Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: Znfvzhz61BMVgB8TMpQ6sIcfUCksFZrxQQyW2tCqv1Y=
Subject key identifier: 88:A1:A4:B1:E5:9F:52:E4:B5:D3:D4:2A:2E:3A:56:96:F4:E3:53:BF
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 0197B7459C2C3F6485FD35BDA4BAD26E1E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 039A
Signing time: Sat 28 Jun 2025 16:01:21 +0000
Manifest this update: Sat 28 Jun 2025 16:01:21 +0000
Manifest next update: Sun 29 Jun 2025 16:01:21 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: 4cdavO29gRprsOt3yZWlxvg7O3Gu95NRTZVvmGMWhD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9c:2c:3f:64:85:fd:35:bd:a4:ba:d2:6e:1e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Jun 28 16:01:21 2025 GMT
Not After : Jun 29 16:01:21 2025 GMT
Subject: CN=88a1a4b1e59f52e4b5d3d42a2e3a5696f4e353bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:a2:0a:31:9f:68:1c:e3:9c:08:89:f2:62:
64:20:ca:ad:00:8e:c5:5c:a0:14:48:72:8e:76:34:
f4:7b:12:aa:35:a0:fa:3d:b2:dc:04:37:a1:99:69:
4b:f3:8e:bc:ea:f0:58:8f:87:12:6d:64:f2:5c:9a:
11:89:a3:aa:c5:62:8a:32:d7:77:a5:cf:b0:22:e8:
f6:8d:2c:d8:cf:e0:2f:17:e2:8a:de:91:4a:03:ba:
c1:9a:49:60:56:ee:59:0d:2c:34:db:0a:1c:2f:ab:
b6:2f:23:b8:ca:f8:cc:fd:33:04:44:de:08:e3:d0:
2e:00:bf:54:74:9d:5e:a6:3b:4e:0e:0e:89:c8:30:
66:86:dc:e8:2a:ec:9e:fc:34:78:89:65:cd:be:92:
10:0a:a5:38:dc:c6:28:36:1b:13:d5:a2:23:07:f9:
8b:c7:18:05:b1:b5:5c:97:29:a9:57:3d:bd:ef:fd:
be:09:7a:cf:80:f5:f7:e2:1b:84:d4:f4:0f:2b:6f:
87:59:dc:09:1f:7c:9e:fc:25:c5:fd:e3:93:0b:62:
4f:4b:70:a1:6c:46:15:0b:c7:d4:ea:71:0f:f9:51:
f1:a4:4e:7c:60:e4:e4:11:08:f6:68:71:21:e6:20:
6d:d6:a4:38:d0:60:a6:3b:fc:68:d3:9e:d4:53:a3:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A1:A4:B1:E5:9F:52:E4:B5:D3:D4:2A:2E:3A:56:96:F4:E3:53:BF
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:46:27:81:c6:dc:e6:84:71:5c:78:b8:45:24:68:74:80:44:
b3:54:39:ee:91:5d:cb:e2:a0:e0:73:dd:1e:60:dc:56:7e:4a:
23:f5:77:34:df:a7:4f:5d:2d:ac:ba:75:e5:11:4c:17:8b:db:
4a:1e:99:06:73:42:87:6a:55:3d:ad:48:2e:c8:ef:66:c6:f1:
2e:05:0e:3e:bb:16:09:1e:6a:1a:b5:30:67:d0:b6:29:67:d6:
89:55:59:72:d9:39:1e:bf:74:fe:76:4a:2f:43:5e:95:f7:32:
4b:86:bf:82:e8:1e:3f:a6:52:18:aa:9b:f9:d5:d7:0d:7e:02:
0d:87:38:94:e4:82:ba:f2:98:2f:2a:cb:b4:c9:4b:ec:bd:30:
32:e4:c0:e2:99:f2:bb:3c:2c:3a:a2:74:f5:96:c1:2f:54:1b:
33:fd:c3:68:cb:27:f7:a8:0f:1b:10:95:08:cd:27:7b:83:7b:
db:b9:66:49:9c:77:1e:9b:7b:9c:97:91:29:d9:34:7f:63:0c:
22:ae:f5:31:ea:5d:a7:90:94:b3:80:22:68:04:a9:96:d1:36:
41:49:0b:04:66:ff:ff:ef:12:e7:87:96:b4:ce:5e:c5:95:88:
41:cd:bd:b9:d5:84:5b:e4:19:fa:ec:8f:72:13:3e:57:a1:82:
6b:5c:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:36 2025 by rpki-client