Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier: cKiIjEhdOnZh0LdTtAOqGZ3KCDQV3pKfdguAYSKb22Y=
Subject key identifier: 27:51:20:02:90:3F:C5:0D:64:27:87:CE:32:72:85:F7:82:E3:F8:6D
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial: 01987487250B5375A003BBD7F00F216CD8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number: 0827
Signing time: Mon 04 Aug 2025 10:01:10 +0000
Manifest this update: Mon 04 Aug 2025 10:01:10 +0000
Manifest next update: Tue 05 Aug 2025 10:01:10 +0000
Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: y0gRGcYh9yWPHwPpqmDg03oNd4lGr8KFVLK4xTzpaFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:25:0b:53:75:a0:03:bb:d7:f0:0f:21:6c:d8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Validity
Not Before: Aug 4 10:01:10 2025 GMT
Not After : Aug 5 10:01:10 2025 GMT
Subject: CN=27512002903fc50d642787ce327285f782e3f86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:52:2c:c0:88:7b:6a:2b:44:25:b3:88:4b:66:
c3:67:71:23:46:c2:0e:73:48:2b:27:15:1d:5d:82:
85:70:9f:a1:e3:53:9f:7a:60:bb:6b:3b:2f:d5:39:
25:0c:f3:9f:87:35:3d:e8:a1:27:56:ca:a0:49:97:
10:45:e1:7f:f0:9a:7d:9d:21:c5:e1:01:6b:52:46:
4e:2d:0e:00:2d:b1:26:9d:5f:7a:84:47:f5:d2:e6:
49:26:d6:8b:ac:8b:dd:d1:8d:b6:f9:b4:1d:56:38:
70:64:54:34:9c:db:ae:b4:5b:83:75:d2:20:88:11:
cc:ea:56:3b:a0:77:52:25:78:9e:f5:7f:c7:a8:22:
27:1a:b9:e1:26:ff:16:b3:b8:fd:73:c1:76:d9:d3:
8c:15:18:bb:49:69:d7:c7:2c:53:19:f2:e8:9a:7a:
b3:64:af:37:9c:1a:16:4f:b7:00:94:8b:8b:39:eb:
06:41:a7:1f:5d:2c:ed:55:39:f3:c8:6e:dc:13:68:
e5:65:5b:5b:01:52:55:75:de:0b:9d:2a:7b:9b:3d:
12:28:1c:cb:9a:37:00:b1:72:f3:4f:e4:e0:d1:87:
ea:9f:7f:58:28:db:49:71:6c:35:79:c8:af:13:be:
cd:bf:7f:c2:97:23:12:70:f4:4d:f6:ab:51:70:09:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:20:02:90:3F:C5:0D:64:27:87:CE:32:72:85:F7:82:E3:F8:6D
X509v3 Authority Key Identifier:
keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9a:a7:8f:63:d7:50:4b:00:e2:0c:d3:19:7f:be:59:d8:1f:
34:f8:47:fd:6b:d8:65:5d:19:0f:c4:8c:9d:1e:d2:74:5a:93:
63:c3:69:4b:3a:66:18:bf:41:ab:06:c4:b8:ae:83:b5:22:7e:
32:49:ef:3a:0b:cb:4d:59:94:45:8d:c3:f9:98:f4:1c:04:66:
aa:50:98:71:9f:1f:36:50:3b:2e:e2:f4:30:41:af:d1:62:f7:
85:e7:15:48:f9:c2:76:4f:bf:2d:b8:32:95:cd:27:67:0a:3e:
24:8c:df:08:61:4e:21:d5:d0:ca:e8:77:fd:a8:aa:1b:5e:27:
41:03:03:85:17:69:f3:f2:79:48:e3:12:cd:29:5f:ab:12:fe:
4a:a0:74:24:d7:f4:8a:c4:5f:61:b0:0e:24:f8:c8:44:d8:10:
9d:40:ff:6c:d3:42:3a:55:83:c5:78:f6:2a:2c:e1:89:77:bb:
71:e9:2e:9f:42:09:86:9e:6d:d4:ae:40:bc:8c:46:75:3c:12:
7d:82:87:cd:8c:11:b4:0d:0f:b1:90:f5:72:fc:45:9c:1a:a7:
33:00:bb:e5:c5:dc:9a:29:c6:80:90:27:34:64:1b:82:0b:b9:
1a:3a:bf:1a:fe:21:ca:11:42:51:1d:08:b2:8b:65:4b:7d:a2:
3d:02:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:15 2025 by rpki-client