Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier: WxvRt+bQSptToTVGaEzYr83niIQsX1hIVppVF1VpzwE=
Subject key identifier: 84:F2:47:DE:F9:5E:77:49:9B:4F:55:84:56:DC:AA:31:B3:55:29:45
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial: 019896A696F24C95811C613C3D5ECF789DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number: 1381
Signing time: Mon 11 Aug 2025 01:02:36 +0000
Manifest this update: Mon 11 Aug 2025 01:02:36 +0000
Manifest next update: Tue 12 Aug 2025 01:02:36 +0000
Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: BI/IWeQfJ7T2wmTv8LI6eaCW/3fD+Qhx7ErKEjmwrXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:96:f2:4c:95:81:1c:61:3c:3d:5e:cf:78:9d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Validity
Not Before: Aug 11 01:02:36 2025 GMT
Not After : Aug 12 01:02:36 2025 GMT
Subject: CN=84f247def95e77499b4f558456dcaa31b3552945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:ca:90:9f:9e:6d:a5:69:ac:ed:ea:ed:ae:
3e:5b:dc:ff:c8:71:96:95:7a:8d:34:10:d2:53:73:
f0:ee:fe:7f:9d:e6:f1:4f:27:ff:ff:7e:3f:9f:a9:
d1:33:05:cb:24:9c:00:f9:2f:70:13:6b:6d:2b:bb:
28:52:e9:96:f8:b8:0f:94:95:e8:7e:41:f3:98:6b:
3b:12:e6:6d:9e:87:10:ab:eb:08:8b:6d:59:1b:06:
2e:cc:e8:67:6c:db:87:0e:df:16:12:5c:c1:34:dd:
d2:9b:d6:53:da:d2:22:1e:8f:c7:a5:66:8f:5e:4e:
71:14:1c:56:d4:76:de:d3:b1:7f:e2:3b:87:ef:a1:
ae:b5:22:04:48:b0:c1:41:a5:01:70:23:11:04:c6:
41:89:1f:19:ee:d4:73:a4:f5:c7:0a:1b:56:65:32:
4b:48:cd:52:87:f8:9e:8b:25:1e:12:56:cc:e3:13:
ca:0d:3c:7b:f5:0d:b3:54:18:0e:d6:48:34:9a:c9:
3f:e2:28:c4:7a:ec:11:b2:c9:24:dc:3d:78:56:7e:
c5:2c:79:b6:5c:6f:77:7e:c4:5f:fa:66:85:29:70:
40:85:b9:87:f9:c3:bf:6d:b2:45:9d:9c:5b:d0:93:
a4:4a:d4:f9:fc:e8:ab:79:0c:a8:20:fa:5c:e2:99:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:47:DE:F9:5E:77:49:9B:4F:55:84:56:DC:AA:31:B3:55:29:45
X509v3 Authority Key Identifier:
keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ba:d8:41:b3:54:19:1e:d8:4d:73:39:e2:3c:15:8e:98:95:
b9:c3:66:2f:5f:45:da:62:1a:9e:6a:46:f6:c5:43:b6:0b:42:
63:fd:6d:ba:0b:87:22:6b:ed:c2:08:ac:29:72:3b:28:9d:19:
d4:96:e9:01:f4:e5:ab:51:4f:6a:a1:01:65:2d:9b:a3:e6:71:
19:5b:ad:a5:11:ca:59:f7:1f:94:9e:af:6d:7d:b1:dd:08:0a:
c1:19:f1:97:7e:4b:7b:9b:33:52:7c:70:37:6f:0d:36:81:63:
3d:47:56:e0:c7:8b:69:60:58:ea:62:f6:99:52:35:49:d2:c1:
57:2f:39:9d:93:70:63:4a:d3:10:7a:8e:e0:7e:c7:55:f9:fb:
01:bd:54:f4:72:5b:a1:e1:e3:bb:cd:f0:c2:43:dc:4b:39:b9:
83:6e:87:5f:28:57:94:50:1a:8a:53:7a:77:e5:c9:6d:50:31:
ec:cb:00:3c:7a:be:f3:14:6d:f8:ed:77:4e:45:2a:d8:3f:72:
e1:c2:a0:21:49:22:b4:1d:52:35:85:90:8c:00:c2:01:1f:09:
52:26:d9:8f:dc:5a:67:d4:3e:2a:81:fb:aa:b7:47:38:56:81:
3f:7e:0a:80:34:a9:40:32:7d:71:66:79:9d:23:78:30:3d:c0:
10:f1:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:39 2025 by rpki-client