Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
File: xorAnHI17TE4Ph_ThzkY3RgzNCo.mft (raw, json)
Hash identifier: GBXa+HltVoHDrKS6WUw/jAJLlHHLhs/sD10+7cXSnLI=
Subject key identifier: 94:7A:C1:E8:08:43:1B:2F:D5:85:66:2B:09:67:62:9C:C3:82:8D:61
Authority key identifier: C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Certificate issuer: /CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Certificate serial: 01987AC0439D7D54B93C9329F5AA6050BA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
Manifest number: 05EA
Signing time: Tue 05 Aug 2025 15:01:17 +0000
Manifest this update: Tue 05 Aug 2025 15:01:17 +0000
Manifest next update: Wed 06 Aug 2025 15:01:17 +0000
Files and hashes: 1: xorAnHI17TE4Ph_ThzkY3RgzNCo.crl (hash: r946AJSs52xGBG3vkxGC1ZLOpDNxW26URgqNOV4FTP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:43:9d:7d:54:b9:3c:93:29:f5:aa:60:50:ba:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Validity
Not Before: Aug 5 15:01:17 2025 GMT
Not After : Aug 6 15:01:17 2025 GMT
Subject: CN=947ac1e808431b2fd585662b0967629cc3828d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:21:19:c5:7c:96:c5:e6:77:b5:e9:3d:28:
37:63:17:85:3e:02:bc:ed:7f:fb:5d:1a:f3:3b:7b:
8b:8e:d5:b0:b1:98:ea:a7:07:fc:99:43:03:18:20:
59:94:59:54:c1:fe:e7:28:5b:06:96:cf:b3:09:8f:
5f:1c:14:6d:b9:92:e1:fe:38:06:b2:63:d5:ae:80:
24:cf:8e:a2:7a:97:bb:e8:fe:6e:f4:57:0e:78:28:
49:65:37:92:87:ab:2b:24:b5:f4:b9:b4:fa:fe:a6:
ca:2b:0a:69:ca:2e:75:59:36:ff:c9:55:30:e9:75:
9c:c4:4f:7c:98:69:88:e8:db:cd:03:ee:66:85:c0:
66:be:6b:2b:f2:d2:c5:59:b9:95:9e:2e:f0:5f:1c:
1d:e2:fd:ef:76:f6:f9:01:72:3e:31:56:30:0d:d4:
2b:b1:a6:19:19:af:39:27:c7:33:a2:6c:22:77:5d:
8f:fc:42:33:77:67:c3:cf:dc:2b:2d:4e:42:5b:61:
bb:cf:dc:1b:3a:0d:27:3f:24:9a:54:e9:d7:59:ba:
63:4c:1d:5a:c2:98:b6:17:16:da:60:61:eb:83:0c:
d1:78:2e:3c:a6:fb:0a:c9:eb:e2:d9:de:f6:7a:a1:
81:06:b9:0d:de:fe:94:b8:29:c5:0e:fe:00:fb:7e:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7A:C1:E8:08:43:1B:2F:D5:85:66:2B:09:67:62:9C:C3:82:8D:61
X509v3 Authority Key Identifier:
keyid:C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:43:53:d4:88:08:c2:73:a7:40:6a:0d:75:85:90:83:a1:85:
07:9c:2b:9f:30:01:7d:e4:60:4b:f5:8c:8f:19:65:47:f6:0e:
a6:f2:d0:1c:e9:e0:26:00:bd:fe:49:54:b7:fd:6a:2c:f5:34:
5d:cc:b9:6a:a1:5b:1f:59:61:35:29:19:27:86:aa:cc:4f:93:
ce:3f:5d:f4:e7:64:a9:d6:a1:a7:c2:32:60:51:14:21:8a:30:
12:b8:e6:21:96:bf:1f:65:26:f6:60:d1:e8:4d:96:85:be:9f:
cd:f8:4d:7d:e5:11:93:70:6f:c7:20:b7:61:8c:72:b3:25:b0:
2a:68:52:bc:b1:2a:35:6b:45:d4:b3:98:f2:5c:1e:a4:c6:b1:
ed:44:9a:82:f8:79:bd:42:42:6d:be:6d:f3:a8:22:f8:a7:5f:
74:8e:c4:e9:00:d2:d1:60:a8:84:d9:53:af:7f:a3:57:12:55:
e3:f2:e8:6a:3b:74:96:e2:e0:e1:9e:f3:e1:9c:a5:a4:24:d1:
17:f0:4a:2c:9c:55:05:0b:c0:33:a8:a1:f6:52:df:4f:33:e5:
99:d7:58:aa:8e:b9:3a:d0:22:f5:49:ee:7b:42:1a:69:0b:f2:
91:0a:1f:9a:50:83:45:b5:b5:c0:f7:26:28:c2:94:aa:3f:0b:
1a:96:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:56:16 2025 by rpki-client