Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: P+MQV44ewqWmsFT7VbOJWJIiYGgKc9PyfKu44WvLcu4=
Subject key identifier: 6E:83:19:63:F2:6B:53:DA:B3:47:86:0D:D0:D5:FB:AD:62:2F:E4:74
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 01987DF7D6D403A58BEBCA07796A2B4866D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 0FEA
Signing time: Wed 06 Aug 2025 06:00:51 +0000
Manifest this update: Wed 06 Aug 2025 06:00:51 +0000
Manifest next update: Thu 07 Aug 2025 06:00:51 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: OV7N6an67fazXVlo753znkTpyGphF6GxTI5RsgS15nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:d6:d4:03:a5:8b:eb:ca:07:79:6a:2b:48:66:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Aug 6 06:00:51 2025 GMT
Not After : Aug 7 06:00:51 2025 GMT
Subject: CN=6e831963f26b53dab347860dd0d5fbad622fe474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:06:25:42:79:5f:ff:7f:fd:4a:58:a2:2f:
53:53:e5:94:9e:74:ef:cf:75:c6:94:89:07:0e:f8:
dc:f1:eb:fe:f2:80:63:1b:59:f5:6a:08:7a:b0:4e:
10:b2:20:9b:cf:df:82:ea:89:38:0c:5e:0a:ed:f2:
43:9c:09:e4:d0:c1:11:3e:4b:6a:5b:5d:8f:80:d2:
bb:42:96:69:03:5a:52:59:ac:bf:cc:44:d3:b9:2c:
2d:eb:e7:7c:af:7a:0e:cb:2a:fc:6c:72:60:3c:ed:
82:95:95:6a:5a:dd:75:a5:9a:ba:c9:7b:13:a2:55:
f7:aa:a4:e1:76:59:70:e1:5a:9d:f9:7e:f8:cb:e6:
be:20:ef:92:51:85:33:eb:66:24:25:93:f5:e4:80:
8f:c3:d2:74:0d:d8:64:39:01:15:52:81:97:65:5d:
15:45:91:47:84:82:d4:a1:ef:c4:4e:a5:66:ed:e5:
e0:80:84:d1:e8:48:e3:3a:94:a0:20:2d:5d:00:46:
91:8e:19:53:d0:82:36:e2:da:7c:48:ea:59:0c:96:
68:c0:4e:5f:37:36:01:87:2c:a2:9f:4c:4c:ac:e2:
22:7c:28:b9:9c:68:52:ad:55:e0:00:90:aa:75:f5:
e2:76:af:9c:1f:6c:37:14:a1:ff:2d:6a:2e:71:77:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:19:63:F2:6B:53:DA:B3:47:86:0D:D0:D5:FB:AD:62:2F:E4:74
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:3d:18:9d:e8:17:f5:2b:98:f8:d5:2b:83:7c:c1:ed:65:d5:
f8:cf:84:0b:d3:6c:40:5d:54:a7:ea:3a:fc:d7:68:7e:ab:07:
f3:25:80:f5:d3:06:10:83:f6:18:2b:50:f3:e4:9e:ec:24:42:
41:f5:c7:89:b3:d2:07:9d:1d:4b:d0:a4:b3:49:f2:7d:f6:e3:
b5:86:b1:a6:13:26:c2:da:40:1e:32:72:dd:eb:3b:89:89:bd:
25:1a:42:23:05:06:aa:40:b7:6d:c1:18:53:60:68:49:8d:b3:
da:42:4a:0c:2b:cf:e5:8f:b0:9b:6d:e2:75:63:76:21:79:c6:
ac:06:7f:bd:c3:a2:aa:3c:b5:c5:10:1e:43:4e:a4:3f:55:e6:
d8:c3:42:ab:a3:01:2b:89:70:25:4b:f6:24:6e:43:69:41:13:
21:72:fe:03:93:71:22:2d:a9:4d:5a:dc:31:49:ef:70:3d:2e:
59:32:48:07:ae:08:e1:af:84:31:f2:da:26:b6:46:d7:9f:88:
43:a4:21:79:1b:c4:6e:88:8d:14:89:6f:93:99:78:07:d4:57:
d6:41:fd:51:7f:c4:9b:6a:b3:0b:c0:fe:15:ff:8d:75:46:f6:
bc:2c:8d:1e:32:65:11:e7:bd:cb:dd:97:ac:03:94:21:c4:cd:
c8:1a:1a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:42 2025 by rpki-client