Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: Q9Ti5VRLOxXlKcl2IuVUbBsWc6gnkz7IAHHrWzDn25E=
Subject key identifier: 99:63:34:AE:D2:44:B2:73:5D:5E:F4:57:EC:47:A2:6C:94:77:4A:C4
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 019893DAB7C16B77F56808BA5A54854473E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 12:00:40 +0000
Manifest this update: Sun 10 Aug 2025 12:00:40 +0000
Manifest next update: Mon 11 Aug 2025 12:00:40 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: voOR+MhYYBbNP5rZiaiCd+RR6VMZA5P799pVvbyr59I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:b7:c1:6b:77:f5:68:08:ba:5a:54:85:44:73:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Aug 10 12:00:40 2025 GMT
Not After : Aug 11 12:00:40 2025 GMT
Subject: CN=996334aed244b2735d5ef457ec47a26c94774ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:5c:5e:e9:91:11:10:a7:7e:22:30:04:90:
7e:fb:ec:f7:bf:4e:ee:99:43:16:f1:d9:f4:03:59:
80:ce:93:0f:51:c8:31:e6:a2:71:ea:48:98:3b:c9:
e8:12:9b:51:3b:eb:8f:d7:6b:64:99:3f:85:64:41:
c6:af:6e:cb:b5:45:40:42:fc:a7:5a:cd:7c:03:ec:
ce:08:21:67:9f:de:65:0e:ad:1c:8d:67:95:28:86:
d2:ee:e9:6f:c3:4b:57:f8:ec:53:47:3f:6b:18:55:
ed:5a:a8:5f:23:cd:43:4d:39:bb:cf:be:e8:fd:d3:
30:40:41:a2:13:39:cb:29:75:d5:8e:93:04:59:e4:
8e:c1:4d:09:bd:39:2f:1d:f6:9f:cd:95:6c:22:fe:
91:e0:ef:6a:f2:51:bd:53:a0:e6:c2:de:8d:86:48:
69:2c:bf:57:9f:b0:9e:61:71:7d:c6:7f:c1:5d:e1:
eb:18:d4:10:e4:82:c0:b7:0b:4f:5b:74:0e:2c:4a:
f8:29:d4:24:d5:51:7e:97:4f:5b:a1:dd:4b:3b:a0:
9d:72:e0:77:13:67:6b:c9:b8:8c:22:b8:b9:92:ca:
b1:17:4b:4a:5c:8c:7d:b0:86:6a:60:ad:48:80:6d:
b5:e4:47:be:9f:3e:5a:9f:3b:87:06:07:63:c0:bd:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:63:34:AE:D2:44:B2:73:5D:5E:F4:57:EC:47:A2:6C:94:77:4A:C4
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:91:5a:44:d6:7b:56:ee:83:c8:93:dd:92:6e:14:f5:68:12:
a6:8e:ed:a1:1a:10:48:07:35:73:11:60:af:36:95:09:ac:86:
76:2c:d1:87:0b:f1:b3:22:d5:78:a7:29:68:4f:5b:1b:80:bf:
29:0b:f9:fb:85:b2:ee:16:c1:30:8a:20:42:52:d1:e6:e6:c5:
be:84:a2:22:da:e1:fd:88:76:e3:64:03:8f:b9:cc:e9:1e:7a:
16:33:f8:98:29:54:f7:19:85:f6:f5:0c:7e:6c:f0:09:fb:7e:
7a:b4:be:4f:40:c2:60:46:9e:50:f5:a4:54:93:2a:9c:f3:1b:
9b:91:3d:81:fc:cb:d8:c0:77:07:00:e2:07:36:cc:92:b7:a8:
a8:7c:9d:1e:99:de:f2:42:48:19:74:cb:67:9c:7a:58:9c:58:
03:a2:28:b7:64:cb:c7:c2:a4:26:0f:fd:2e:5a:77:22:b8:33:
9b:28:6d:ef:6e:17:c6:bc:8d:02:f8:b5:74:79:b9:e5:d8:68:
c8:c9:c8:a2:66:2f:e6:7c:0a:d7:b4:0d:2a:bf:a2:1b:d0:35:
60:aa:77:3c:63:d7:15:cc:14:80:c5:9a:03:07:2b:46:6d:7d:
3a:eb:c9:48:e1:5a:87:f8:0d:c3:74:a4:f7:f4:12:f9:bf:57:
eb:f5:2d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:45 2025 by rpki-client