Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
File: XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft (raw, json)
Hash identifier: ffhJco/jI03NaT3YDoW7GSC6ZF9YRwJSeY8ARbeczwg=
Subject key identifier: 46:3F:98:B4:C9:2B:A0:51:40:B5:9A:D3:9F:DC:56:F9:59:F1:03:DD
Authority key identifier: 5C:CF:12:89:9F:35:8D:1C:34:1A:20:7F:DE:21:D4:3C:70:A6:94:5E
Certificate issuer: /CN=5ccf12899f358d1c341a207fde21d43c70a6945e
Certificate serial: 019882794D729F7BB2B64E2225B154A7FFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
Manifest number: 0266
Signing time: Thu 07 Aug 2025 03:00:44 +0000
Manifest this update: Thu 07 Aug 2025 03:00:44 +0000
Manifest next update: Fri 08 Aug 2025 03:00:44 +0000
Files and hashes: 1: XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl (hash: Xcgw0RNmbdYx+WUporqzBv2Bboye0yklDveLXsLvJeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:4d:72:9f:7b:b2:b6:4e:22:25:b1:54:a7:ff:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf12899f358d1c341a207fde21d43c70a6945e
Validity
Not Before: Aug 7 03:00:44 2025 GMT
Not After : Aug 8 03:00:44 2025 GMT
Subject: CN=463f98b4c92ba05140b59ad39fdc56f959f103dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:53:98:65:02:1a:3f:af:4d:33:31:54:cd:
f5:36:23:86:e5:00:19:c7:b8:c8:fe:d3:04:d0:0b:
d7:dd:0f:38:dd:e6:86:ab:41:e1:0d:74:1b:38:61:
39:2a:1b:f1:26:d8:48:c7:4c:42:b5:d9:92:dc:f0:
cc:d9:c6:bf:0b:18:ab:53:cc:88:8b:23:9a:b7:70:
8e:4d:c3:70:08:bd:08:dc:79:90:04:50:c6:bf:56:
30:aa:c8:da:54:c9:9c:74:a0:11:8f:f9:81:30:ff:
62:f7:10:8e:b5:e9:ee:7f:45:f3:6f:68:a5:c9:5d:
ed:a9:a3:5e:5f:f0:29:f6:b5:f5:68:a4:e1:6a:e5:
3d:3d:c2:a0:d0:6a:02:9e:10:2a:2e:4d:e8:64:6d:
80:5f:ea:45:5b:90:98:73:ed:50:61:03:0e:50:b5:
ba:2d:b1:b7:97:81:9c:fb:f3:02:aa:5d:29:32:f9:
32:5b:2a:f3:fa:0b:ea:b1:77:75:9e:d5:5c:0b:db:
73:a6:4b:02:3e:6e:e7:a7:01:c2:7a:2c:1a:80:f9:
e9:eb:91:92:8c:2a:b8:0d:6d:7e:f7:a9:32:8c:65:
56:35:a9:1a:d6:20:55:bf:f2:e5:ac:73:40:a3:47:
68:e7:60:39:01:39:2d:9f:5c:c1:71:cd:19:14:b8:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3F:98:B4:C9:2B:A0:51:40:B5:9A:D3:9F:DC:56:F9:59:F1:03:DD
X509v3 Authority Key Identifier:
keyid:5C:CF:12:89:9F:35:8D:1C:34:1A:20:7F:DE:21:D4:3C:70:A6:94:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ce:08:80:1b:e9:18:62:66:63:04:60:19:02:e1:69:b2:ac:
69:cb:e0:21:6e:68:33:c8:db:2d:d8:f8:b4:36:02:8c:a7:23:
05:f0:80:66:d3:13:4a:72:ee:fd:60:d2:4a:d7:c6:22:04:d6:
f7:a9:34:5a:8b:41:4c:5a:ab:23:3c:9e:db:af:75:a1:a8:e6:
ad:51:76:dc:74:11:ab:ae:46:88:de:c4:6a:a4:a0:9d:1a:28:
a8:26:27:f8:84:34:15:c0:0e:57:ba:c3:10:d9:47:ae:1d:27:
9f:84:b8:98:af:e6:2f:c8:5a:6c:8b:38:8f:13:c6:68:f5:98:
e3:e2:a3:a7:ca:0d:55:dd:f4:94:18:99:da:47:d3:c8:04:43:
09:f5:22:4a:8b:32:c0:d7:70:53:21:6b:f2:bf:26:7e:fd:92:
21:fb:06:05:d3:d2:c2:9e:78:51:79:db:9b:b4:8f:7c:5e:d0:
e4:ab:68:7a:8c:a1:6a:a4:96:f9:bd:58:49:c6:45:38:d0:22:
f6:75:f0:c4:96:e2:55:b6:95:36:94:ce:42:a7:d2:3e:96:3c:
51:1b:4c:e7:d3:7b:ac:2d:0a:d1:0a:93:0d:62:55:92:90:79:
ee:72:ab:3f:8a:8b:14:dc:83:0b:45:0e:62:e2:82:55:af:af:
82:61:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:14:15 2025 by rpki-client