Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: p+x4nRbKf0X4SQp13p4JkQohZS1uGOmKRSamMqoj68c=
Subject key identifier: 0A:FB:49:4C:67:9E:19:34:B5:B9:D3:D1:B4:BA:03:FC:10:66:F5:94
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 019892C901783B12363CA6B828AF28D2EEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 1621
Signing time: Sun 10 Aug 2025 07:01:43 +0000
Manifest this update: Sun 10 Aug 2025 07:01:43 +0000
Manifest next update: Mon 11 Aug 2025 07:01:43 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: ZD2YLataBmQL9QBMyPr4F/9oaFT8veaJFZz5oBpb5dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:01:78:3b:12:36:3c:a6:b8:28:af:28:d2:ee:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Aug 10 07:01:43 2025 GMT
Not After : Aug 11 07:01:43 2025 GMT
Subject: CN=0afb494c679e1934b5b9d3d1b4ba03fc1066f594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:d8:68:b1:44:6c:57:32:d7:4c:d4:c1:d4:
10:48:ab:b7:5e:64:d0:f9:73:05:dd:48:1f:2c:44:
52:b7:b9:cc:37:bb:42:fa:25:c8:e3:7a:eb:1a:38:
b5:69:36:55:9b:a8:a4:31:d2:aa:0c:48:75:1a:84:
d6:42:64:3d:ec:ef:3b:ed:cb:6d:70:dc:84:f0:ef:
8c:73:d0:39:27:84:8d:dd:a1:6f:24:74:c7:97:a0:
2f:a3:ef:84:28:a0:38:11:e8:3b:59:19:80:2c:f8:
fd:50:23:9a:80:41:44:ff:33:94:26:ce:b9:d3:48:
86:15:1a:55:04:d7:f5:97:c0:dc:d5:a0:b0:85:02:
42:3f:82:d0:a2:82:3f:2d:06:9a:0e:e1:80:3d:70:
7f:25:41:a9:e6:de:09:4e:8e:f5:d8:49:f1:bb:1d:
9e:71:03:95:23:ac:18:6d:6b:46:b7:23:ba:5c:be:
c7:42:b9:24:0c:c4:3c:97:a7:63:79:3a:dd:2b:81:
38:67:15:6f:cc:e7:d6:18:10:62:24:1a:7d:f0:29:
ff:01:be:4f:f5:20:d2:70:1f:b9:62:dc:b7:a8:92:
ef:07:9e:60:3f:15:36:94:70:7c:00:61:2c:93:83:
00:09:8e:9e:d4:cb:ea:75:64:f2:fa:b3:8b:62:03:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:49:4C:67:9E:19:34:B5:B9:D3:D1:B4:BA:03:FC:10:66:F5:94
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:62:ff:ce:b9:23:5f:64:73:57:d6:a8:63:a9:30:ac:9d:81:
25:a0:ce:2a:9a:cf:29:a4:de:a6:7a:45:40:56:65:a2:aa:5a:
15:48:44:cd:a2:3d:50:38:d3:d1:57:1e:a0:70:c2:3d:ee:7d:
9a:0c:c6:b5:84:c5:77:bf:36:13:2d:37:9f:99:c0:30:dd:82:
fc:ca:d0:9b:f9:38:b5:db:2c:20:09:79:66:95:47:4e:ce:d4:
63:d8:e4:44:3a:9a:b8:6c:a2:b1:6c:16:24:58:6f:9b:27:eb:
e5:d6:19:41:a4:86:29:99:ce:91:0b:85:a9:36:06:09:2f:3f:
a8:1e:6c:3e:81:70:2a:b0:c4:85:58:25:e5:ad:28:54:45:e0:
1d:6d:64:0c:6a:f9:6a:7a:3c:e6:6c:be:e6:9d:5a:0e:0c:80:
63:d6:ba:2c:16:22:2a:be:27:5c:5f:18:f8:9c:a5:e6:5f:e1:
34:ae:84:9a:7e:59:97:0f:a5:6f:42:55:79:bb:6f:62:3e:22:
9a:1f:e6:b2:a6:5b:38:41:e1:6d:4e:58:c8:fd:69:81:4b:ce:
96:fc:d6:b6:0b:60:ad:11:74:53:d0:b9:ac:ce:df:30:02:f5:
e4:d2:61:46:45:c9:ab:04:eb:43:c0:30:b7:3c:e7:c6:81:66:
03:15:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:35 2025 by rpki-client