Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier: Fn4wwfPUE9+dqphRdjUB14xx+6JsYNy6oCKCAIgS5Vs=
Subject key identifier: 88:D0:6F:BC:CE:2C:E6:3F:77:6A:95:FB:CE:CC:5D:2C:1A:2E:77:9D
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial: 01987D8B8EC05AF02F9C9132A3B993B812CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number: 08AA
Signing time: Wed 06 Aug 2025 04:02:34 +0000
Manifest this update: Wed 06 Aug 2025 04:02:34 +0000
Manifest next update: Thu 07 Aug 2025 04:02:34 +0000
Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: BqpJdDklQZU21ZcX3Bvf6b4Asm+zLA732dfmzexnEgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:8e:c0:5a:f0:2f:9c:91:32:a3:b9:93:b8:12:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Validity
Not Before: Aug 6 04:02:34 2025 GMT
Not After : Aug 7 04:02:34 2025 GMT
Subject: CN=88d06fbcce2ce63f776a95fbcecc5d2c1a2e779d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:04:9b:3b:65:f1:3a:dd:b0:74:5a:11:6a:
55:5e:2c:95:9f:94:a1:75:e2:cd:42:6e:3e:82:9f:
6f:1a:54:0d:1d:75:7c:84:dc:59:dd:66:be:8e:c8:
c2:69:75:39:7a:6b:b5:32:cb:78:5b:85:60:73:59:
aa:ac:34:7a:af:b9:70:98:16:1e:8d:f3:34:33:57:
95:2d:92:c6:b8:c4:c7:d7:b4:29:f2:6f:a4:38:3c:
11:b9:32:c4:9a:89:17:f4:45:88:7c:ef:68:a2:e0:
89:e4:53:dd:b4:75:7a:2d:93:93:31:fd:5b:a2:91:
ee:cf:d7:11:67:93:4d:76:1c:3e:77:d3:d0:1f:76:
22:21:d4:46:1e:c1:1f:9e:8f:31:dd:b9:6c:a5:dc:
b8:96:49:70:3c:4d:67:67:84:de:3c:87:c8:2d:27:
a5:31:8c:a9:66:f9:f5:e9:75:aa:47:41:2a:9c:b7:
50:29:aa:9a:da:77:dd:fc:02:77:f7:2d:15:b7:18:
2b:0c:b1:01:9b:74:ec:0f:d0:4b:75:f7:b6:d3:0b:
44:0c:b4:26:c3:ff:b2:7b:cb:d6:09:e0:89:74:84:
a1:0e:5b:1b:f4:86:a7:7b:e7:9c:a1:39:e3:57:19:
10:96:a2:d2:d8:56:1c:50:6b:5d:2f:ad:4a:8e:fe:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D0:6F:BC:CE:2C:E6:3F:77:6A:95:FB:CE:CC:5D:2C:1A:2E:77:9D
X509v3 Authority Key Identifier:
keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ac:df:62:ac:de:35:87:3c:12:0b:af:c0:de:32:a5:81:e8:
19:1b:b4:6c:0f:f4:3c:b4:f5:55:13:9e:f8:79:c9:37:cd:0d:
ba:15:6f:0f:8b:94:58:c0:7b:f5:1e:ab:d3:f0:7c:d9:99:96:
4c:b6:22:59:2c:3b:40:37:79:fb:f1:cc:8d:1c:48:58:5d:19:
8a:10:34:1c:fd:be:cd:1c:12:3a:d2:d8:f3:c3:fc:33:fc:c0:
2e:9e:3b:a2:e8:12:f2:bb:dd:d5:e5:15:15:c7:27:d4:c2:17:
f6:00:1b:b5:9b:e4:db:2d:91:22:bf:43:53:a4:05:9f:66:4d:
f6:32:0b:47:bc:18:a2:b5:e3:60:fc:24:4a:fb:f8:0f:6a:e2:
88:b6:94:61:24:b8:cc:34:a3:4c:49:29:de:b3:34:db:e9:c1:
4c:bd:6d:10:32:5b:9d:13:72:42:dc:89:d0:be:58:94:62:e9:
60:00:7e:d9:9a:8b:40:50:6b:ed:67:df:15:e0:c3:0f:28:d1:
fb:4f:cc:14:4c:57:83:fd:bf:a3:db:23:fe:a9:61:0b:2d:91:
cb:28:49:cd:7d:ce:64:37:4d:e4:40:08:86:9d:84:1b:e8:ea:
06:54:6a:19:f2:0f:19:5e:d6:e6:7b:96:71:5a:23:c2:3a:10:
e8:cc:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:20 2025 by rpki-client