Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: TLXZk8f9QrFcpenT0Lj3g7nOSDsHKokyetQHZUVHTE4=
Subject key identifier: EE:81:CA:00:75:74:14:53:44:55:E6:64:8E:A2:5C:69:CA:85:3D:54
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 01988CFF0A8670A0CA1FEAF5DDB52E0EC315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 15F5
Signing time: Sat 09 Aug 2025 04:03:01 +0000
Manifest this update: Sat 09 Aug 2025 04:03:01 +0000
Manifest next update: Sun 10 Aug 2025 04:03:01 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: +0LgItXqupJw5Hg6CVglT5binGkmIG7JBqOw/2A2ZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:ff:0a:86:70:a0:ca:1f:ea:f5:dd:b5:2e:0e:c3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: Aug 9 04:03:01 2025 GMT
Not After : Aug 10 04:03:01 2025 GMT
Subject: CN=ee81ca00757414534455e6648ea25c69ca853d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:37:e9:82:2f:af:f3:e0:a0:39:21:d0:13:8a:
5e:0c:84:9b:a8:81:78:dc:6b:54:7c:6f:83:21:5c:
e8:ea:99:d6:6a:4a:c3:2c:2d:7e:c9:6b:19:af:8c:
0e:fa:35:13:9b:5e:be:7c:21:3a:d1:3d:f4:64:79:
1f:0e:e0:74:b9:bd:4d:b6:1b:e0:2b:77:70:d0:d7:
54:79:4e:01:c8:a0:66:c9:fe:79:24:a6:5e:9b:07:
1d:67:1e:2e:c3:aa:51:bc:da:a0:cc:a1:a6:35:e8:
54:c8:1c:62:96:b9:43:97:a1:6d:57:45:39:f3:dd:
a0:85:4e:7f:16:f6:4b:51:60:35:0d:a7:00:66:ae:
85:83:48:15:a9:fb:d7:ba:59:8c:79:f7:7c:ef:2f:
53:b3:26:c3:92:d9:a1:57:d0:89:ab:66:6d:3a:7e:
cb:6f:92:27:56:c0:27:36:1e:3b:c1:3c:aa:31:f6:
71:05:26:85:2d:5b:24:22:f9:70:d6:24:91:78:a3:
c9:98:2a:cf:15:dd:7d:5c:8d:dd:35:27:1a:76:f4:
6f:53:ad:8e:0e:f2:ff:62:18:b5:f8:fa:2d:af:93:
1c:ec:5f:f2:1f:6c:47:07:bb:4b:9a:63:5a:64:c1:
20:73:ce:13:5c:76:26:02:f4:13:d9:ae:31:9d:a8:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:81:CA:00:75:74:14:53:44:55:E6:64:8E:A2:5C:69:CA:85:3D:54
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:39:83:49:2a:db:57:9c:85:57:ce:c3:76:91:46:b4:ed:ba:
65:96:6f:d3:05:93:33:42:06:dc:b8:6a:c1:f1:7f:89:59:1c:
94:f7:52:9f:b0:32:40:3f:4c:c0:5e:8b:29:6a:e2:72:fe:16:
04:7f:2d:bc:e9:4d:f0:d7:51:59:9b:db:ce:54:7f:4a:65:1c:
92:46:49:4e:af:fa:87:0b:d2:2f:18:e7:08:88:7d:40:c1:cc:
ae:05:5c:cb:8c:ca:c6:a7:59:1f:6b:d8:29:da:a2:14:94:13:
b1:95:77:b7:6c:a5:09:c3:82:ee:76:43:16:52:bb:f1:46:65:
e3:22:35:47:6d:e7:d3:69:9e:19:35:d6:24:18:bd:86:83:1c:
a1:e3:95:2e:85:75:18:83:f4:f3:c7:ef:ef:a1:9e:38:20:2a:
34:6c:77:90:58:4f:6a:c9:82:e9:b1:3d:2f:3e:c7:07:81:99:
7f:47:0e:46:b8:8b:bc:06:b0:ea:d3:03:a9:ae:56:ae:c3:79:
08:d1:90:2f:f1:f2:3d:8e:65:72:d8:ee:6e:58:3d:32:af:47:
06:59:4e:dc:01:73:ed:86:e7:7d:ac:97:02:10:a4:ba:02:96:
c6:2c:74:60:c0:a8:27:a3:fb:35:4b:75:85:4e:33:18:f2:56:
db:03:6e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:29 2025 by rpki-client