Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: Mxd98ssqhsWVkK+pFkOxEWWeqIMwH1+hCXEfKyrhMmY=
Subject key identifier: BA:42:BD:F1:B1:CF:43:AB:7D:40:1B:88:58:81:FE:55:06:F9:33:B5
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 019874506DE6303550A3159E1E9CE4158CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 0331
Signing time: Mon 04 Aug 2025 09:01:24 +0000
Manifest this update: Mon 04 Aug 2025 09:01:24 +0000
Manifest next update: Tue 05 Aug 2025 09:01:24 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: 5U307EsM20Zh3gGlSDiBqBb5L+wmys9DO5fHDClqmz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:6d:e6:30:35:50:a3:15:9e:1e:9c:e4:15:8c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: Aug 4 09:01:24 2025 GMT
Not After : Aug 5 09:01:24 2025 GMT
Subject: CN=ba42bdf1b1cf43ab7d401b885881fe5506f933b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:c9:a1:44:70:e0:a8:d4:b1:8a:18:81:df:
be:3d:e4:7e:71:fd:fa:b3:3f:10:cf:2a:0e:f0:22:
91:ef:f8:80:e9:9e:92:ed:e5:8c:1a:60:2a:b5:8a:
29:c3:04:67:72:35:8c:cd:f6:22:59:8a:49:a9:81:
62:38:a4:55:85:d9:86:3e:9d:59:0d:8c:4a:65:d7:
0c:f7:07:9d:8f:bb:34:9a:06:59:6f:c8:e5:27:93:
67:82:db:c7:e7:73:03:dd:ed:6b:f1:a9:0c:1b:8c:
3a:ab:f4:e9:9e:7b:5e:c9:b1:47:4b:df:23:f3:0d:
19:4a:8a:4b:33:62:41:f7:6f:2f:db:3f:f7:c0:d8:
0d:f2:30:f2:00:46:5c:c9:ad:74:2f:e4:12:45:4f:
ff:85:f6:dc:dc:d6:63:04:ce:1b:1e:33:59:5d:47:
05:65:70:de:0b:31:45:c2:05:86:fa:4b:f2:79:46:
a2:55:97:8a:d1:2d:ca:a5:00:9a:e1:12:8c:e9:8b:
6f:fd:db:0f:77:11:c9:3d:92:72:8c:f8:eb:8d:f4:
92:12:9c:c4:40:ad:c0:a1:87:3c:2a:6e:07:17:7f:
90:4f:fa:81:b9:72:68:54:80:08:ae:b1:74:51:d8:
ec:ad:3f:fc:57:04:64:4e:8c:a9:e7:31:f4:44:9e:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:BD:F1:B1:CF:43:AB:7D:40:1B:88:58:81:FE:55:06:F9:33:B5
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ba:67:33:26:92:62:57:dc:46:4e:00:72:14:93:81:95:f7:
29:04:08:34:94:21:07:df:d3:ba:bd:49:9b:85:8f:dd:85:b4:
ce:1b:5b:98:dd:4f:2f:8c:a3:87:90:4d:3e:e8:7a:97:5d:e3:
32:04:73:39:07:96:97:95:a2:69:4e:8d:8c:f9:a7:2d:24:18:
0d:1e:60:a5:bd:62:e7:6f:4a:39:1c:96:e4:23:0c:77:2e:df:
ae:26:07:0c:ab:2a:47:6b:a2:ad:f7:ec:64:8d:b3:65:19:ce:
2c:41:67:61:3a:0d:f1:3c:16:5e:34:ff:f4:fb:67:38:25:2d:
df:32:4b:68:30:01:1a:a0:c0:ed:9a:84:a7:72:89:16:62:67:
de:25:42:cc:25:48:37:b7:f8:98:5f:73:ce:15:2c:bc:31:89:
13:34:c5:3f:38:a5:b5:5c:b6:9e:1d:3d:3e:77:dd:ce:a2:27:
65:0c:08:d2:23:19:33:5b:a1:fa:49:3c:18:7f:36:6b:aa:6b:
13:1e:04:a9:1b:8e:b2:22:d5:27:b1:57:8e:97:86:10:95:87:
d7:63:ef:a8:6c:8b:65:93:1b:f3:d1:08:59:b0:56:36:fa:55:
ac:bb:f8:ba:ce:43:6b:87:1e:f8:e3:ad:5e:3f:dd:cc:71:82:
eb:10:b5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:05 2025 by rpki-client