Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier: UJib6xtwHiLBf5ke61fdV/OVQ3bbw78plzFQROirLPU=
Subject key identifier: 84:95:12:FD:07:DC:5D:AD:F6:C4:0B:F7:49:B8:1D:14:7D:44:1C:51
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial: 0197B7451F811C3A6E3B8BBD2CB77EDEF0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number: 038D
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: 0io7soR2bcPMaO3NTpE5ZFKxZSWEB7+uht8npShgTt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1f:81:1c:3a:6e:3b:8b:bd:2c:b7:7e:de:f0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=849512fd07dc5dadf6c40bf749b81d147d441c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:a6:a6:3b:63:c9:f9:f7:e3:47:a3:c6:69:
94:cd:3e:8b:72:3c:94:c6:b0:27:ab:e2:7e:f3:49:
ee:72:8d:45:ed:c8:d1:98:5b:04:b1:17:78:65:cf:
e1:55:94:ed:aa:7c:6b:3f:60:b2:3c:0b:55:80:3e:
a5:09:b6:a0:bc:b4:cf:cf:b0:7d:a0:1f:73:ee:8d:
80:fc:21:dd:c3:ce:00:2b:d0:6c:18:25:ce:c3:42:
9e:f7:66:a4:98:08:bd:35:f4:ca:fe:9e:d8:59:21:
cf:c0:f1:ed:15:0f:f4:f9:25:8d:5d:9f:00:e3:a3:
36:5e:f3:79:49:fd:fe:98:7c:8e:bd:d7:ae:da:ad:
80:94:ac:ef:85:a4:0d:55:4c:c2:1c:92:c3:aa:e7:
40:9c:bd:29:fe:a5:fb:9c:fd:1d:7f:e3:90:2c:d4:
92:31:3b:a6:df:3c:16:14:f6:c1:cf:26:b3:63:af:
88:2f:f0:e8:68:95:10:e8:1c:c5:7b:34:93:a5:53:
34:01:c8:e8:4a:df:e6:8e:88:c7:58:dd:ed:94:76:
42:53:fa:3a:53:4d:5d:b5:8b:34:5f:84:06:e5:c2:
06:8a:ac:a3:b1:12:b5:13:73:88:73:ce:0f:07:05:
87:ff:a3:18:0a:56:58:52:06:af:4e:75:fb:ab:d4:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:12:FD:07:DC:5D:AD:F6:C4:0B:F7:49:B8:1D:14:7D:44:1C:51
X509v3 Authority Key Identifier:
keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1e:fb:0c:ad:69:0c:46:10:38:a9:2c:45:d8:97:e2:05:29:
21:e2:6d:f0:9b:1a:25:25:56:77:6d:e1:ca:0d:db:7d:05:bf:
f4:fb:f8:c8:3b:8d:12:81:c8:b5:cb:bc:46:74:17:96:0b:09:
51:c3:d0:a1:70:bc:ce:07:47:eb:e7:f4:1b:3a:4e:b6:f1:9c:
13:67:cc:c2:59:fa:52:e5:a9:72:90:37:f6:52:6f:78:25:90:
ec:e4:7e:89:a8:c3:57:4a:e4:43:3e:a8:a0:77:66:74:95:9c:
2f:77:73:df:1b:9c:ea:e5:96:e7:d1:f5:5d:89:22:d7:bc:1a:
13:59:29:58:77:11:2b:9e:9b:5e:c8:b2:a9:39:ec:1b:2c:3b:
25:3a:28:96:2b:3a:7c:2d:8e:1c:71:3e:8b:a7:91:9c:e9:c2:
8e:95:9b:c0:e2:f7:2e:68:10:f0:32:e4:e1:d8:c6:b8:70:6c:
56:38:1e:3a:23:30:e7:cb:62:59:96:4a:fd:02:3b:f1:ff:5b:
63:1c:1e:04:52:40:30:5c:c2:30:e8:6a:48:3a:65:c2:19:4f:
28:a1:a6:52:17:68:d4:21:54:41:cc:d6:56:5d:04:9c:94:ce:
88:cc:5c:18:b0:e8:c3:a8:fb:36:61:d7:19:b3:87:6a:15:a2:
c7:0a:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:25 2025 by rpki-client