Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json)
Hash identifier: ocrJpZ/onWyzqgH02iqI0/abC0tOBncmQ8sAZxxCm+g=
Subject key identifier: 0B:F6:1A:1C:6F:8E:8F:0C:4D:ED:45:0B:12:FC:3C:45:CC:98:C0:E6
Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Certificate serial: 01987E669782C4EA8F2E86790220BC1BC2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
Manifest number: 06F6
Signing time: Wed 06 Aug 2025 08:01:49 +0000
Manifest this update: Wed 06 Aug 2025 08:01:49 +0000
Manifest next update: Thu 07 Aug 2025 08:01:49 +0000
Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: 7/96ptra/Yef4J1IONI3eILITvnL3IxinQZv5sp7paI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:97:82:c4:ea:8f:2e:86:79:02:20:bc:1b:c2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Validity
Not Before: Aug 6 08:01:49 2025 GMT
Not After : Aug 7 08:01:49 2025 GMT
Subject: CN=0bf61a1c6f8e8f0c4ded450b12fc3c45cc98c0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:7c:bf:06:8b:b9:fa:dc:8f:1d:56:2e:59:
79:d4:c8:e9:62:ac:6e:fd:d6:b2:51:c7:68:37:77:
44:f6:d7:5e:9b:f3:c9:96:6d:4d:b5:78:90:0b:15:
e1:4f:d5:b5:db:26:fb:bc:c6:5d:d3:00:22:c8:a6:
12:d6:b5:70:cf:cf:b2:d8:ce:b4:84:7b:06:25:f4:
fe:67:6d:b6:97:ab:3c:50:9e:68:aa:60:e3:60:cf:
a7:68:69:35:5f:ac:da:30:86:3a:b5:50:34:5b:dc:
b6:89:1d:2d:03:ad:0a:23:65:98:c1:c4:92:4b:e5:
76:71:4d:62:87:11:2a:fc:34:f2:d1:61:37:15:9b:
08:0f:c7:b6:6c:ce:f7:90:cd:5f:cb:b6:cf:6a:b5:
e1:d6:0a:e7:16:2b:04:16:33:9a:75:88:ce:7c:87:
80:60:30:91:8b:10:5b:96:72:a6:b7:06:ac:6c:c3:
ae:d6:49:f1:f0:9f:39:2e:e9:07:9e:5d:1e:59:df:
f6:b0:f6:7a:bc:39:e6:cc:6f:58:9b:d1:95:f6:cc:
22:83:20:dc:bd:f1:85:20:91:bf:1a:96:61:95:00:
31:0d:56:80:8f:f3:de:86:32:3f:82:fb:57:b4:df:
90:50:82:2f:6f:52:6c:19:0b:57:ee:f5:13:43:11:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F6:1A:1C:6F:8E:8F:0C:4D:ED:45:0B:12:FC:3C:45:CC:98:C0:E6
X509v3 Authority Key Identifier:
keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7e:da:6c:d2:8b:ba:7b:8a:95:72:13:dc:e2:97:7b:5b:73:
05:2e:f5:96:f1:c9:d8:77:2a:68:50:8f:f5:36:d7:b8:4b:2c:
7a:dd:fa:d4:9b:d9:55:de:78:f9:93:fb:e2:6e:1a:5c:aa:4b:
f7:12:42:cf:f1:44:81:46:1f:e9:f2:ce:c3:3d:70:c7:bc:fa:
5c:08:48:f5:19:bd:6d:83:54:6f:42:bf:5c:bd:0c:92:e9:58:
10:34:dc:be:a9:89:1c:bd:6a:95:62:f6:16:a4:44:5d:de:66:
54:99:0b:07:a7:23:fa:46:ae:0d:f3:d3:6a:79:48:5c:96:90:
be:af:f1:34:10:1d:40:01:36:59:5f:9f:dd:b1:dd:d0:25:9e:
af:9e:ff:62:d4:85:37:d5:63:d3:7b:bd:1b:c3:be:13:34:26:
69:e9:2c:fa:dc:e4:07:6d:4a:e1:03:e4:a8:51:af:65:69:67:
35:b4:86:a0:11:62:83:71:20:86:7c:fa:e0:2f:1c:7b:d6:5b:
50:bc:55:d1:5e:84:d5:cf:cd:78:8f:be:fe:6a:89:b1:5e:d6:
b3:3b:85:78:93:19:6a:f8:2b:a6:2e:f9:a6:9a:17:7e:53:fc:
5b:45:11:64:b1:89:b4:36:42:6c:cc:24:f5:7d:ff:13:68:ca:
d3:43:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:50 2025 by rpki-client