Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
File: xRlGjFXmvnFcDagFzvta7IXTKSY.mft (raw, json)
Hash identifier: GQDHA5LsnzSuwmdBXWIBB93JBIwYIOCQQxFVCSrCEEM=
Subject key identifier: E4:54:6F:3E:C4:66:B2:3F:A7:77:B1:2F:30:63:86:91:9B:CC:67:59
Authority key identifier: C5:19:46:8C:55:E6:BE:71:5C:0D:A8:05:CE:FB:5A:EC:85:D3:29:26
Certificate issuer: /CN=c519468c55e6be715c0da805cefb5aec85d32926
Certificate serial: 019887338351D490D097EB25452C04EB47D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
Manifest number: 0F1A
Signing time: Fri 08 Aug 2025 01:02:36 +0000
Manifest this update: Fri 08 Aug 2025 01:02:36 +0000
Manifest next update: Sat 09 Aug 2025 01:02:36 +0000
Files and hashes: 1: xRlGjFXmvnFcDagFzvta7IXTKSY.crl (hash: 0WGKdE3OzRpQVaudODLRM9rfqUTJHMmCBBw6D/utOo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:33:83:51:d4:90:d0:97:eb:25:45:2c:04:eb:47:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c519468c55e6be715c0da805cefb5aec85d32926
Validity
Not Before: Aug 8 01:02:36 2025 GMT
Not After : Aug 9 01:02:36 2025 GMT
Subject: CN=e4546f3ec466b23fa777b12f306386919bcc6759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:98:f4:26:24:4b:70:47:5a:36:9a:c5:af:
b5:74:a5:85:b9:f4:c4:e1:67:6c:2b:46:04:da:75:
80:44:e1:c7:b2:e8:36:fb:a8:33:2a:6f:be:ef:07:
8b:3e:9e:78:c6:5b:2d:32:29:bf:85:7f:d2:4b:e7:
b6:bb:ab:d4:99:d5:e3:05:10:5f:cd:a2:23:a3:2a:
07:0a:67:7b:82:2f:9e:fb:80:27:37:72:3f:8e:81:
10:c9:a2:c8:7a:8f:8a:54:28:ee:4e:37:b1:5f:9b:
43:2a:a8:94:12:fd:36:2d:c8:0a:d8:c7:39:4c:dc:
f1:52:a8:15:4f:c5:ca:35:55:26:aa:a9:42:aa:9f:
fe:29:4c:53:d9:a1:79:b3:93:ae:67:e0:b7:12:ee:
1c:db:05:df:03:08:c6:72:b8:07:41:17:3d:2c:a0:
62:d9:7d:cc:d6:64:2c:4c:eb:f9:86:11:19:21:e7:
26:a6:a7:45:07:f3:7f:05:f5:05:e6:86:6c:97:61:
f4:4a:96:5b:ff:23:b3:0e:37:d1:dc:ad:24:9d:08:
09:17:23:f0:8f:4e:db:c3:b6:5d:f8:ae:ac:c7:4b:
cd:cf:c7:d9:a3:a5:db:3b:5e:02:fe:cc:f9:43:c1:
27:6c:96:7f:e4:ed:52:b5:3e:0a:8f:4b:63:ed:f0:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:54:6F:3E:C4:66:B2:3F:A7:77:B1:2F:30:63:86:91:9B:CC:67:59
X509v3 Authority Key Identifier:
keyid:C5:19:46:8C:55:E6:BE:71:5C:0D:A8:05:CE:FB:5A:EC:85:D3:29:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4c:70:fc:4e:2d:33:a3:9d:aa:86:e4:7c:91:91:8f:7c:d1:
85:ee:b9:4d:f9:39:5b:63:7c:a6:18:6e:a9:97:24:71:a7:60:
94:5f:77:e5:75:cd:4b:a1:37:ef:53:1e:9c:9f:e4:d3:30:a3:
e0:42:f4:ee:96:99:f9:12:4b:29:2f:6c:b6:31:20:3f:52:ea:
e9:5c:62:19:03:b0:88:2b:ce:dd:df:ef:35:f2:a9:e0:f2:3e:
5c:95:d3:62:6e:ed:ab:7d:cb:8a:6a:3a:f6:6b:d8:c0:af:65:
c7:1f:dc:60:23:9c:40:4c:80:46:5b:5f:65:08:d8:7c:f5:c8:
21:63:9c:13:e4:45:9a:a9:0d:18:76:3e:55:d0:3b:67:3d:fa:
66:dd:43:b6:45:90:c2:7a:ed:47:5d:62:35:91:bd:69:c8:c3:
49:dc:12:b6:20:78:df:28:14:6e:32:fc:61:7c:67:6f:90:c0:
87:70:d0:8d:f9:ef:2d:c5:68:52:f7:c2:75:66:0b:33:77:ec:
8b:bc:45:27:1a:fd:9a:c2:d9:8a:00:f3:46:69:c0:3b:9e:88:
49:62:0d:93:f6:39:25:a9:d3:e0:4f:25:dc:bf:a4:2b:b4:4a:
c7:ee:d0:d3:78:be:c2:cb:fb:cd:2e:68:51:79:80:f9:6b:3f:
66:64:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:57 2025 by rpki-client