Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: BjTPD3AxxFp+jMrJrYXC8HjlNmxsJk8Qr+6h6TxpSdc=
Subject key identifier: 29:4B:17:BF:DE:1C:85:9F:A3:3A:A1:80:69:84:C7:3E:4C:83:B0:33
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 0197B8FD1CFB1322B286AE7A7728DB2E4202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 0D66
Signing time: Sun 29 Jun 2025 00:01:24 +0000
Manifest this update: Sun 29 Jun 2025 00:01:24 +0000
Manifest next update: Mon 30 Jun 2025 00:01:24 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: d0/Alr95Fbq75L2jJyt4qW//F9cTWS4XBlbAUJtNy8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:1c:fb:13:22:b2:86:ae:7a:77:28:db:2e:42:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Jun 29 00:01:24 2025 GMT
Not After : Jun 30 00:01:24 2025 GMT
Subject: CN=294b17bfde1c859fa33aa1806984c73e4c83b033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:92:5f:5c:e1:a4:72:94:54:7b:5e:b9:26:
1d:30:d9:f8:23:e5:26:26:aa:86:33:d3:f2:de:cc:
ba:17:da:1c:80:bf:9f:53:98:d2:25:29:c3:4c:42:
70:89:25:21:2d:b4:71:d9:0e:5b:7a:67:84:63:1f:
51:42:86:a4:a8:27:2b:84:54:0c:ab:02:82:40:15:
ea:8f:16:20:dc:4f:57:10:fe:49:58:16:52:af:a6:
22:36:ec:dc:8e:df:36:3b:4e:b3:50:fe:1e:e4:54:
bd:1f:ea:5b:bf:d3:ba:be:8f:af:ae:16:76:cd:3e:
ad:6d:53:c6:da:e7:2c:e4:26:87:e2:5a:27:98:4d:
03:37:c3:95:77:6a:52:7c:5e:56:c3:06:b8:a6:82:
92:8f:ae:62:c4:36:26:d6:90:cb:34:09:f9:34:70:
fb:02:94:8f:0f:26:6d:32:6f:6b:7e:50:af:7a:90:
fe:bf:0f:72:96:07:16:7d:c1:01:8e:30:03:bb:53:
c4:2e:8e:5f:e2:0d:c8:4a:24:25:a2:b7:89:c6:48:
36:d1:d7:a1:6c:7c:e7:77:fd:bf:f9:d3:55:91:ed:
34:bf:7a:d8:5e:9f:22:0d:59:b8:97:88:ab:e6:d7:
c5:a6:7b:1b:5d:b0:c4:26:74:22:34:04:89:38:32:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4B:17:BF:DE:1C:85:9F:A3:3A:A1:80:69:84:C7:3E:4C:83:B0:33
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fc:7b:d1:68:23:6c:5d:c2:6a:a9:b7:55:a8:82:04:dd:1c:
02:b0:36:4d:53:70:1d:d0:3d:ad:82:bd:f1:54:43:a0:43:7c:
cd:87:44:77:63:ae:ef:85:ca:40:ba:ac:0b:ee:05:ef:4d:cb:
f3:fe:7d:64:ed:fb:d3:2a:59:7a:0d:f8:03:ae:7a:f3:c4:c0:
a1:65:49:b9:c9:72:d9:1a:2e:7c:4f:2d:1d:02:ab:b9:5f:9a:
8f:63:7c:09:75:01:51:35:a2:19:99:fd:0f:11:3b:3a:d6:6d:
16:e9:2a:e2:cf:72:27:85:2e:73:4b:00:f3:80:a1:28:30:6d:
52:9b:c2:94:a6:3f:d1:b0:9b:29:ef:f7:ea:35:63:07:88:68:
a2:d6:d2:52:a9:2a:6e:07:3d:f6:8e:00:11:c7:5f:35:da:47:
27:32:99:89:04:94:53:81:4d:93:55:79:51:6f:dc:6b:29:1f:
90:29:a0:fc:5a:19:4d:ab:9c:08:dd:b8:94:ea:13:ff:16:77:
52:f8:84:9d:c2:00:59:eb:93:8e:54:78:e8:3a:54:2e:4d:ce:
60:ce:67:97:0d:18:ff:18:ad:f4:70:17:90:2e:44:05:32:96:
53:cf:29:58:07:05:2c:03:47:80:17:49:40:79:66:75:71:d7:
f8:49:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:26 2025 by rpki-client