Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json)
Hash identifier: FEl6NM8APTtBdT7YMA2hA+CHODUU5zpajZk8ykJaUUg=
Subject key identifier: 98:13:4F:22:D7:6D:3F:F1:66:E5:8D:6F:A3:0A:E7:D3:7C:AE:7C:C8
Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Certificate serial: 01987450D896C9DAA5E44FC835865F29AF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
Manifest number: 0976
Signing time: Mon 04 Aug 2025 09:01:52 +0000
Manifest this update: Mon 04 Aug 2025 09:01:52 +0000
Manifest next update: Tue 05 Aug 2025 09:01:52 +0000
Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: oEFlA5SINKCNbhC9KdU27lNV8RT1koNjjEG79MzSzGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:d8:96:c9:da:a5:e4:4f:c8:35:86:5f:29:af:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Validity
Not Before: Aug 4 09:01:52 2025 GMT
Not After : Aug 5 09:01:52 2025 GMT
Subject: CN=98134f22d76d3ff166e58d6fa30ae7d37cae7cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:0a:35:59:85:07:bf:c2:62:19:32:45:8f:
64:01:d5:29:b9:79:02:87:34:48:ed:1d:da:db:42:
5a:6e:87:6a:0d:7f:9d:56:32:cd:b3:9e:96:e2:e2:
42:b6:d2:3b:1a:62:d4:94:4e:c1:66:59:08:4d:0e:
90:b6:38:0f:46:f4:be:9e:80:c2:9c:cf:55:31:36:
2f:cf:9f:c7:d1:a3:19:3e:e4:98:3c:f9:c4:25:d8:
05:b6:03:58:c9:3f:5c:c7:85:8c:7b:41:e0:43:47:
af:91:91:72:0d:7c:61:b9:d7:cd:45:55:bc:41:e4:
ad:31:2f:d1:81:2c:9f:3c:a4:e8:98:29:f2:c6:5a:
10:07:91:a5:5a:d1:2b:9b:a3:5f:ba:cb:55:1f:f4:
02:a3:75:70:10:31:bf:98:57:f2:eb:ab:e4:cf:69:
bc:ed:94:16:04:b8:6b:10:6a:77:6d:b8:2c:9a:5d:
8c:76:7c:98:c2:1e:6b:be:95:02:78:63:16:d9:28:
ae:2c:89:1a:da:9a:eb:e7:c6:2e:e9:91:56:1d:ec:
22:3e:6e:1b:03:a3:a8:10:05:e1:6d:bd:5f:a1:95:
e1:3a:0a:2c:87:dc:77:58:95:4f:98:3e:38:f6:e0:
a3:c2:a5:c5:f6:a3:16:68:5e:08:28:35:60:1b:73:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:13:4F:22:D7:6D:3F:F1:66:E5:8D:6F:A3:0A:E7:D3:7C:AE:7C:C8
X509v3 Authority Key Identifier:
keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2c:cd:a5:83:5a:2e:e3:6b:d0:72:77:95:85:80:6f:a3:7d:
2a:80:d5:2a:a5:af:93:02:c7:74:ba:cb:e4:58:0c:83:48:1b:
b1:c6:93:da:b3:11:a9:1a:8e:54:3b:5b:02:8e:15:7c:34:a9:
7f:bf:0d:b1:25:e6:ca:23:60:04:e9:6c:0c:9f:4c:66:84:35:
62:2b:6f:20:2a:c9:89:8a:e5:2f:9c:0d:c7:10:0f:08:5f:11:
61:4b:06:8f:c2:cb:4b:c8:62:4e:20:67:e1:03:79:73:0d:19:
de:6d:ee:e2:56:f6:ef:c7:8c:e0:d1:7e:12:30:23:d4:4d:f3:
e1:e5:1d:92:d4:73:cc:53:67:ae:91:fb:5d:da:bc:a4:ec:98:
d9:fb:62:42:30:07:2a:4d:06:a6:d2:0e:ff:1a:e0:15:60:41:
b8:3b:7e:01:6f:96:c6:11:19:48:0d:34:0b:67:91:a7:29:ce:
f3:68:56:28:fc:9e:55:ec:48:b9:cf:4c:fa:28:bb:3b:8c:c0:
b9:89:70:7b:91:ad:49:a9:98:53:a2:24:93:5d:94:93:5f:d2:
87:0e:b4:64:1d:39:e5:77:3d:dc:fa:31:5f:c6:23:28:d2:e2:
bd:6e:05:22:64:78:22:53:72:58:bd:ef:7b:f5:90:cd:98:25:
24:e9:0d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:28 2025 by rpki-client