Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
File: XHOCiOHdRuIcmgORGXJEtHjQqyY.mft (raw, json)
Hash identifier: 1tSffU6z/24p7zoe2onCETBCzuxnRIKYJJBfZ30BWpg=
Subject key identifier: 38:70:DE:B5:EE:DA:06:89:A5:41:08:9D:6A:29:D8:83:3B:93:BA:76
Authority key identifier: 5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
Certificate issuer: /CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Certificate serial: 0197B8908643408129D8A284AB3936695BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:02:48 +0000
Manifest this update: Sat 28 Jun 2025 22:02:48 +0000
Manifest next update: Sun 29 Jun 2025 22:02:48 +0000
Files and hashes: 1: XHOCiOHdRuIcmgORGXJEtHjQqyY.crl (hash: fCwpG2jhBkljRraakCc0KhxcZKN3WIvSZQ07VadoReA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:86:43:40:81:29:d8:a2:84:ab:39:36:69:5b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Validity
Not Before: Jun 28 22:02:48 2025 GMT
Not After : Jun 29 22:02:48 2025 GMT
Subject: CN=3870deb5eeda0689a541089d6a29d8833b93ba76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:14:ee:09:06:3c:32:2d:41:37:2c:c2:77:
ff:3e:1d:de:92:70:41:22:ed:b4:b0:34:a5:1d:0b:
34:59:ee:bc:36:49:99:b8:59:08:72:f4:32:45:c3:
91:3b:45:04:95:9d:67:66:05:f6:99:d0:c1:49:75:
34:66:80:5c:8e:7f:11:f2:fa:84:c8:e2:dc:07:8b:
e6:fd:0b:ba:f6:c9:8c:2f:f8:7b:a8:eb:43:29:8e:
bf:e5:66:87:9b:69:26:92:6e:a4:5e:c7:a0:7f:7f:
3c:f5:76:29:18:5b:aa:89:91:47:08:ce:db:74:36:
b5:b2:80:08:c4:8d:f5:af:e3:5c:bb:6d:29:1a:42:
e0:41:33:cf:20:dd:86:b9:7f:5d:60:70:84:37:e3:
67:bb:6c:5c:ea:89:d5:6a:e5:b6:b7:aa:89:70:56:
35:39:8f:d6:45:3a:7e:7c:b0:26:74:7f:72:bb:8a:
e7:73:bb:37:a6:49:cc:ee:72:33:fc:08:72:b5:ff:
6f:c0:d5:b6:fe:fe:ff:e7:bd:8e:18:ca:f7:e9:e2:
e4:01:f5:18:15:b9:69:89:a5:7d:5c:5d:5c:d9:06:
54:79:d7:81:77:8d:f7:e8:d9:2b:30:df:cd:bc:cc:
0a:84:0e:13:22:ea:a9:d7:bc:52:d4:b5:3a:e5:64:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:DE:B5:EE:DA:06:89:A5:41:08:9D:6A:29:D8:83:3B:93:BA:76
X509v3 Authority Key Identifier:
keyid:5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:50:34:06:cf:e3:97:2a:e1:51:c3:35:58:a9:d2:1e:94:d8:
d0:3b:96:b5:36:1a:b0:c9:64:d6:df:62:9e:65:1d:8a:b8:19:
03:95:6e:d1:1d:6e:88:85:9e:cc:5a:7e:ba:41:a5:a5:45:80:
f4:5d:19:61:ad:25:15:bc:b7:04:48:ec:1b:81:14:c6:55:63:
03:40:3e:17:ab:6f:5a:5f:5c:59:58:59:c6:73:19:99:4f:52:
1c:34:b3:0a:3d:61:7d:d2:57:78:66:e0:49:87:de:a3:fd:b2:
8f:3a:44:c9:9a:85:70:d5:0d:3c:b6:6b:e3:69:ce:8d:74:60:
e5:bf:5a:4d:60:23:16:4e:d1:95:0e:19:13:b7:95:ae:f7:c5:
06:36:50:8e:d3:25:e7:03:44:1e:01:1b:09:fd:5e:bc:0a:9b:
bc:6b:9b:d6:0f:f5:cc:cb:71:c9:e6:95:c1:4b:db:27:8f:94:
b0:1f:38:92:25:99:e0:23:a4:93:1b:ff:cb:bb:a6:4d:1b:f9:
ea:c9:bc:fe:b9:82:65:9c:b5:96:a0:32:35:fc:4d:21:6a:e6:
1e:a5:5c:31:2f:44:5e:62:9a:30:ea:c9:d2:23:c8:f5:28:c1:
28:2d:d7:72:61:85:8b:66:95:03:83:ca:fb:9f:65:65:1b:bd:
0e:03:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:38 2025 by rpki-client