Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
File: xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft (raw, json)
Hash identifier: VvkWVgIEfHESA31xHMEOUnuBbcYZ7TYERZ6qxSUHJgk=
Subject key identifier: 7E:30:80:0B:CC:52:8D:11:37:52:75:45:DF:BC:70:56:38:A6:27:73
Authority key identifier: C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
Certificate issuer: /CN=c596785476efbae77f961d23057057fa036fb27f
Certificate serial: 0198A128B4C2B4EE5CA856C35055B3C8CAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
Manifest number: 14DA
Signing time: Wed 13 Aug 2025 02:00:56 +0000
Manifest this update: Wed 13 Aug 2025 02:00:56 +0000
Manifest next update: Thu 14 Aug 2025 02:00:56 +0000
Files and hashes: 1: xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl (hash: rY2LMtBILgvo0whwiFFN/13SBOdf0qlimG2hP3Aljtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:b4:c2:b4:ee:5c:a8:56:c3:50:55:b3:c8:ca:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c596785476efbae77f961d23057057fa036fb27f
Validity
Not Before: Aug 13 02:00:56 2025 GMT
Not After : Aug 14 02:00:56 2025 GMT
Subject: CN=7e30800bcc528d1137527545dfbc705638a62773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:b4:67:2c:b7:39:60:c7:82:9e:12:07:6d:
66:c7:e8:c0:5d:58:0f:5c:43:5a:15:a9:f7:48:ac:
5f:fe:79:ed:83:4e:c1:68:a1:81:81:1a:a4:57:81:
b4:f2:80:ae:0f:f6:74:0f:05:19:57:66:35:3c:45:
0f:9e:22:fd:bb:72:72:ee:ea:df:8c:a7:7f:d7:ae:
6f:c8:e5:3b:8b:e2:1c:7c:8d:7d:dc:e8:1b:68:1f:
22:70:b0:cf:6a:88:5c:9a:04:2e:dc:ba:18:c9:b8:
39:5e:ff:5e:9d:43:2c:48:25:2e:c4:01:48:8e:45:
5b:4f:a8:65:0e:90:2a:20:5f:2b:38:ca:4e:71:2d:
09:1d:de:df:72:8d:6d:57:6f:53:94:53:49:56:30:
d7:c6:2b:ee:28:a1:e4:fc:2d:19:96:6d:03:59:97:
16:cb:20:3d:bd:51:4f:24:20:e7:1b:96:5e:8b:79:
b3:45:c3:cc:99:d2:d4:01:50:96:cb:f8:4c:1c:1f:
60:b3:bc:9e:9d:e7:b1:f9:e1:b1:e1:b9:41:a0:67:
43:54:ad:96:54:47:ca:23:03:b1:4c:b8:62:39:b6:
c6:89:99:6c:7d:4d:75:e3:62:91:b8:9e:fd:93:2a:
04:91:a3:80:6a:d8:b2:31:af:ea:a3:1a:49:67:b4:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:30:80:0B:CC:52:8D:11:37:52:75:45:DF:BC:70:56:38:A6:27:73
X509v3 Authority Key Identifier:
keyid:C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:12:fa:53:a0:b4:af:b3:10:0d:f8:a1:f1:44:43:58:b3:19:
d2:c6:19:59:46:cf:39:fd:cc:df:5e:fa:56:f2:da:e6:3d:59:
17:e0:99:84:af:43:8c:17:c1:dc:64:4e:40:59:08:5e:f0:26:
16:31:e3:52:91:b6:78:bc:1e:92:44:e9:97:50:71:c9:59:11:
6b:44:a5:12:54:27:54:78:b0:4c:75:91:25:cb:14:0d:b0:21:
a1:6b:f8:3a:9f:8a:c2:07:42:62:fc:8e:f3:52:a6:86:4a:09:
f0:2d:93:17:fe:a0:fb:59:9f:78:e7:de:4a:81:7c:b4:6a:32:
26:22:48:7f:e1:51:c6:6c:30:ab:5f:66:c1:83:14:f3:3b:d9:
f8:b8:11:e8:b7:bf:93:9d:1d:03:ee:31:0f:af:7a:59:24:af:
d2:dd:12:9c:b0:8e:47:f4:3b:94:42:7f:9a:f7:f8:64:16:9c:
51:3e:3a:e4:a4:8e:0f:18:4f:ce:49:18:eb:73:35:02:7b:92:
58:9a:cc:8e:1c:f8:50:1a:dc:61:5a:d4:1e:6d:14:7c:81:09:
7b:36:ce:7d:d1:4f:41:d7:fd:7f:ed:c9:6e:2c:45:a2:ca:59:
7b:2e:af:b0:83:6e:25:65:21:87:e0:19:8a:82:46:ef:8c:17:
7a:35:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:07 2025 by rpki-client