Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
File: xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json)
Hash identifier: XCXHTMvYe7E+1UNsOrrHE6fik1+5+HhIKAC++mXpJKQ=
Subject key identifier: 47:B1:59:D7:49:D4:C7:20:A3:DA:18:85:F1:B1:88:88:24:72:13:31
Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
Certificate issuer: /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Certificate serial: 0197C94B5417FE6DA05E8B45E90EF89CC89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
Manifest number: 0EDE
Signing time: Wed 02 Jul 2025 04:00:46 +0000
Manifest this update: Wed 02 Jul 2025 04:00:46 +0000
Manifest next update: Thu 03 Jul 2025 04:00:46 +0000
Files and hashes: 1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: ochtiVpSRMFsYrOm8bShTOLXJIWQon8njV+EOaAaiwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:54:17:fe:6d:a0:5e:8b:45:e9:0e:f8:9c:c8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Validity
Not Before: Jul 2 04:00:46 2025 GMT
Not After : Jul 3 04:00:46 2025 GMT
Subject: CN=47b159d749d4c720a3da1885f1b1888824721331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:16:c5:f2:f2:9b:03:34:06:a2:95:6a:83:
b2:0b:b6:a5:d3:8c:cf:66:e5:2b:4f:a4:c2:4e:ca:
c3:c0:65:ca:7e:b0:0b:d3:87:d2:e8:bf:1a:5b:94:
06:de:ae:b3:a4:0e:33:99:ba:d2:13:ed:55:15:1d:
30:bf:fd:d3:53:f2:b2:f0:c2:d4:50:13:a8:b3:be:
7f:84:65:52:e7:09:66:93:93:61:b8:d9:ff:2f:70:
4a:69:e7:88:11:e7:da:59:bd:b4:3a:17:e8:01:a1:
98:1a:db:6d:87:58:6c:3f:1a:b8:7e:71:81:38:5d:
97:21:9a:2e:b5:f5:0e:94:4a:60:71:e2:e6:4d:a6:
20:e9:0a:18:3d:85:07:35:60:8f:a1:54:ff:64:ba:
3e:b8:b1:ba:26:d7:05:30:14:0a:65:14:b5:35:1c:
fd:f2:fa:44:81:42:72:a2:00:9a:82:b7:99:63:29:
50:8e:ac:20:3e:35:90:ba:74:88:b2:a4:14:c7:aa:
76:8c:0f:e3:c3:66:16:a1:a3:d6:5e:c3:ab:d1:4e:
95:30:e4:c3:07:9c:47:16:08:8f:80:ce:2d:13:bf:
d8:e4:c3:73:f9:8a:be:c6:79:b8:74:35:79:30:43:
e9:93:a2:41:4e:6b:f3:99:3e:a2:40:0b:0c:2f:c2:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B1:59:D7:49:D4:C7:20:A3:DA:18:85:F1:B1:88:88:24:72:13:31
X509v3 Authority Key Identifier:
keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ff:5d:03:c3:ca:53:85:5f:ef:22:09:29:ea:be:2b:1f:01:
7f:3d:47:9d:bd:b6:66:68:87:db:8a:8c:77:56:51:5f:68:bb:
c3:62:d0:75:70:94:d5:80:87:c8:b9:3e:b0:67:1f:33:a3:2a:
07:b7:84:1a:11:1f:0c:31:5a:9d:40:dd:1f:3e:d6:70:a3:4a:
d9:0b:94:6b:8b:68:9b:51:c9:70:79:fe:99:99:9f:47:12:cf:
a6:7f:ef:85:9c:f1:11:c4:e8:9f:3a:77:df:77:a5:9d:35:b7:
50:a9:c0:c5:34:ff:7c:5c:17:23:d7:cd:19:e7:3b:c5:1a:ba:
c5:b1:e3:8a:38:79:97:7c:03:a5:0c:fe:bb:d9:de:a1:58:a5:
6c:a1:e0:bc:d8:94:4b:cd:ff:43:a1:72:ff:72:ad:e7:4f:e8:
a9:25:b6:77:71:28:87:42:c4:92:40:50:5b:f6:14:12:ff:d5:
de:76:82:42:7c:8d:3d:2b:c3:d9:23:be:de:5d:91:15:48:34:
f4:bd:43:21:3e:25:1c:78:ca:ea:1c:5a:65:0d:e7:98:20:fd:
d5:49:b9:5a:73:c4:2d:c7:ab:bf:6e:c8:b1:d7:fb:2a:fd:f4:
a9:bd:da:b8:80:a7:9c:1f:e5:b9:01:f2:24:1b:31:e9:a9:b1:
f6:15:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:56:55 2025 by rpki-client