Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
File: xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json)
Hash identifier: PDghAF439bRKIUK75mbV1QwOCae1kAcRN2g31rkYTb4=
Subject key identifier: A0:B2:DD:03:52:D5:04:42:CF:5D:C9:A1:94:F2:F0:7B:2E:F2:42:5A
Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
Certificate issuer: /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Certificate serial: 019896A54F274753C284388EB34AB625513C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
Manifest number: 0D87
Signing time: Mon 11 Aug 2025 01:01:12 +0000
Manifest this update: Mon 11 Aug 2025 01:01:12 +0000
Manifest next update: Tue 12 Aug 2025 01:01:12 +0000
Files and hashes: 1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: HmGfvKfaKrAgj+lDZt6x7zClS8Y4YV6zU77nxjl3wZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:4f:27:47:53:c2:84:38:8e:b3:4a:b6:25:51:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Validity
Not Before: Aug 11 01:01:12 2025 GMT
Not After : Aug 12 01:01:12 2025 GMT
Subject: CN=a0b2dd0352d50442cf5dc9a194f2f07b2ef2425a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:dd:02:cc:10:ed:7b:0f:f3:87:1c:1a:f4:
d6:9f:3c:3c:1a:98:17:3a:34:9f:47:bc:af:5e:fb:
a1:11:d4:1e:d6:c9:e7:3f:08:fa:77:af:a3:23:a8:
05:67:d6:26:61:23:f7:f6:f0:e7:ce:44:f9:91:3d:
3c:3f:de:0e:6e:16:78:8a:37:ec:01:b4:04:85:f1:
77:e5:37:b9:ca:47:92:80:d4:ef:d1:f8:c8:30:1a:
53:a4:1c:00:a9:3e:d3:8b:52:ea:46:8d:0f:51:dd:
a5:7e:5e:61:b6:86:df:17:40:67:b3:1c:97:94:21:
e9:f1:04:03:5b:15:9b:5b:63:57:ef:8b:97:77:09:
d3:8e:66:d4:5b:80:b5:fa:2b:4a:4b:33:f3:4e:82:
8b:ab:f5:70:79:5e:5e:ed:13:a3:da:b4:f5:d2:ae:
71:b8:df:24:d7:77:50:54:33:30:c5:e8:cf:14:e9:
ac:73:0b:bb:45:6d:9c:90:2c:dd:8b:00:16:36:22:
ad:30:24:71:70:ed:c7:98:e5:10:16:f7:3f:de:dc:
5e:c1:0e:80:2e:14:1d:a5:66:ea:02:b3:3a:36:8c:
0c:bf:a2:30:8c:cc:3f:f5:29:b4:6d:b3:41:c7:51:
24:8b:dd:4d:08:03:20:97:f8:f5:fb:a2:ce:8c:5f:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:DD:03:52:D5:04:42:CF:5D:C9:A1:94:F2:F0:7B:2E:F2:42:5A
X509v3 Authority Key Identifier:
keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fb:b1:bc:30:e3:b4:a1:d3:de:4d:3e:24:76:d1:60:83:11:
34:18:ce:fe:08:aa:73:62:f4:7a:2a:f5:e4:31:b4:c3:7b:e3:
e1:a7:50:95:45:33:46:fd:e8:02:23:76:17:a2:8e:6e:84:32:
56:a5:d7:bb:cd:ef:42:46:0c:57:35:db:b1:dc:dd:77:7f:dc:
25:13:a9:39:a6:ae:30:41:6e:ac:c1:f4:3e:51:97:de:54:8e:
4a:08:96:9d:bb:b7:19:b6:b2:d0:6d:02:2a:30:75:ac:c5:fb:
df:c5:be:33:5d:c7:b8:4a:c7:ba:45:7f:86:2c:3f:00:0d:0b:
94:21:cf:dc:28:ef:9c:7d:e1:15:28:d2:d2:bc:9f:5d:3c:0c:
81:51:1c:9b:e0:0d:13:4a:b6:98:5a:8c:1e:41:75:b3:8b:31:
bd:7e:48:4a:fa:74:18:4b:b5:12:44:60:12:cc:21:67:17:02:
6c:9a:21:23:8e:37:56:67:21:2f:3d:1d:e6:de:6c:02:80:64:
64:71:76:9a:32:ed:20:32:62:c4:1c:e5:13:03:0c:46:7d:ac:
db:e1:64:42:57:ae:84:6f:81:f4:6b:cb:03:62:9e:af:f7:8e:
02:07:58:ff:e9:5e:16:8d:a5:38:96:f2:79:d5:52:a0:9c:1f:
41:b4:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:48 2025 by rpki-client