Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
File: xLMV8myhzbhEERaAw88EN7TBJ-Y.mft (raw, json)
Hash identifier: 7pYdTPULRqvlt1UZEgtT/2CJC+p8X9CD0HOTnsrn1jA=
Subject key identifier: 58:86:9A:50:95:8E:68:4B:05:91:2F:34:99:75:A7:46:2C:8A:85:F9
Authority key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Certificate issuer: /CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Certificate serial: 01988F599AC1C648172C18981CDA6FEADC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
Manifest number: 022C
Signing time: Sat 09 Aug 2025 15:01:10 +0000
Manifest this update: Sat 09 Aug 2025 15:01:10 +0000
Manifest next update: Sun 10 Aug 2025 15:01:10 +0000
Files and hashes: 1: xLMV8myhzbhEERaAw88EN7TBJ-Y.crl (hash: gcEDpIQaXf3lHKCrrg7ZV03B5ugmFxIkwo0bF+wBCJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:9a:c1:c6:48:17:2c:18:98:1c:da:6f:ea:dc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Validity
Not Before: Aug 9 15:01:10 2025 GMT
Not After : Aug 10 15:01:10 2025 GMT
Subject: CN=58869a50958e684b05912f349975a7462c8a85f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:93:64:9b:e5:68:f6:9e:5e:f6:39:34:c8:
c6:ca:e8:13:a2:db:44:dc:7c:5e:57:bd:63:f0:ad:
c6:4b:e1:94:2c:12:f1:8b:31:a7:22:12:9d:c1:f9:
b2:a0:12:50:44:9e:e0:97:71:fb:e4:3d:b2:71:b9:
df:b6:0f:6c:64:5c:cd:0e:aa:25:9a:b5:11:29:7a:
20:0a:b1:83:ba:07:cc:58:9a:9d:68:c0:6d:e8:85:
55:a8:63:cc:1b:ef:f9:0f:a8:08:7a:31:87:bb:e7:
e8:2b:5f:c8:1a:ad:11:11:64:90:ee:43:65:22:4b:
33:5b:08:d2:a0:f2:fb:12:cb:48:27:76:44:41:00:
95:b6:b3:18:b7:fc:fd:fe:94:cd:4d:07:05:60:52:
60:9d:09:e1:6b:f8:69:e7:1d:1a:30:b3:a6:e3:3e:
a9:88:d2:64:8d:99:58:1f:b1:61:5a:79:a6:ca:4a:
11:00:b0:76:ab:79:b5:3a:6e:78:82:0e:fa:7b:ae:
ef:d8:d1:de:e6:da:0a:22:d4:45:b3:08:2f:0f:f7:
f0:59:d4:73:c8:9e:c0:22:a5:f3:4a:a2:67:5e:59:
33:c4:01:e4:fa:cd:d4:fd:91:f9:5c:1f:87:54:f3:
48:81:8f:e6:9a:ad:06:aa:27:10:61:be:9d:58:ee:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:86:9A:50:95:8E:68:4B:05:91:2F:34:99:75:A7:46:2C:8A:85:F9
X509v3 Authority Key Identifier:
keyid:C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a5:ad:7a:e9:fd:5f:0e:42:40:ea:ec:d2:52:48:d4:77:0d:
66:3a:d5:a5:0c:bd:33:bd:49:39:23:1d:da:4e:ee:87:a1:86:
7a:63:ed:ab:3b:c5:4d:8c:14:42:c0:63:30:98:f5:83:46:1b:
b5:5b:dc:54:82:ef:67:e3:77:42:77:de:c8:46:11:55:58:12:
c7:ce:95:5c:77:86:27:e9:ce:1c:1f:61:52:1d:e7:f9:e1:e0:
4c:ba:8d:c0:8c:be:91:dc:39:0d:85:e3:c0:e6:ff:f7:66:59:
0a:ab:58:a4:df:47:b5:40:ec:3e:83:42:1c:38:4a:be:6c:6c:
73:4c:88:58:63:50:c2:7c:7a:aa:fd:93:39:47:32:06:b3:a1:
5e:bf:ec:bb:a0:be:20:f6:c4:41:7d:e9:6c:f5:94:21:ce:e6:
fd:57:1d:3f:68:58:f6:de:8b:83:14:3c:7c:ca:2b:f5:ee:66:
48:b8:a0:fd:16:0c:89:c3:a9:53:8a:c3:80:d2:90:c3:73:05:
6a:2d:26:79:14:8a:1a:98:b4:87:f8:b5:7a:de:66:d4:75:cb:
48:d5:1d:60:e1:6c:e8:49:4b:87:a0:20:21:80:37:07:45:52:
b5:98:6f:7a:0a:a6:76:f5:b0:c6:f0:45:ea:84:ca:e3:2e:8e:
39:c3:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:16:54 2025 by rpki-client