Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier: CAxMGld5y675azPVudW52w+X+POvz4ey1HVRugI9r6A=
Subject key identifier: B1:96:17:B9:6A:DA:DD:5D:EF:B5:B9:99:5C:08:A7:E7:3A:5C:B0:DD
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial: 01988FFE592E45409D8EAB1B2EBE0792C108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number: 01EE
Signing time: Sat 09 Aug 2025 18:01:07 +0000
Manifest this update: Sat 09 Aug 2025 18:01:07 +0000
Manifest next update: Sun 10 Aug 2025 18:01:07 +0000
Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: k9hpC5at9ZVtQT/JQRXP/QU8EhFRDR2NbF5e+tfEnsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:59:2e:45:40:9d:8e:ab:1b:2e:be:07:92:c1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Validity
Not Before: Aug 9 18:01:07 2025 GMT
Not After : Aug 10 18:01:07 2025 GMT
Subject: CN=b19617b96adadd5defb5b9995c08a7e73a5cb0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:f2:04:6b:04:aa:7b:a5:11:f2:2a:dd:7f:
35:ff:20:cf:1b:5e:88:d8:cc:33:d2:2d:f7:05:a9:
1d:0d:80:ec:1b:2b:76:b0:0f:92:08:8e:2b:39:bf:
d5:b7:69:01:a9:3e:53:5e:4a:dc:e1:ff:3b:e3:55:
eb:aa:ec:45:0c:b6:1a:6c:be:cc:9a:86:37:dd:49:
df:28:6c:50:0c:e7:c3:12:02:06:33:11:d1:78:a6:
41:1a:36:33:2c:d9:69:32:0b:d4:f9:00:ec:af:39:
93:3a:d3:56:a5:be:76:73:27:b9:b1:6c:df:f7:b3:
a1:34:f5:96:23:74:c6:3c:23:63:e2:3a:b2:b0:a7:
92:99:91:fa:9a:a2:36:ca:57:f5:ce:79:4f:7b:97:
80:0f:5d:f4:ac:f2:50:71:eb:52:56:a7:ad:d6:2f:
e8:96:9d:44:1d:93:16:e4:15:0b:d6:40:94:98:cd:
fb:c3:96:10:29:10:df:2c:34:0c:ec:3c:18:c2:4d:
3e:05:02:23:b1:26:78:fc:18:04:92:90:67:7c:5f:
60:b8:c1:ff:31:52:f4:84:6b:b7:54:7e:7e:ba:96:
ad:8b:f3:cf:35:47:dd:e8:c3:f7:5d:d2:b8:9e:0c:
78:01:70:54:ba:f5:80:bc:d6:a6:dd:10:3b:7f:11:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:96:17:B9:6A:DA:DD:5D:EF:B5:B9:99:5C:08:A7:E7:3A:5C:B0:DD
X509v3 Authority Key Identifier:
keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:89:c3:a3:7d:19:d9:a3:56:07:07:9a:b9:03:ea:a4:74:78:
1f:8b:74:c2:f2:3e:1a:64:a2:9c:f9:4e:ab:4f:ba:23:69:ab:
4d:7b:b2:a5:58:b0:01:95:5c:87:1c:b8:42:9a:96:e2:64:20:
9f:8f:ad:97:27:f4:8c:75:c8:3e:f5:1b:f9:1b:4d:aa:2e:89:
8a:d8:5a:5e:4b:1c:b7:bb:d1:3d:2b:2f:9a:a5:06:cb:4b:2a:
85:7b:74:d7:6f:6e:8a:ff:4a:29:25:93:08:07:7b:77:70:05:
ff:d7:a2:43:ba:2f:28:29:9f:72:d4:e3:d4:81:c8:4e:e5:6e:
0b:60:18:fc:53:47:2a:df:09:e0:fb:aa:d1:c2:49:b8:e3:55:
3c:8c:04:63:e3:25:da:77:51:2d:cf:f3:00:95:49:4b:0c:94:
e3:d3:cc:e3:a8:42:90:fd:7a:b9:01:ac:54:dd:46:23:0f:40:
a4:33:34:61:4e:bb:c5:ae:20:79:7b:42:cd:aa:16:7a:f1:a6:
60:2b:ec:c3:9e:bc:ff:88:37:b2:85:42:1e:78:cf:af:0c:b9:
61:99:b2:96:c0:73:e9:e9:43:4a:fc:9f:ee:2e:e8:8c:40:24:
8e:db:b2:30:03:1c:6a:b1:46:50:24:29:7d:84:c1:fd:39:00:
ef:7d:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:46:36 2025 by rpki-client