Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: 3BQy34zdzm1V+sq1xYPU5Uybg52tm8OKiXSQ0XAJa5s=
Subject key identifier: 3B:F6:D8:92:62:76:F2:D6:75:45:D5:44:9B:26:50:FB:19:29:C7:39
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 01988B106F85081B844DE5C260759ADA3A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 036F
Signing time: Fri 08 Aug 2025 19:02:46 +0000
Manifest this update: Fri 08 Aug 2025 19:02:46 +0000
Manifest next update: Sat 09 Aug 2025 19:02:46 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: DvV6+nCHYzFJufIJkXdw9uQrvaMEtei67htk9aNpUsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:6f:85:08:1b:84:4d:e5:c2:60:75:9a:da:3a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Aug 8 19:02:46 2025 GMT
Not After : Aug 9 19:02:46 2025 GMT
Subject: CN=3bf6d8926276f2d67545d5449b2650fb1929c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:db:19:b5:63:a6:7f:56:63:76:35:a2:72:
24:f8:a2:f9:61:61:b6:e2:70:df:90:a6:05:9e:9b:
c0:3e:91:34:be:de:ca:8b:d8:6a:08:f0:06:54:04:
84:9d:a3:47:e1:b1:6e:cd:76:f7:bf:ab:96:fc:f5:
d3:72:b4:6f:8c:b8:bb:09:6b:4d:c6:2a:90:87:79:
65:71:aa:91:9f:ae:db:9f:a6:3e:e0:27:3e:a8:8b:
8e:9b:e0:33:dc:85:c3:c5:31:76:ea:36:3a:44:7d:
3f:64:e3:3c:9c:64:c2:51:26:e2:ab:1d:97:ca:45:
42:2f:cf:cb:33:f2:47:f2:8f:13:3c:9d:1f:ea:e4:
f7:e1:88:cb:e8:38:c3:1f:d1:c5:8c:3a:5c:80:9f:
a1:af:e0:b6:a5:c0:2f:06:58:b0:7f:3d:c3:ee:a1:
1c:e7:7d:12:03:92:71:29:9e:68:ba:e6:14:a6:c1:
63:2b:ec:1d:16:e9:08:c1:b9:3d:20:70:b0:86:6e:
ed:1b:13:e8:50:c3:a5:35:73:34:a4:92:26:6e:60:
b4:5a:d5:0b:9d:5a:2c:5d:81:43:36:8d:14:8d:6a:
9f:d2:b0:63:1d:98:b1:6b:33:36:ce:c2:4d:25:6b:
b0:63:28:c0:4d:af:ee:d7:74:92:b6:cd:83:f3:ab:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:D8:92:62:76:F2:D6:75:45:D5:44:9B:26:50:FB:19:29:C7:39
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:52:fc:35:b5:cd:ff:4d:0a:bc:b0:94:ec:05:8c:4c:df:15:
3c:60:5b:af:86:00:d0:b2:e0:44:8f:60:51:8d:d8:c6:73:64:
1e:07:49:9c:3a:7b:0d:f7:4a:20:f5:c0:98:6e:3f:4b:42:98:
d8:35:2d:16:f2:b5:12:37:2a:2d:80:5f:02:20:42:73:ba:31:
2d:c6:64:ff:35:27:77:e4:57:4b:a3:6b:0b:37:43:aa:6f:3a:
b1:63:25:84:91:d2:be:f1:70:ae:c7:6f:e3:3b:d7:69:c5:09:
8e:88:51:e9:5f:0d:53:7b:bf:8b:c2:97:b6:38:78:93:32:51:
94:48:f8:46:75:d0:d0:97:fc:36:b3:0c:5d:07:ee:0f:36:62:
5c:7a:f9:34:78:37:6f:08:06:7d:6a:aa:dc:3a:8e:b2:92:93:
66:41:a3:71:4d:7f:7b:85:ce:bd:47:77:9c:64:0c:78:b5:15:
e3:49:3d:2e:4f:38:76:f3:0f:25:37:d8:09:c4:19:5b:44:56:
f0:44:28:db:a8:24:4f:e6:30:23:0f:2c:0f:05:7c:4a:0d:f1:
9f:b4:94:db:92:ac:42:77:9a:58:44:90:6b:3c:05:bc:5d:4c:
a3:29:15:bf:2b:5a:71:9e:ed:d1:61:05:0c:c0:db:06:d0:6d:
29:16:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:48 2025 by rpki-client