Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
File: xLxp1Co7FePOy5HHcrpkM8URvpk.mft (raw, json)
Hash identifier: qK8lVIjJxkjLXSV3J7din6oa+5Q7/eWFFF8Kf9nxbns=
Subject key identifier: 5A:CF:0C:3E:0E:F1:E9:2D:6D:41:6D:65:5B:7D:65:53:B3:99:4F:4E
Authority key identifier: C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99
Certificate issuer: /CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
Certificate serial: 0197B9A1924122ABDC300317D48B42E2188E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 03:01:02 +0000
Manifest this update: Sun 29 Jun 2025 03:01:02 +0000
Manifest next update: Mon 30 Jun 2025 03:01:02 +0000
Files and hashes: 1: xLxp1Co7FePOy5HHcrpkM8URvpk.crl (hash: l/MM60VJTJLHP5ae4AO+JLqH4xF0SsYaNlokBsF7lRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:92:41:22:ab:dc:30:03:17:d4:8b:42:e2:18:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
Validity
Not Before: Jun 29 03:01:02 2025 GMT
Not After : Jun 30 03:01:02 2025 GMT
Subject: CN=5acf0c3e0ef1e92d6d416d655b7d6553b3994f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:20:e4:05:2b:6d:b9:b2:06:70:c0:b6:6b:67:
9d:a3:8a:b7:7c:f0:41:a0:7c:a9:b7:3f:c4:dc:ee:
e4:db:1c:e0:fd:ab:d5:8b:ea:e6:6e:0c:a3:0f:d0:
68:f2:88:c2:70:46:20:93:dd:02:18:fe:70:c0:72:
11:63:cc:4f:f8:dc:4b:0f:9d:ce:ee:55:69:d6:16:
37:f0:9c:24:7f:56:42:fd:89:0f:9b:44:5d:8c:11:
a1:c3:80:73:c7:05:ed:ae:7b:83:2c:a8:18:55:a8:
5d:8f:2c:25:99:32:77:b8:98:9d:e3:0c:68:de:28:
02:14:72:f8:e6:a5:c2:b9:13:09:9d:90:44:58:0d:
d5:a4:17:39:70:06:f3:01:0d:66:ba:4f:94:88:ff:
da:eb:d8:1e:ad:23:3a:03:94:ca:27:08:c9:0d:1e:
2c:fd:97:28:a4:86:bd:d7:8d:81:22:32:ce:6d:93:
d7:89:b5:34:d7:db:b4:87:57:38:19:13:c9:9b:02:
27:ea:3f:f9:e6:21:3c:5b:1c:5e:37:b5:e8:16:9d:
cb:39:6c:b9:e1:c5:37:a8:2c:28:ee:05:2a:ea:c2:
26:ae:c2:a5:46:98:ec:60:dd:c2:f9:15:65:19:fb:
bb:48:a8:90:5d:38:31:c3:f3:f4:0d:e7:9e:2a:28:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CF:0C:3E:0E:F1:E9:2D:6D:41:6D:65:5B:7D:65:53:B3:99:4F:4E
X509v3 Authority Key Identifier:
keyid:C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:aa:85:cb:59:3e:fb:fb:29:bd:14:d3:a6:16:9d:4b:f1:ff:
45:24:d6:c1:22:e5:31:f4:9b:17:13:fe:ef:96:2d:02:5a:d4:
f3:52:4b:0e:12:36:a0:4a:e2:8a:c0:ab:e3:f6:4e:2c:71:cb:
a1:90:2a:ee:b9:8d:e2:96:0f:04:65:6b:2d:3b:1a:8d:9e:c9:
5c:d7:e3:0b:6f:fb:de:7a:88:fb:a0:0b:39:85:26:2a:14:03:
c9:bd:fc:f7:5e:ca:a6:30:f6:e3:1e:79:52:5e:3d:6a:e4:d3:
81:c0:c7:d6:2f:b2:53:00:12:5c:a7:5e:fa:5f:43:77:9f:c2:
73:3f:ac:27:fd:5e:28:48:b7:2b:2f:15:37:e1:5e:66:08:0a:
e4:52:5d:2d:84:a6:ba:4d:09:37:0a:67:b6:50:23:b9:9f:40:
1d:08:83:83:09:91:f9:0b:c5:59:d5:18:3a:38:d1:d1:e2:e1:
82:cf:eb:7a:5c:f3:dd:c7:8d:ea:e5:ca:c8:b7:cf:74:50:6d:
35:e6:fe:11:83:e9:04:95:18:00:2c:11:18:b5:a8:d6:ed:1f:
fc:49:cb:9f:9b:20:d1:90:1a:59:a8:15:4c:84:b0:49:51:e6:
66:48:53:b3:e5:0f:ec:df:a6:a1:7e:d1:de:09:a6:40:88:1b:
74:7e:ba:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:59:15 2025 by rpki-client