8a:84:
fc:47:df:6d:72:7f:d5:e2:63:33:ce:54:20:d9:e6:
44:c8:86:2e:3a:e5:4d:c0:17:dc:02:e2:ce:21:b5:
4c:f8:43:81:b9:e9:78:b4:81:6a:c3:31:2b:fc:a1:
e0:84:b7:e3:c7:31:fd:51:12:ab:93:7d:41:5d:ef:
36:76:02:e4:85:dc:6b:a8:15:7d:78:16:8a:5c:bc:
55:30:ef:5f:03:e4:a9:6f:09:f4:37:ef:5a:07:16:
bc:51:85:55:96:d8:02:81:7e:85:b9:e8:74:c6:6b:
8c:af:7b:16:60:c6:3a:e4:3d:e8:42:f3:48:de:e1:
d8:6e:7a:69:bc:db:57:72:1e:45:b5:06:f8:21:18:
23:62:da:20:0d:37:a2:4e:64:9b:1f:ab:49:91:a2:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9C:26:B2:FE:B2:76:04:F5:2C:76:95:C5:57:59:04:EB:52:A3:67
X509v3 Authority Key Identifier:
keyid:C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3e:0c:ee:f8:54:e8:93:e5:38:71:75:28:2f:26:0c:63:55:
e3:e5:14:6b:c9:96:90:b1:49:87:5a:d5:e0:a2:40:ec:81:ab:
99:ba:dc:11:b9:de:84:68:0b:e9:7e:3f:a8:b8:1d:56:ef:ba:
d6:dc:91:dd:1d:9c:3b:6f:25:ab:ac:6c:ec:70:6b:98:ff:4b:
e9:70:d1:01:65:ca:8f:f1:84:96:a6:15:05:05:8a:74:7e:83:
5b:3d:f2:f7:3b:16:7f:55:d3:4f:ab:d3:3d:b5:14:aa:7b:c0:
a9:62:cb:2a:38:52:a8:c0:27:2f:4c:98:88:4b:7c:56:7d:4b:
3f:be:13:85:b2:b0:f3:80:df:bf:ca:7a:2f:58:9b:71:42:6c:
bc:a3:78:c8:45:42:ce:41:82:ab:f4:5c:0d:9e:bb:24:bd:44:
d1:8e:79:b8:18:9b:e9:25:2a:90:e3:9a:3b:1d:6a:86:55:0f:
a4:b8:d9:75:dc:7b:75:ff:06:3b:ea:1c:86:e0:f8:10:4e:d9:
b6:28:7f:09:91:60:dd:8a:06:f4:a4:5c:29:3b:c1:e3:ec:ea:
4f:ea:5a:f8:ae:56:11:9b:16:a0:77:3e:b1:b5:24:45:c5:8a:
a3:af:49:ec:f2:0a:bf:0b:84:d8:eb:31:7b:bd:63:d7:7a:41:
da:5d:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:26 2025 by rpki-client