Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier: 6FBLDVTKm/J5X2oM5hKeWA+ngqe8u7IL70zeu+d6i0s=
Subject key identifier: 82:F4:89:E0:A2:D4:15:1B:B9:3C:BA:EA:9D:6D:53:C3:C9:8B:95:53
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial: 01988EEBCE69016560A73D3CAFA02A4FC174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 13:01:15 +0000
Manifest this update: Sat 09 Aug 2025 13:01:15 +0000
Manifest next update: Sun 10 Aug 2025 13:01:15 +0000
Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: 1PmKVSUsxGR90U90pZok1e9LcnIrEe0GUvOVAE0kXb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:ce:69:01:65:60:a7:3d:3c:af:a0:2a:4f:c1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
Validity
Not Before: Aug 9 13:01:15 2025 GMT
Not After : Aug 10 13:01:15 2025 GMT
Subject: CN=82f489e0a2d4151bb93cbaea9d6d53c3c98b9553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:d4:20:00:85:91:31:00:d8:0e:64:4c:70:
14:37:27:4a:5d:4a:7a:d3:b0:23:5f:bb:21:39:3c:
79:42:ce:e5:a8:65:74:bd:b1:04:5b:7b:d7:3f:e4:
f1:30:88:57:c9:74:90:c5:db:90:3c:ec:15:4c:fd:
08:c9:4d:62:d2:ff:dd:be:b0:11:2d:f7:b7:ca:f1:
4a:e5:69:7e:f2:99:3c:d1:c0:ed:09:cb:34:29:13:
f0:df:51:d7:e5:4f:19:95:f7:7a:65:f9:42:43:82:
98:83:25:8c:ba:55:e0:b1:80:ec:0c:2f:38:68:45:
84:1d:44:a1:d0:7a:af:16:0b:c1:c8:ac:50:2c:3f:
49:ee:cb:d6:ce:f1:0f:a6:b0:74:54:fb:91:fd:5b:
30:79:09:49:34:1c:60:07:a2:1b:fc:db:56:ec:2b:
7a:08:6c:25:8f:a9:c1:5d:3f:c4:a2:fd:91:2d:08:
4b:16:08:19:86:a2:3f:53:a0:bb:11:bc:f1:2a:49:
2d:2a:e9:80:8b:00:e3:69:60:53:92:73:2c:d3:8a:
45:5a:f4:b0:8b:e1:2f:b3:47:bc:f9:69:a3:a7:d1:
d9:b8:d9:df:bd:4e:a1:2a:b0:96:65:75:be:8c:4e:
54:ca:1e:9f:ba:61:25:c1:ae:c2:6f:f5:48:12:cd:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F4:89:E0:A2:D4:15:1B:B9:3C:BA:EA:9D:6D:53:C3:C9:8B:95:53
X509v3 Authority Key Identifier:
keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e8:09:af:21:67:bf:9a:56:b3:5c:cd:51:35:4d:9f:32:22:
6d:c4:c2:6b:4b:2c:dc:6c:fb:78:84:cf:c4:63:36:f3:77:76:
0c:32:d1:63:93:8d:3b:b7:c0:a3:41:fa:53:5d:52:f3:f6:ef:
a1:e9:d1:ac:9d:f2:f1:d1:21:a2:99:4d:c9:05:05:6d:6a:b5:
fe:f9:15:b2:8e:e5:ed:65:64:17:cb:34:3a:76:29:c6:5d:03:
ef:65:a8:52:59:f5:85:9d:e3:b5:b1:a0:70:56:1a:7f:27:fb:
86:38:5d:3f:f8:48:be:0f:c0:a1:29:37:0e:9d:70:3a:4e:93:
2c:40:85:fd:94:92:17:6a:3d:16:fa:d6:ec:c2:74:7d:63:0f:
82:e0:8c:ad:c1:9d:64:31:ca:89:10:c9:2e:0b:29:f4:6a:d0:
7e:ac:90:31:e1:2e:bd:0f:7a:ee:1b:2b:ac:24:89:09:89:4e:
2f:2b:f9:d4:70:a3:b3:fe:73:a5:2a:c6:f0:65:41:af:3e:68:
e2:33:94:2f:cb:3b:d9:48:21:4c:d3:23:0e:e8:9b:b4:0f:51:
8f:45:54:aa:13:ce:32:f6:11:1e:f4:9c:82:11:41:28:52:c6:
6e:38:db:0c:56:fc:f5:7f:13:cd:a6:8c:04:d7:af:bc:33:72:
b6:fc:e5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:43 2025 by rpki-client