Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json)
Hash identifier: XqBzriFEwDbqbwOwZao++WCXYuEzsZVveJSg59rX3+s=
Subject key identifier: 76:5B:DC:1E:56:AD:95:6B:64:07:FB:B0:06:C9:86:3B:C3:03:C9:11
Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Certificate serial: 019872CFC2508C177983ADC023A1474E4EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 02:01:14 +0000
Manifest this update: Mon 04 Aug 2025 02:01:14 +0000
Manifest next update: Tue 05 Aug 2025 02:01:14 +0000
Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: InF7C1smMPjU4O9UeDuv/Kf6PR7nmQXwb9Ss924Ey/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:c2:50:8c:17:79:83:ad:c0:23:a1:47:4e:4e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Validity
Not Before: Aug 4 02:01:14 2025 GMT
Not After : Aug 5 02:01:14 2025 GMT
Subject: CN=765bdc1e56ad956b6407fbb006c9863bc303c911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:fb:de:3a:61:9e:44:7b:ae:65:69:5e:19:
86:47:a2:69:b8:5a:16:d6:af:35:1e:4b:0d:ae:38:
28:65:29:6d:f2:e4:ff:d9:41:03:79:45:54:c9:26:
ae:51:82:df:18:dd:1f:cd:76:2c:b6:a2:60:72:2f:
c2:bf:2f:7d:99:52:2c:18:1c:db:37:57:f9:bc:de:
d1:e1:e2:02:8d:23:3a:8b:d5:07:e9:60:4f:60:d0:
e0:f9:e2:16:56:9d:bc:fa:09:be:fe:20:00:7b:c0:
e8:31:cc:c7:51:69:96:46:07:e9:8f:70:e2:58:fb:
b0:65:ef:c1:99:26:63:60:b3:5b:d7:16:53:9e:c1:
c7:01:a6:fe:ec:06:44:41:a7:ab:41:af:10:84:46:
73:54:1d:42:c0:eb:3f:cf:66:04:0a:3e:9f:ba:55:
cb:8a:4f:70:51:a9:0c:ed:f1:f7:7f:74:ad:73:3c:
7e:a9:eb:4c:bc:1a:92:e4:83:f7:a2:4b:f3:c4:46:
8a:58:bb:35:c5:07:50:6a:93:db:49:f9:0a:73:ad:
77:a2:af:11:2e:39:c9:8d:85:c0:a0:d9:0a:88:50:
f9:3d:e6:fb:a6:18:0a:0a:57:9e:91:1a:bf:2a:a7:
1c:4e:9a:b1:7c:7b:85:d2:29:fe:75:dd:95:ff:10:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5B:DC:1E:56:AD:95:6B:64:07:FB:B0:06:C9:86:3B:C3:03:C9:11
X509v3 Authority Key Identifier:
keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:eb:e8:9f:6e:84:8c:0d:35:d7:c4:1a:77:eb:29:82:96:b8:
46:92:be:40:26:1c:a2:45:7f:15:10:c3:eb:6e:06:88:ee:51:
e7:2b:d8:7c:ab:0c:df:71:dc:44:42:02:3c:c9:0e:9e:74:5d:
29:e0:7c:84:f9:20:95:6f:68:7b:e2:ea:01:ab:8c:64:7c:6d:
04:2a:c4:43:e9:5a:71:be:f4:8c:03:0f:6b:0c:db:76:e8:3d:
3c:ed:e3:3f:e2:58:51:33:d0:d7:35:3f:37:98:ca:01:8b:d8:
77:be:a9:e6:63:17:36:d9:95:2b:73:21:9b:86:65:f6:1a:47:
93:95:3e:87:db:c0:30:1f:43:b8:ad:db:6b:a5:44:46:2b:75:
94:f5:53:b6:f1:13:48:25:8e:b8:50:4f:10:c7:cd:de:50:60:
fe:df:f4:78:f6:f9:70:aa:5c:4d:3d:d7:75:21:53:8f:58:33:
d7:00:d9:c4:83:52:b9:34:a6:e4:d4:48:a9:c9:10:3d:c7:46:
48:cc:5c:96:fa:df:c7:0c:26:ad:30:99:00:cb:08:fb:7c:cf:
e6:42:63:7b:a4:07:79:61:53:16:30:9b:cf:a9:99:da:68:16:
4f:06:bf:4f:bd:90:b6:fd:14:22:17:7f:8e:44:ce:a1:57:ec:
00:17:e4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:36 2025 by rpki-client