Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: 76XSyC0mHRK3suEvcB8h9t2l9wmkmDDTbJw+UWCAYgk=
Subject key identifier: D4:D2:5A:D5:A7:08:4F:F8:A3:9F:6E:5A:1D:B7:A8:F3:88:17:AB:42
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 0197C45C18A7F5C2B650329D10A030900BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 058B
Signing time: Tue 01 Jul 2025 05:00:59 +0000
Manifest this update: Tue 01 Jul 2025 05:00:59 +0000
Manifest next update: Wed 02 Jul 2025 05:00:59 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: URpNZkFpzrP8cNuEBdvmQX9skOi4jckBTrza/jHzaXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:18:a7:f5:c2:b6:50:32:9d:10:a0:30:90:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Jul 1 05:00:59 2025 GMT
Not After : Jul 2 05:00:59 2025 GMT
Subject: CN=d4d25ad5a7084ff8a39f6e5a1db7a8f38817ab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:c0:55:56:a2:0c:06:98:95:b4:a2:07:e5:
8a:e5:ba:ed:05:b2:ba:c4:67:14:ae:8e:3d:ac:91:
b9:3e:4d:93:7a:51:5f:43:28:b0:c4:a4:ab:b5:d6:
d3:bd:85:1b:53:e3:dc:a0:75:d4:07:30:a8:77:48:
e7:ac:be:08:1d:b8:c3:8a:3b:ee:b0:53:1d:98:c5:
f4:3c:a8:6a:3c:93:3b:73:00:57:0f:7c:2f:91:7d:
26:0f:18:0f:67:9b:c6:4a:9c:70:c5:e9:a1:f8:96:
db:cf:ed:7e:17:55:7a:25:d9:b8:78:2a:19:80:cf:
83:3b:32:02:61:80:e6:cb:f1:68:01:6e:1d:4a:64:
19:7b:67:43:f8:15:dd:63:ac:32:d6:17:c2:3c:b0:
d6:8c:c1:40:34:b9:ca:34:82:c8:9a:18:1f:f7:cf:
32:d5:3b:1d:55:14:9c:47:eb:6c:e0:b0:fa:a1:d4:
e7:17:2c:5e:76:b3:ba:c7:1c:54:c3:fb:4f:e6:5b:
18:a2:f3:18:7e:74:db:1d:39:fe:66:af:a4:c3:b1:
7c:66:32:d4:7f:ab:86:d6:ac:7f:95:2b:67:7d:b9:
e8:b7:9c:96:5e:0c:f6:dc:6d:35:03:2c:c1:79:77:
d5:e7:38:f3:38:a5:13:9e:a9:be:e9:27:11:9b:22:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:5A:D5:A7:08:4F:F8:A3:9F:6E:5A:1D:B7:A8:F3:88:17:AB:42
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:83:62:f8:08:4a:f7:12:4b:aa:83:68:da:ab:a7:69:88:7b:
e8:08:bd:b8:46:06:08:07:0b:c8:da:af:e6:6a:61:0d:3f:5f:
90:43:e9:12:0e:2e:60:45:5f:4a:81:53:b2:e9:89:bb:01:04:
d2:fc:77:1f:8f:31:7a:b4:75:12:e0:c1:a7:86:7c:6d:22:08:
23:2f:b5:f6:b4:52:f9:51:cc:93:c8:f7:1e:82:66:d0:6b:c5:
d9:0b:ab:f7:cb:a1:b7:0c:66:7e:c2:b7:75:1a:24:b3:98:1d:
6a:ee:98:79:c4:73:94:6f:37:f3:de:14:21:d3:15:3d:4d:ff:
1c:f2:5a:5c:6c:02:d8:e2:bc:d1:ec:eb:7b:93:92:c7:fc:0b:
b0:c6:5e:8c:7e:b9:53:54:37:31:cd:4e:1c:de:0c:fb:ac:db:
2f:a4:21:20:c2:71:6f:ae:31:3a:af:d1:ba:df:8f:4e:ba:4d:
cc:dd:52:67:2c:d5:8a:3d:54:db:fb:6e:66:00:00:e6:2d:c2:
27:7c:c6:25:ac:10:2b:3e:a1:84:41:a7:43:1c:55:2a:26:17:
21:9d:1c:82:b4:79:d7:2a:5c:74:d6:b3:2f:6a:9a:e3:d5:e8:
f9:d9:39:43:7c:97:6c:a7:39:98:d1:2b:1b:1f:ac:7a:60:34:
b0:13:32:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:10:03 2025 by rpki-client