Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
File: xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json)
Hash identifier: 5okE92uC5gmn/O/fW2IV7FXuBl7Oih9kv46vk9X+R/g=
Subject key identifier: D8:C2:48:5C:A9:D6:9B:FC:2B:87:33:61:7C:3F:7A:9B:30:64:E6:B8
Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
Certificate issuer: /CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Certificate serial: 019873748D142657774142F5F8286A7CBF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
Manifest number: 0D3A
Signing time: Mon 04 Aug 2025 05:01:14 +0000
Manifest this update: Mon 04 Aug 2025 05:01:14 +0000
Manifest next update: Tue 05 Aug 2025 05:01:14 +0000
Files and hashes: 1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: iAFtS+FWQPs7PnjBKFPFQsliGpkqqukCGmCDA37EX/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:8d:14:26:57:77:41:42:f5:f8:28:6a:7c:bf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Validity
Not Before: Aug 4 05:01:14 2025 GMT
Not After : Aug 5 05:01:14 2025 GMT
Subject: CN=d8c2485ca9d69bfc2b8733617c3f7a9b3064e6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:28:00:07:52:72:35:7c:58:70:0e:b0:2e:
c2:74:b1:4d:2a:c6:eb:4f:98:39:7f:95:e6:6a:be:
26:24:ed:05:61:0c:02:91:3a:5b:d7:b9:18:99:9b:
3f:68:d9:43:a8:fa:2f:22:39:87:c6:35:b9:d1:54:
63:a9:0f:52:55:53:2d:9d:6d:69:c0:07:f9:8e:34:
af:6f:d6:cb:72:15:ca:6e:a3:7f:9a:bc:00:14:15:
00:97:3e:4d:1c:06:3e:77:91:3a:72:bd:71:5c:a8:
19:7e:d8:09:69:94:3b:57:2a:4e:a6:85:4c:30:3c:
b9:25:cc:de:c3:40:41:e7:f5:56:a6:2a:5c:15:c9:
52:81:6f:36:76:2f:ad:2a:26:5b:6b:a1:90:d4:dd:
ad:8c:ea:fb:82:28:7c:d9:72:73:68:f8:84:a4:82:
9e:81:f5:35:db:d3:55:f4:69:5b:e5:6d:e3:0d:e5:
9f:82:43:97:73:61:93:b8:36:d7:6d:45:3a:1e:e4:
fa:e3:ba:d6:b6:3b:02:7f:85:de:94:bd:53:0c:2f:
7f:ff:06:4c:6a:a6:a1:8b:65:ea:08:3e:ec:27:9f:
2c:90:43:d1:3d:c4:4f:e0:82:76:32:b2:7e:73:5e:
e3:0b:8a:87:91:ae:ca:85:87:e9:93:de:ae:42:2e:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C2:48:5C:A9:D6:9B:FC:2B:87:33:61:7C:3F:7A:9B:30:64:E6:B8
X509v3 Authority Key Identifier:
keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:de:85:b6:45:65:ea:26:4b:f7:00:00:26:2c:ac:4f:f7:d8:
fc:5f:8e:54:95:7b:84:a3:2e:ef:f7:d9:88:2e:2e:5b:25:f5:
d4:40:0b:0a:24:82:3e:21:b2:13:19:20:f4:46:05:30:36:9d:
86:f9:7f:62:3f:10:b8:3c:14:9d:4c:90:84:7c:b7:fe:ab:90:
f4:84:a1:94:46:fc:f1:48:20:26:b3:e1:51:cf:ff:c6:44:2a:
48:c2:43:08:83:10:3e:46:f4:c5:d4:3f:a5:24:15:ac:45:6e:
9c:bc:ab:3a:54:4d:84:5a:98:7d:b2:0b:f0:c7:32:2d:02:56:
1f:86:84:08:56:40:43:49:ac:ce:6a:48:55:0f:a6:ca:ab:a0:
60:56:eb:15:be:94:31:c0:c2:bd:2b:69:16:a0:a8:3e:15:e2:
22:a8:02:64:1e:a6:51:d4:b9:9c:5e:e7:cf:49:d6:b6:f5:4c:
e0:5c:1e:09:e0:90:bf:71:e3:55:60:16:06:a1:55:76:71:cd:
5d:34:8e:71:a2:f6:4e:cc:a7:7f:8d:fd:71:3e:87:af:74:5d:
ca:48:0a:1f:ed:36:72:c6:8a:f8:dc:1f:53:11:04:3a:af:d7:
6e:21:6f:d0:8d:3f:5b:9d:e1:45:16:00:3d:30:b9:c9:7e:8a:
68:07:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:03 2025 by rpki-client