Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: lTAuDMF11w77nscWo+TYVc5N3NLO8GvCZPXDHK5TtD0=
Subject key identifier: 2B:97:4C:31:F1:2E:6B:D4:A4:2E:30:61:9C:CC:2C:95:9C:E4:0A:A0
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 01988B7C67D7BDEA076A109D323AF9E9CEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 155D
Signing time: Fri 08 Aug 2025 21:00:42 +0000
Manifest this update: Fri 08 Aug 2025 21:00:42 +0000
Manifest next update: Sat 09 Aug 2025 21:00:42 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: 8EKcqoEPGhKXlgFUTXtEr6ajTQw2oXSCKtEI48QT6Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:67:d7:bd:ea:07:6a:10:9d:32:3a:f9:e9:ce:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Aug 8 21:00:42 2025 GMT
Not After : Aug 9 21:00:42 2025 GMT
Subject: CN=2b974c31f12e6bd4a42e30619ccc2c959ce40aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c7:a0:45:81:d4:17:66:fa:67:bb:c0:96:f2:
05:28:cc:81:d1:13:be:12:3a:c2:52:9d:6a:0d:a8:
35:8b:c6:bc:f2:3e:65:db:60:9c:c3:dd:0f:97:8e:
a9:68:8f:06:cd:49:32:ba:73:b9:89:31:8e:9b:5c:
f9:f6:18:b8:24:d1:e4:e3:66:c8:5f:e2:14:99:17:
10:63:4e:0f:82:cc:cf:74:ba:bb:e9:c5:2d:66:22:
49:63:a5:87:af:bf:5c:f8:e8:6a:fe:76:71:7b:8e:
d6:39:ff:d0:f0:81:db:88:49:3c:9e:ea:86:2a:6c:
cf:e2:51:a1:2a:ee:5d:92:3e:5d:02:ef:db:78:5e:
de:df:be:02:1f:95:2c:ac:ad:fe:02:17:ca:0b:60:
e5:52:7c:55:20:14:f8:14:8d:e6:02:6b:77:51:f5:
51:d5:59:65:e4:39:9d:14:18:ce:6b:c6:fe:f8:e3:
b7:42:7b:1c:6d:f5:a9:22:a7:04:23:4d:f3:e5:e1:
3e:94:dc:9b:66:6e:ec:89:2d:81:b6:d6:a9:97:2c:
85:0a:80:20:05:50:92:49:30:9c:55:40:35:3c:2d:
d4:37:9a:dc:11:f1:e7:4b:02:6e:be:a0:39:b0:9d:
19:f3:18:36:46:cb:4e:16:a9:d7:5d:0b:67:06:34:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:97:4C:31:F1:2E:6B:D4:A4:2E:30:61:9C:CC:2C:95:9C:E4:0A:A0
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:2f:7b:56:02:0d:bb:07:71:5e:37:6d:8c:7a:cc:f8:04:
66:59:d9:ef:dc:d6:e0:c6:3d:f1:e5:6d:34:4c:1c:f4:db:74:
15:5a:60:80:e5:85:e6:43:b3:b5:20:1d:9e:3c:04:ba:c2:0d:
7c:80:cc:9a:d8:7d:1b:10:eb:37:8f:8d:9c:e7:d6:d0:71:07:
13:98:77:ac:b4:b8:fa:69:2c:aa:fa:19:82:a6:a7:75:38:c2:
f1:3f:14:b4:f3:50:59:af:a3:f9:27:06:26:72:69:ce:78:cd:
38:91:f9:be:70:15:3d:0d:29:b0:fa:f2:e3:f6:67:9b:56:76:
c7:3c:4f:78:90:ef:a7:23:7f:73:0c:43:b7:c4:96:ff:ea:15:
29:55:e2:12:62:4c:9a:cf:87:48:d9:e9:63:77:eb:d5:58:ae:
0d:8d:be:88:e1:41:7f:a6:fd:91:b3:61:48:7a:7c:a9:f8:1e:
f4:95:4b:20:bb:ac:86:ca:76:2d:5a:17:2a:cf:30:a5:01:6b:
9d:c8:46:85:0e:42:e2:22:89:c7:da:4c:96:6d:49:22:d5:a9:
cd:b1:b4:5c:62:83:20:91:c8:67:b9:bf:60:52:9a:f8:ab:70:
8d:52:20:e7:ec:c9:d4:5a:ed:bf:a7:c4:c8:38:62:dd:c4:1a:
5c:cc:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:41 2025 by rpki-client