Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: VlDx7vYgTuHqoaxoBzQl1FISRGe+ibux13TfvBIUhd4=
Subject key identifier: 7A:9D:C5:00:FD:0A:7D:EC:B1:CC:94:E5:9A:49:F3:9C:8C:8F:87:0F
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 0197B70E75C1CA753B0BBA107C87F012EF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: lUnefxZez6qWjM/KvbzA6EFiFTjSdyKu69/qRkes7jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:75:c1:ca:75:3b:0b:ba:10:7c:87:f0:12:ef:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=7a9dc500fd0a7decb1cc94e59a49f39c8c8f870f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b2:e0:3b:44:b2:e6:24:73:22:67:7a:bb:c4:
6d:38:31:0d:4b:11:0c:ef:fc:0b:01:c6:5e:10:55:
3f:79:b9:6c:53:64:bf:c2:e4:f7:06:dd:6e:2c:4d:
af:20:1f:81:59:06:d9:b1:0c:28:11:e0:e6:b4:bb:
53:70:0c:32:7d:de:4a:8b:b3:a5:a4:19:b7:43:98:
f5:38:a5:c3:f2:bc:26:79:d6:2f:89:7a:68:b8:9d:
15:e7:a2:0e:4e:0c:27:09:57:f2:51:c1:7b:e2:09:
93:9d:0b:80:28:db:9e:25:ac:ef:89:a7:63:da:f4:
81:10:b0:fd:5a:a8:3f:23:d4:34:cf:2d:02:7b:0e:
10:97:f1:62:22:72:2b:5c:a6:d5:76:c0:3c:c7:32:
b4:a0:68:84:ad:50:bc:d8:65:0b:d2:03:10:04:25:
d3:55:1e:e9:de:27:ba:e5:ba:de:93:c5:82:e4:6a:
ae:f6:00:cb:44:3b:64:6d:f1:49:11:44:43:ec:aa:
17:dc:71:38:f2:5e:e1:ad:e8:f9:6d:b0:2d:e5:49:
db:91:31:bc:c7:b5:05:49:55:85:1e:29:e5:f6:2c:
7d:6e:5b:0b:43:47:12:59:c8:7b:68:c7:34:3d:5e:
2d:75:bc:b7:53:26:3b:1f:83:9d:8e:90:c0:3b:94:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9D:C5:00:FD:0A:7D:EC:B1:CC:94:E5:9A:49:F3:9C:8C:8F:87:0F
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1e:df:05:b7:bd:9a:91:be:50:89:a4:0d:86:6c:7f:8a:f2:
6e:12:90:e0:8f:ef:3c:6f:a6:fc:6b:f8:c9:d6:7b:e0:f6:1d:
24:42:4d:c1:b4:3f:ab:38:cd:cb:93:16:e6:25:2d:28:29:00:
ab:ca:70:24:81:03:5d:47:20:27:b2:d1:29:6b:f5:22:7e:78:
cb:dc:dd:67:70:5b:04:b2:a6:54:e9:d5:cf:d3:67:1f:a6:ba:
bd:bd:0d:9a:3e:aa:11:76:65:41:5a:4a:d1:13:32:b8:6f:0f:
77:67:a5:60:6b:10:52:ba:27:16:c4:a9:04:51:d5:90:99:f9:
db:e0:20:c3:76:2b:a8:7d:f8:18:a5:e0:82:64:8a:70:5d:31:
fe:8f:6b:d5:c5:44:37:38:f4:7a:00:29:c2:7a:b8:69:93:ee:
4f:3c:fb:2e:5e:76:27:e7:44:05:57:8b:b8:41:b3:28:b2:4e:
ab:05:9f:c8:25:96:3b:24:d4:ef:02:57:da:40:1d:11:5b:ad:
7e:38:56:5c:9e:36:a7:ee:3e:cd:15:bf:43:3f:91:25:a5:3d:
30:9e:10:d6:a6:fd:28:53:96:a0:d4:04:00:55:3f:4f:d8:a5:
93:dd:36:02:af:35:01:65:9b:9b:fb:bc:df:10:b1:bc:c1:28:
21:d7:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:23 2025 by rpki-client