Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: UQF5rIKYoVXxCOK88kykQX/kongnbdJuBWaGqwQuMG0=
Subject key identifier: 75:03:49:C8:93:B3:56:B7:F9:A6:1A:94:1D:59:6D:2F:5A:46:99:C9
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 019873E2422D6B1E7C194F87701AF9B1EEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:01:04 +0000
Manifest this update: Mon 04 Aug 2025 07:01:04 +0000
Manifest next update: Tue 05 Aug 2025 07:01:04 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: kjmdhKWOR4RKvwAnJ3qmpW7eEodOjYRddeXkaJCov0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:42:2d:6b:1e:7c:19:4f:87:70:1a:f9:b1:ee:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Aug 4 07:01:04 2025 GMT
Not After : Aug 5 07:01:04 2025 GMT
Subject: CN=750349c893b356b7f9a61a941d596d2f5a4699c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:04:c0:f5:28:d8:de:f3:43:32:56:a6:9f:
c9:ed:ae:f8:2e:03:25:b1:34:19:61:10:bc:20:af:
d4:7e:1d:19:a8:8a:9f:94:28:8e:dc:0e:70:a1:4f:
53:b6:67:b2:5e:12:cd:a9:90:cc:c7:ae:5e:7f:f9:
a5:a5:8b:ef:a4:85:0b:17:e7:b4:20:3d:b3:a4:a7:
4e:05:90:85:4d:05:75:b7:99:9f:cc:fb:87:78:90:
40:9c:71:8e:48:4d:1a:63:04:bc:fa:65:1e:a3:fd:
01:90:95:8d:c5:de:75:9c:13:41:6e:51:cc:bd:e4:
c7:8c:77:49:ca:ac:2c:a6:41:66:ad:62:87:c2:ac:
d4:00:09:0c:67:42:00:77:a9:a9:60:4b:dc:7e:ac:
0f:eb:e4:ee:17:5b:ef:f5:cf:51:01:5e:7c:3f:fa:
51:6c:69:cb:f3:71:e4:0b:e9:91:a4:e7:14:21:0f:
d5:e8:65:c7:20:74:9c:17:72:40:5e:31:7a:83:2f:
70:2d:c7:48:ba:a9:e2:16:5c:9d:c8:26:05:3b:90:
f1:75:61:e8:17:c3:ae:f4:53:f3:f8:4e:d8:fe:01:
70:0e:89:64:a8:cf:b3:8f:03:fc:1b:1b:f7:d3:f2:
66:15:de:67:08:1f:17:e8:d4:37:b6:e6:45:98:41:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:49:C8:93:B3:56:B7:F9:A6:1A:94:1D:59:6D:2F:5A:46:99:C9
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:47:9c:f8:ff:ac:b4:14:74:b3:02:12:89:75:6e:5c:18:fd:
38:2e:cb:83:08:8a:79:40:30:2e:17:1c:46:e9:e6:be:97:1e:
7a:33:2d:7b:cf:29:31:2c:7a:af:6c:69:bb:3a:cb:94:f6:0e:
df:24:6e:b2:a9:a3:e2:6e:f8:4e:78:04:79:74:e5:56:84:ec:
82:d4:e8:73:d7:6a:7f:c9:6c:57:84:2a:27:cf:97:a3:c0:2e:
06:41:19:f2:da:65:52:16:04:aa:30:69:c4:20:3c:7d:9c:3b:
32:be:16:e9:b6:73:0c:39:fb:3c:33:da:21:03:df:4e:b4:67:
d9:3a:74:43:65:c3:38:9b:f1:89:71:a1:64:5e:28:a2:71:1a:
da:58:e6:b5:cd:46:d2:af:49:3a:f1:d0:71:26:c5:27:90:e4:
ad:90:94:b4:37:97:4e:7a:07:70:81:1e:6c:bd:47:0a:9b:61:
09:c4:af:a2:a1:d8:5c:7d:8d:b0:66:00:6e:49:40:08:51:77:
85:4e:c4:4a:35:e0:78:17:e1:a0:3a:82:91:ef:0b:14:5f:ef:
67:64:47:9f:2c:eb:7f:ef:6b:08:a9:5d:90:3d:2d:ae:22:50:
f9:36:d3:2e:c3:73:b2:11:e0:04:63:93:e4:38:f2:f2:4a:55:
a1:7a:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:43 2025 by rpki-client