Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
File: xnp-TG1V61E8VFdgqP9lba3wuNc.mft (raw, json)
Hash identifier: IXr8OuESz0iS3a5mueia1/0N5INv43W64NFQ5s3Fbh8=
Subject key identifier: 12:53:2F:B7:91:29:40:65:F6:37:5E:6A:96:6D:5A:D2:DD:A0:C7:07
Authority key identifier: C6:7A:7E:4C:6D:55:EB:51:3C:54:57:60:A8:FF:65:6D:AD:F0:B8:D7
Certificate issuer: /CN=c67a7e4c6d55eb513c545760a8ff656dadf0b8d7
Certificate serial: 01988F594EB807AF76A171D84FBDF49FFCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
Manifest number: 01EF
Signing time: Sat 09 Aug 2025 15:00:51 +0000
Manifest this update: Sat 09 Aug 2025 15:00:51 +0000
Manifest next update: Sun 10 Aug 2025 15:00:51 +0000
Files and hashes: 1: xnp-TG1V61E8VFdgqP9lba3wuNc.crl (hash: qa+a/bZSPWZkNALKAhcknHASj650ALZV1jPwJIqSpXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:4e:b8:07:af:76:a1:71:d8:4f:bd:f4:9f:fc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67a7e4c6d55eb513c545760a8ff656dadf0b8d7
Validity
Not Before: Aug 9 15:00:51 2025 GMT
Not After : Aug 10 15:00:51 2025 GMT
Subject: CN=12532fb791294065f6375e6a966d5ad2dda0c707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:5a:81:d8:8a:0e:cc:2b:5a:6d:f0:9a:37:
da:0e:e3:88:01:95:4f:58:2e:25:85:59:b4:ee:f9:
0a:0c:e2:93:4b:60:3b:7e:c5:2a:57:74:f5:de:d8:
02:b4:bc:8b:16:30:18:e1:3a:82:8b:9a:88:17:77:
f1:ab:d9:8b:03:21:f6:8c:8f:bc:12:73:42:c9:a5:
57:80:45:18:51:91:de:23:1d:2d:1e:bb:d4:bb:12:
78:fa:32:75:85:24:4a:05:90:a2:b1:2d:e9:ff:52:
a9:d7:1f:df:98:1b:71:58:3a:de:1b:01:6c:b2:f8:
94:88:ed:40:68:8a:c3:b7:b6:ea:18:d7:62:21:c2:
99:7e:7a:f4:f8:06:9e:19:6e:fe:70:54:af:26:fb:
c5:34:63:e8:f0:0d:48:3a:3d:45:ed:ce:34:e4:9e:
bb:09:42:b4:49:c2:6e:08:63:24:06:b8:c4:73:df:
03:08:8c:ec:f9:d6:39:37:f2:42:c3:da:77:f1:83:
53:e8:9d:ec:bd:01:f3:a4:ee:5a:6b:7a:85:3f:af:
bf:99:f9:82:f1:12:df:6d:db:8d:78:61:26:73:1f:
15:53:38:2d:98:7f:84:42:bf:53:80:4f:57:fa:20:
33:2e:b1:90:b6:96:ab:7f:83:40:da:45:ef:c5:b8:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:53:2F:B7:91:29:40:65:F6:37:5E:6A:96:6D:5A:D2:DD:A0:C7:07
X509v3 Authority Key Identifier:
keyid:C6:7A:7E:4C:6D:55:EB:51:3C:54:57:60:A8:FF:65:6D:AD:F0:B8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:06:15:b2:6c:60:63:93:0d:46:10:04:6e:4f:5f:f2:f2:8c:
a7:e4:0c:16:5e:f4:2e:a5:bc:28:4d:9e:65:eb:69:a6:60:da:
a8:59:d8:5f:85:93:7c:b9:16:4a:cd:d0:85:67:cb:6c:bd:f0:
5f:72:4c:09:48:f0:b6:56:43:33:a2:ee:cf:c1:5b:74:57:6f:
94:2c:ca:0f:f9:2c:85:53:ca:4f:c2:3f:b6:a4:1b:50:5e:c1:
2d:97:f7:43:3e:ec:f5:94:30:49:30:98:1a:fb:27:69:cf:bf:
d0:8e:eb:41:40:fc:7e:4e:3f:c6:c1:68:4e:98:29:07:7f:23:
a4:2a:14:ea:d7:0d:49:c6:5c:e0:4c:b9:fa:2b:bf:7b:9b:56:
cf:a9:44:aa:ec:a2:87:45:af:fd:d5:e8:37:d1:41:c5:25:d9:
47:9a:fb:f1:2c:6d:bd:d1:a0:97:1c:6e:89:a0:ce:0d:07:01:
cf:dd:a9:75:71:5a:b4:29:33:6f:92:05:1a:77:32:35:f3:ab:
ca:40:c5:55:31:37:36:85:3c:4b:66:88:eb:03:7e:55:a3:d2:
98:ed:64:2b:0c:65:a9:5e:70:4e:50:1c:bc:ed:cf:da:a9:63:
f2:39:1a:cf:d5:f8:e8:f8:df:76:ca:72:96:c5:a7:56:12:18:
12:09:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:15 2025 by rpki-client