Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
File: xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json)
Hash identifier: Lcg0jhdt7KV7n5JvHe6/HStKvscZ9YnQb+ChIeUQ3Zg=
Subject key identifier: 57:20:4B:02:4E:C2:E6:80:17:6E:0F:09:48:D8:6E:00:F8:DC:4C:76
Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
Certificate issuer: /CN=c54a6558d6923be429d9389531adc1008795270b
Certificate serial: 0198820C0D07E88B6CC6230F90BFC5A7AC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
Manifest number: 0CFE
Signing time: Thu 07 Aug 2025 01:01:24 +0000
Manifest this update: Thu 07 Aug 2025 01:01:24 +0000
Manifest next update: Fri 08 Aug 2025 01:01:24 +0000
Files and hashes: 1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: rDPuBAYpO0rRhzaqPgVTaViEXoPrywKMwgwhFAmYFjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:0d:07:e8:8b:6c:c6:23:0f:90:bf:c5:a7:ac:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54a6558d6923be429d9389531adc1008795270b
Validity
Not Before: Aug 7 01:01:24 2025 GMT
Not After : Aug 8 01:01:24 2025 GMT
Subject: CN=57204b024ec2e680176e0f0948d86e00f8dc4c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:79:95:91:4a:9e:dc:4d:26:ef:76:ae:1e:
0e:b3:d7:b5:dc:cd:a5:2f:3c:87:8a:da:a4:6b:28:
df:1d:f7:2f:36:37:90:e7:82:fc:19:a2:e0:51:a4:
6b:46:2f:62:45:70:57:28:5f:22:b5:2e:9e:42:81:
61:69:e0:b8:07:d0:4b:b7:c2:0f:a8:97:33:3f:00:
57:f6:1e:6a:69:5b:f0:25:b2:7e:07:d6:9b:6f:a3:
10:a8:c7:0d:9f:ea:ee:8c:d7:45:7c:4d:d5:51:87:
c1:68:0f:20:37:5a:ff:da:d2:7a:48:02:ed:b6:f7:
a3:ec:9e:e5:37:33:bf:a3:b1:6f:8c:3d:f3:c8:d4:
66:7a:90:78:9c:59:ee:c8:23:a1:14:a8:c8:b0:cf:
15:3a:0e:32:4a:11:0f:7b:b0:d8:d9:c2:a7:f0:08:
0e:0d:75:24:31:51:eb:77:87:dc:2d:9d:d9:31:ff:
cf:53:52:7f:75:cb:1b:e2:22:3b:01:07:f2:f4:58:
1a:9a:e6:1a:6c:10:ce:9e:a9:82:28:62:d8:9e:aa:
02:9e:91:f9:5e:6e:47:0f:11:55:d0:16:b5:29:24:
60:ac:16:91:3d:1c:4d:ed:15:60:16:45:56:fe:31:
11:cb:8a:59:83:24:50:b5:4c:dd:b9:27:ae:f5:a1:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:20:4B:02:4E:C2:E6:80:17:6E:0F:09:48:D8:6E:00:F8:DC:4C:76
X509v3 Authority Key Identifier:
keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:06:9b:8d:d0:df:ae:7d:dd:67:20:5f:bb:e0:48:f7:31:2e:
09:da:cb:12:94:6e:a0:e6:92:28:fb:b8:60:35:05:76:b2:0a:
12:b2:3a:1b:f6:4a:98:36:9a:4e:33:23:53:19:30:17:ab:c8:
b3:7f:8c:29:a7:b8:26:dc:a1:c6:85:2f:1a:cb:c2:3c:f0:27:
9d:02:69:4c:f5:a2:64:c8:2e:59:9d:3b:d6:83:75:47:d0:f2:
22:58:a4:9d:be:23:96:71:52:08:de:c8:43:75:a6:17:f4:97:
b5:c4:39:a5:5e:06:d2:a6:f5:23:cf:b9:35:2b:97:62:4b:58:
03:6b:70:43:b3:cf:1c:d3:3d:44:32:fd:7a:af:17:3b:cb:5e:
d6:c0:40:c7:79:e0:29:a7:af:a3:8c:54:ef:c8:d9:ab:b6:e3:
e4:bd:2f:43:ff:23:24:7a:21:d5:23:96:88:1f:16:d3:bd:90:
9c:fb:ef:1e:24:cd:ed:fc:62:95:5b:ec:7c:e9:7a:36:c3:f8:
0d:23:74:f2:76:e9:9c:2d:24:61:a2:26:61:72:b6:bd:f5:77:
c8:29:cb:b4:db:90:16:a2:d5:22:40:25:82:58:33:5f:10:26:
91:82:9d:9e:ef:ba:f4:57:01:f6:a2:dc:9f:55:ad:e2:5d:94:
57:55:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:35 2025 by rpki-client