Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier: GiIHXNfgfsoAf06e8tgIGzhpYDcqT4uF3gkcv7NTg3o=
Subject key identifier: DC:42:B7:43:9F:70:7E:A1:0E:45:A1:0C:BD:ED:C3:DB:F3:BF:84:06
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial: 019897127CCB8A2B2C4C6DC5F93F9A5808B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number: 0F29
Signing time: Mon 11 Aug 2025 03:00:27 +0000
Manifest this update: Mon 11 Aug 2025 03:00:27 +0000
Manifest next update: Tue 12 Aug 2025 03:00:27 +0000
Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: 1xDTPCm6rDxpWdMXmJVjrcriXm5NJi6wiJe0RfzR/Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:7c:cb:8a:2b:2c:4c:6d:c5:f9:3f:9a:58:08:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Validity
Not Before: Aug 11 03:00:27 2025 GMT
Not After : Aug 12 03:00:27 2025 GMT
Subject: CN=dc42b7439f707ea10e45a10cbdedc3dbf3bf8406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:68:a4:ea:f3:ab:8b:a6:2d:cc:a6:c3:e7:
e7:2b:fb:00:31:1b:0d:4b:ac:5d:60:d4:c3:32:44:
b4:e8:d8:3c:bc:04:e5:b3:30:cd:de:e4:01:20:54:
eb:94:71:0b:f1:75:f5:a2:44:e1:f7:bb:b3:d7:19:
c2:06:dc:32:31:40:4c:8c:79:b1:1f:0a:35:f0:39:
78:2d:a2:29:f9:a2:b4:ac:41:f3:fe:c8:37:d6:2b:
cc:fb:ae:ba:7b:61:d6:c1:eb:8c:f1:38:ac:34:10:
5c:cf:33:20:cb:ac:a5:9c:5a:41:25:35:83:50:6e:
e3:bd:55:2d:fe:c1:69:30:29:96:27:ed:55:48:4d:
52:56:da:b5:f7:94:d6:12:9c:ce:76:bf:da:64:e7:
22:77:99:2c:37:36:85:74:c9:6b:b1:bf:f3:54:ba:
10:3a:fd:8c:0b:e0:86:87:1e:c6:81:c3:b5:a7:6c:
91:d7:18:ca:1a:ea:42:bc:d4:e2:7c:fa:98:6f:ec:
9b:19:10:1f:4c:62:b8:1f:88:d6:cc:a3:c1:09:de:
42:47:92:a3:d4:a1:3d:a2:5f:6a:07:9c:24:6e:e8:
d5:7c:ee:1e:a8:bf:df:b5:72:77:9c:1e:26:d0:2f:
92:a1:73:93:12:aa:b5:4c:df:32:ca:ef:e9:ec:96:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:42:B7:43:9F:70:7E:A1:0E:45:A1:0C:BD:ED:C3:DB:F3:BF:84:06
X509v3 Authority Key Identifier:
keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4e:04:bf:49:33:e0:9f:4c:19:60:86:bd:b3:d2:45:76:c4:
09:06:55:64:91:41:10:40:0b:b9:fa:69:21:65:38:49:a0:59:
64:c6:a6:dc:1e:c5:d7:af:d2:8f:51:33:d1:e6:1a:77:d6:a9:
2d:bb:c6:e6:7f:f2:61:18:94:09:92:82:42:93:db:54:e4:19:
10:9f:ff:0d:82:80:81:be:de:2b:ff:f8:50:de:2c:c4:6a:dc:
cf:dc:47:1a:66:cc:45:f6:b0:ae:b7:c5:8c:f5:1f:28:b4:e1:
79:13:ea:2d:26:c1:5e:3b:08:df:df:88:4f:55:e1:5d:70:e2:
ba:57:4b:d4:00:9f:33:6f:2e:22:be:d8:c3:37:50:0e:fd:31:
22:a1:39:f3:da:63:c3:f2:a8:f3:05:16:5e:ff:47:cc:c1:40:
45:14:0e:85:1b:05:b1:21:dd:09:fd:e4:64:81:ad:6a:1f:05:
04:19:eb:c3:af:ef:a2:15:c8:78:00:b3:b4:9a:4a:5e:45:1c:
2b:28:46:d0:5b:6a:da:f5:5a:53:78:b7:79:74:9d:f2:2c:8a:
89:bf:3e:9d:05:ea:3c:9d:24:bc:17:aa:55:4e:5d:81:5a:ed:
68:98:70:45:8c:6f:3e:d3:55:79:d7:5d:46:df:67:b9:69:c7:
58:aa:4b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:44:59 2025 by rpki-client