Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: dneGmcpHen0d10ZBlgmr7esKoJZn+aQfqSmbZpeNcFM=
Subject key identifier: 1F:86:B1:4D:B3:E4:2E:98:42:90:BD:60:56:B4:9D:E1:98:D7:4E:CE
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 01988F59F9C2FAB1AA756610D49DFFCAD6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 03AF
Signing time: Sat 09 Aug 2025 15:01:35 +0000
Manifest this update: Sat 09 Aug 2025 15:01:35 +0000
Manifest next update: Sun 10 Aug 2025 15:01:35 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: ftzgAlTXQHrBjRwisEHUewtGpiorcL0fcQsnCIHF67E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:f9:c2:fa:b1:aa:75:66:10:d4:9d:ff:ca:d6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Aug 9 15:01:35 2025 GMT
Not After : Aug 10 15:01:35 2025 GMT
Subject: CN=1f86b14db3e42e984290bd6056b49de198d74ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:5e:38:2b:6e:f7:02:30:66:dd:3c:47:c1:
3b:fd:a7:cd:c7:dd:ad:9e:48:82:59:3b:6e:fc:d4:
08:d6:28:4d:de:03:fc:4c:c1:4d:ad:49:b0:fd:bd:
0c:95:84:b1:68:75:7f:60:bc:4b:f6:b0:6a:de:a1:
d1:b3:6d:66:a8:aa:c7:75:59:48:19:77:37:71:ce:
9c:ad:50:55:1e:2b:3b:23:1f:46:94:a2:74:50:0e:
52:69:ac:e4:b8:a6:59:a0:5d:b1:1b:86:47:e9:fb:
58:2a:91:ce:55:5d:e7:42:d0:2f:59:8c:5f:be:c3:
76:01:4a:d0:a6:04:84:9e:0e:d7:6e:9e:d6:48:23:
63:dc:85:2c:05:49:28:af:3b:2e:fc:88:2e:eb:c1:
c3:95:3f:90:3a:54:6a:91:df:76:32:ff:c4:bf:09:
01:63:55:9b:39:86:f1:1c:d3:f1:96:67:10:80:6d:
88:f4:a5:7a:c8:8c:70:12:e6:d3:77:0d:3c:92:ba:
0f:e3:35:83:a6:48:f6:32:bb:a4:d3:f4:7d:fe:98:
d0:ea:e2:02:43:56:a8:f6:1d:64:6c:dc:2d:2a:51:
e5:22:fa:07:97:f3:c8:c4:47:fa:e3:f8:6a:b1:06:
d1:b5:fe:e9:25:b2:f2:e3:d9:99:e3:f5:7f:9b:41:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:86:B1:4D:B3:E4:2E:98:42:90:BD:60:56:B4:9D:E1:98:D7:4E:CE
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ad:d6:04:ac:d3:6e:0d:b9:7f:66:ea:80:64:40:6e:61:42:
54:81:f0:ae:d0:98:94:fc:f4:c5:df:12:80:13:1a:81:4b:ff:
58:64:46:cb:8f:74:dc:76:14:c6:e2:cf:d8:74:d3:fe:c1:a4:
3a:fe:11:7f:c2:42:93:7d:26:30:49:c7:cc:d3:11:43:2d:bb:
1c:9c:57:d9:89:fb:10:35:b0:d8:12:bf:ac:db:cd:22:ec:7b:
c0:4f:06:c2:07:7b:6f:7d:8e:82:f4:2c:81:70:06:93:bb:34:
15:d0:d8:aa:7a:eb:d4:70:ec:9e:d8:55:4e:39:cc:ab:04:8e:
73:28:ee:ea:dc:67:d3:56:59:25:a8:d1:77:01:e3:98:67:06:
6e:6e:90:3b:c8:88:b2:4b:ad:d0:5d:dc:42:ae:86:62:b4:d1:
d0:19:6d:69:0f:41:ed:d0:17:eb:a1:b8:f6:ca:62:59:5c:68:
90:fc:ba:06:7a:a3:a5:f3:bc:47:a2:64:95:8c:69:56:94:87:
d3:8b:17:9d:e9:49:03:04:1f:9e:ff:05:cb:24:cc:b1:98:2d:
5e:44:c9:47:e1:89:88:88:3b:17:08:61:68:78:5d:d0:c3:ef:
29:b5:15:97:93:d1:d9:4d:b2:6c:ec:c7:6a:9f:2e:19:d2:f9:
5e:b9:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:35:21 2025 by rpki-client