Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier: vD44PCp3XV+Mlhu+kliqRaWRyp7XwLSwyidR2PyPtkw=
Subject key identifier: DA:52:7A:22:82:D1:0E:BA:B6:88:DB:47:7F:33:5C:11:32:8E:A5:B2
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 0198A04E121AC604CC0AB93E0B1F06DFA82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number: 124E
Signing time: Tue 12 Aug 2025 22:02:07 +0000
Manifest this update: Tue 12 Aug 2025 22:02:07 +0000
Manifest next update: Wed 13 Aug 2025 22:02:07 +0000
Files and hashes: 1: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: dWfW3+wZhOMp+YenmkEVw/i6OjxWZmnnkPACNhYiSNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:12:1a:c6:04:cc:0a:b9:3e:0b:1f:06:df:a8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Aug 12 22:02:07 2025 GMT
Not After : Aug 13 22:02:07 2025 GMT
Subject: CN=da527a2282d10ebab688db477f335c11328ea5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:02:ab:49:1e:62:bb:d0:aa:56:19:b0:07:
92:37:29:3c:4d:f8:70:c8:86:0e:f5:ba:91:82:0a:
b2:2a:36:7c:92:90:91:78:b5:84:ce:24:77:de:80:
da:6e:d0:a9:21:05:79:6a:70:d2:80:b1:63:ff:c1:
76:b7:56:8f:41:bf:b8:c1:51:52:1a:95:07:f0:c3:
69:fd:45:b0:29:19:56:e6:dc:67:f6:7e:ec:a9:6c:
dc:b6:cc:9d:5b:c5:5c:ef:49:e1:a4:21:b2:85:89:
e4:db:55:83:5d:e1:91:22:0e:f6:72:92:52:5f:4f:
14:ea:74:f3:61:66:6e:99:6c:4a:98:cc:d4:dc:6a:
53:bb:1f:99:b1:45:de:35:4f:e3:bc:9b:87:dd:be:
63:a5:2f:fa:9d:b4:f4:a1:41:ec:9c:ab:c4:56:f8:
61:cc:7b:cf:93:3b:1d:a3:24:12:1b:84:ef:3d:f3:
88:34:da:a7:3f:35:9a:bd:41:3f:eb:52:00:bf:28:
da:9d:83:9a:d7:e6:4d:37:2a:11:1d:1f:b0:42:08:
9e:e7:77:c9:ce:f5:4f:3e:1f:fb:9c:d8:5e:72:df:
6a:ca:f7:7d:3e:09:92:4c:a9:ba:7c:5b:88:37:6f:
ae:46:26:b7:dd:2b:c1:cb:c7:8d:84:da:12:0e:75:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:52:7A:22:82:D1:0E:BA:B6:88:DB:47:7F:33:5C:11:32:8E:A5:B2
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6a:49:5d:99:b6:a8:f7:d5:60:cf:6b:46:65:7b:85:5c:fc:
19:0b:dc:bc:b6:ec:32:e5:86:d9:09:c6:f6:88:cb:40:c2:45:
99:d8:03:1b:6e:d9:55:a9:1a:d4:b5:5c:df:06:2a:3d:cf:82:
c5:18:f0:ce:cc:b7:cb:d9:16:12:50:89:cf:1c:f2:bd:44:fe:
02:14:d0:e4:0f:dd:aa:ec:fb:74:5e:14:d3:79:4d:1c:a3:13:
05:2c:55:2f:67:47:32:29:ed:18:5e:0a:a9:52:26:06:72:53:
66:69:fa:f1:56:e0:2d:4f:3c:3a:70:e7:f4:37:71:59:1d:e4:
a9:09:5b:07:80:44:2a:f0:52:e2:4d:72:08:d3:b8:c9:98:c8:
6b:51:d7:2c:a9:95:bd:58:7d:af:ed:af:19:0b:f9:77:c6:84:
65:eb:4a:6f:01:9f:0f:6b:4e:75:c8:29:14:f1:f2:d9:2c:25:
c2:10:e3:a2:80:cf:c4:29:87:83:39:de:a8:c4:f3:e0:4e:e6:
42:21:05:78:8f:a1:a8:28:17:37:a4:b1:50:c0:12:c2:de:0d:
2f:3d:0c:d4:bb:d1:e0:27:a9:23:48:6c:56:8c:21:e5:87:ff:
37:6b:48:33:79:56:97:c3:52:d9:10:f2:3d:63:30:f2:f8:67:
80:5a:e3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:51 2025 by rpki-client