
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
File: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json)
Hash identifier: 5kuTuYhZjuaCK/cqK4SakVHUthxYrPJb2mnlT8Yez9Q=
Subject key identifier: 61:F4:D3:A9:85:55:09:D4:FE:16:23:1C:F3:FE:59:02:76:12:B4:99
Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
Certificate issuer: /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Certificate serial: 01988166FC267E9185CE1201BB62B9483902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 22:01:06 +0000
Manifest this update: Wed 06 Aug 2025 22:01:06 +0000
Manifest next update: Thu 07 Aug 2025 22:01:06 +0000
Files and hashes: 1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: q8pAj/I72RkdbYogpshVcHEKMLZGKFNK0hL8ieLiQL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:fc:26:7e:91:85:ce:12:01:bb:62:b9:48:39:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Validity
Not Before: Aug 6 22:01:06 2025 GMT
Not After : Aug 7 22:01:06 2025 GMT
Subject: CN=61f4d3a9855509d4fe16231cf3fe59027612b499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:05:12:af:0a:69:dc:37:7e:9e:07:2f:42:
b9:69:73:85:5a:f5:79:cf:e7:0e:32:aa:25:20:22:
e3:1e:4e:b1:0f:b3:68:7b:cd:88:60:32:e9:c6:44:
40:85:f4:dd:89:80:78:f7:c6:01:08:4a:aa:ab:d8:
e2:5a:7a:e9:44:74:29:3e:e9:a0:f0:a0:83:24:a8:
ca:e6:cb:01:0b:25:7b:6a:f7:b8:4d:49:9a:98:54:
83:ff:c7:1e:49:db:ac:8d:c5:e6:68:e9:8e:06:a2:
3a:fc:3d:0e:df:1f:b2:ba:50:6a:f0:4b:ae:33:36:
25:25:59:7b:45:3d:86:37:28:33:87:eb:6a:d3:95:
b5:0a:65:df:c7:9f:93:10:1b:ff:fb:d3:cc:46:57:
02:96:d1:80:7d:a9:fd:af:60:9e:f5:8d:80:df:88:
86:99:36:14:ec:2b:d6:c8:45:a1:c2:b1:e3:3f:33:
f7:ae:2e:90:62:50:bb:0c:76:d8:48:55:15:5c:f4:
06:fe:04:a3:8b:e3:9d:c4:ec:4d:dd:97:bd:77:c1:
02:1e:a0:e6:9d:76:4f:ad:dc:f8:dd:41:1e:e3:89:
2d:30:c5:29:4d:b0:3a:c2:52:08:b3:09:59:52:36:
b2:7c:87:a3:1d:f1:50:ef:b3:80:a3:5e:dd:71:c9:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F4:D3:A9:85:55:09:D4:FE:16:23:1C:F3:FE:59:02:76:12:B4:99
X509v3 Authority Key Identifier:
keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:16:24:fe:f2:02:2e:34:7c:5a:99:2f:f4:bd:a3:4f:8b:a1:
7b:16:a2:62:14:01:3b:ab:3c:6b:bc:b7:b0:a4:03:bb:32:ad:
ef:b8:1e:12:48:f5:ba:57:95:56:11:34:59:63:52:c0:7d:83:
68:95:e9:2b:e0:dd:07:e2:5e:60:04:0e:88:3a:09:ad:9f:3f:
5c:68:42:d3:fe:a2:4e:64:64:b7:cc:ea:6d:9d:e3:29:73:04:
6f:b9:50:63:80:53:39:b4:ff:9c:eb:e0:3a:fb:5a:e0:e7:eb:
ca:22:cb:c6:4d:2f:28:64:2a:ff:4d:84:90:75:0a:06:eb:1b:
07:3e:bb:8e:cf:f8:e1:aa:ad:e9:33:e8:e1:b7:b5:cb:5e:7c:
03:ee:9a:01:ee:a3:51:7f:7a:06:96:e4:14:78:20:d9:e6:67:
d8:70:6d:e4:e8:4f:6b:1f:1f:ee:3f:38:4a:d4:39:00:44:7f:
bf:db:cf:04:7e:bc:90:c4:a2:5d:d6:fb:1c:40:2f:91:4b:d9:
a1:b7:42:c9:b1:12:dd:ba:e2:20:ef:95:97:6a:39:e9:ec:bd:
48:ac:81:b2:60:10:92:db:50:8e:0a:1c:b6:d3:cb:ab:15:12:
2c:b7:33:9f:a0:c5:64:e2:d7:54:fc:13:42:06:89:f8:73:72:
76:d2:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:28 2025 by rpki-client