Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
File: xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft (raw, json)
Hash identifier: DsP6iR513mlDa3W+1LMfDAC+XE/pJUGyYivfqnWMVWU=
Subject key identifier: B6:7F:1C:0D:54:57:AC:F7:EA:30:E4:54:60:2D:85:C8:C6:94:80:DA
Authority key identifier: C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
Certificate issuer: /CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Certificate serial: 0198733D44ACAE6DC9CBD255BA4FA3F732F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
Manifest number: 06E8
Signing time: Mon 04 Aug 2025 04:00:51 +0000
Manifest this update: Mon 04 Aug 2025 04:00:51 +0000
Manifest next update: Tue 05 Aug 2025 04:00:51 +0000
Files and hashes: 1: xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl (hash: nyxSmGVn5vW5M0iCUPkbcBLoA2x6Fznh6NtAxyGtMFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:44:ac:ae:6d:c9:cb:d2:55:ba:4f:a3:f7:32:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Validity
Not Before: Aug 4 04:00:51 2025 GMT
Not After : Aug 5 04:00:51 2025 GMT
Subject: CN=b67f1c0d5457acf7ea30e454602d85c8c69480da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:b8:7e:42:bb:91:2d:45:da:cc:4d:a9:e2:
7e:50:c3:2f:03:e8:60:6f:27:6a:33:bb:61:3a:4f:
5d:14:54:db:a4:52:2c:cf:6a:77:67:6d:8f:3f:5c:
51:60:09:2f:3d:c7:30:4a:25:7b:f3:6f:f3:3a:5e:
74:8f:70:cc:e3:76:10:2b:d5:43:0f:0c:8e:8b:97:
98:84:80:2b:d6:8d:e7:79:13:50:52:44:21:24:8d:
d0:6f:d3:20:75:4b:15:0f:53:e6:71:54:88:2c:7c:
5f:58:81:45:74:c8:93:00:5e:7d:bc:c9:be:1c:3a:
c0:a5:86:50:c8:99:55:89:10:ca:ff:eb:16:5a:0e:
12:16:d8:c0:b4:e0:2f:b6:97:db:79:09:c7:49:ef:
dc:ad:03:ce:fa:f3:e7:da:2a:6c:ca:34:08:ca:ef:
6d:22:f9:21:83:5d:c9:c3:cc:94:d6:e4:48:84:c7:
01:10:57:ad:6d:94:bf:d8:90:4e:55:1e:05:cc:3d:
28:0e:93:7e:03:2e:29:b4:41:78:e7:01:8b:7a:1c:
1f:33:46:f6:94:ab:37:a3:f7:73:44:4b:e9:a6:a0:
0a:35:8c:c6:e2:6a:e1:ef:2d:fa:d6:75:d3:cd:e3:
56:84:c7:94:d1:33:d7:79:dd:3b:dd:da:08:97:55:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7F:1C:0D:54:57:AC:F7:EA:30:E4:54:60:2D:85:C8:C6:94:80:DA
X509v3 Authority Key Identifier:
keyid:C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ec:eb:ce:6b:36:b0:58:f2:27:33:dd:49:2d:08:0f:fa:74:
72:c5:c8:da:08:d4:f4:bc:7b:27:32:c2:52:85:21:35:ac:c0:
d0:51:00:96:6d:07:04:60:b6:09:ce:ea:f3:0c:37:57:2a:f0:
42:84:d0:9a:21:74:6d:b1:3e:f3:5c:04:e5:25:fe:ff:35:c9:
58:dd:51:ce:fa:5b:08:ad:5d:2c:bd:78:5e:a0:4f:48:44:ce:
13:3d:79:90:8c:4e:2e:53:dc:79:86:84:e5:6c:ea:9b:54:d5:
09:53:9d:40:05:f4:0a:04:f3:80:56:25:3b:27:5f:72:63:96:
e7:99:92:fe:d6:75:e2:f0:9e:03:a3:e4:b5:da:61:54:0e:3d:
12:5a:9b:e1:20:0c:8e:bf:a1:f4:45:3d:a9:27:e3:4f:69:f6:
54:93:ff:c5:7e:78:0c:20:63:7a:37:30:4f:a8:fe:78:18:73:
bc:ec:6b:e8:dc:3b:32:fc:cb:e4:46:d9:3d:0b:c2:7f:55:f5:
1a:b0:86:25:ca:c0:56:e6:09:4e:68:9f:76:f3:08:ce:9e:f6:
00:1e:ad:07:1d:f6:bf:51:f3:4c:e6:47:35:83:19:3a:60:a7:
4c:b9:b7:72:5c:3b:9c:5c:fc:45:bf:79:ec:aa:c1:b8:ab:fe:
59:0e:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:55 2025 by rpki-client