Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: dagcLQJakpdUiCjWUG9XCDt8SWWzQwFnu+SDUMhanTY=
Subject key identifier: 9A:F2:E2:9C:CE:9E:7A:37:DA:27:CF:97:11:E2:AA:D5:1B:61:13:50
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 01987DC1278F2F14125E7274ADC70BBD6641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 05EB
Signing time: Wed 06 Aug 2025 05:01:07 +0000
Manifest this update: Wed 06 Aug 2025 05:01:07 +0000
Manifest next update: Thu 07 Aug 2025 05:01:07 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: Cu3cooJAI6KaInwNIYwB+d4e9OX8r7c8/9FDvZJ5hbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:27:8f:2f:14:12:5e:72:74:ad:c7:0b:bd:66:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Aug 6 05:01:07 2025 GMT
Not After : Aug 7 05:01:07 2025 GMT
Subject: CN=9af2e29cce9e7a37da27cf9711e2aad51b611350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:24:74:25:41:9f:27:29:01:08:be:4f:0a:
35:c0:cb:dc:37:72:b1:22:71:4d:f3:4a:65:92:61:
d0:93:90:98:ac:b5:a3:50:8c:2b:d8:24:4d:6d:91:
83:41:79:df:d4:d7:56:01:b3:9b:c8:41:82:5f:30:
6d:f0:32:a3:91:ef:84:61:5a:e8:73:db:38:24:87:
a2:23:70:ff:f5:53:13:92:58:7b:ca:87:89:f4:2f:
59:13:8e:11:db:3c:ab:f6:0a:5e:0a:11:0f:52:10:
bc:23:76:a1:36:dd:b5:aa:27:bb:83:35:82:1b:0a:
55:61:53:6e:82:d6:fd:a5:86:8a:96:a2:76:b6:ee:
f1:c4:61:e6:c4:fa:91:16:c7:42:34:98:87:c9:c8:
e8:6e:07:09:0b:bc:66:c0:04:6c:74:6e:6a:2e:21:
04:56:31:47:f5:d6:0b:72:6d:36:38:c4:07:22:73:
bb:ac:97:8d:85:41:b6:c6:0d:75:3c:87:29:1a:65:
98:28:f3:eb:b2:a8:d6:30:c7:0d:43:f7:bb:1d:9e:
6a:a2:90:50:66:a2:fa:a2:c8:97:01:2d:76:67:b0:
ad:ce:51:5b:bc:83:03:b0:b6:f6:da:31:1c:a4:51:
42:4e:ed:69:ad:dd:5e:8b:b5:53:fd:62:07:b2:e9:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F2:E2:9C:CE:9E:7A:37:DA:27:CF:97:11:E2:AA:D5:1B:61:13:50
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:15:c1:e8:37:a5:75:59:89:5a:a9:da:b1:79:75:10:26:
63:37:d9:f4:81:a7:50:80:13:39:42:91:4e:f4:a8:74:5e:d1:
70:c1:24:be:27:0c:77:88:e9:bb:c3:08:31:59:6e:2b:e0:51:
6d:72:c7:d8:c6:fa:28:61:84:09:27:03:5f:31:f2:0f:4a:70:
e0:a7:52:86:56:e5:2e:ec:0b:7a:b8:4c:75:7b:61:1e:28:5f:
66:9b:d0:3e:c8:56:88:23:bc:db:1b:1a:d5:74:34:5d:6c:8d:
8d:75:05:5a:ff:6a:45:c6:fc:c8:3a:1d:46:c2:20:1e:ba:58:
c8:62:29:c4:43:1b:9f:9e:a1:b7:8a:26:82:09:00:78:37:3e:
ce:6e:3a:f9:84:f0:3c:9d:ac:1c:91:a8:e5:a9:56:37:85:41:
c7:81:52:dd:69:5b:95:79:d3:a7:a9:73:a9:5e:d8:fb:f8:2a:
1f:b5:b8:05:34:45:c1:fe:d9:ff:c1:55:d0:c9:ba:6f:8d:0b:
d9:c6:d6:05:84:f9:ff:be:f7:50:c2:53:ac:86:ca:b7:1e:16:
73:89:41:33:8a:e1:06:c1:0d:00:2d:24:0c:1c:e7:9a:66:2b:
eb:fb:ab:d3:94:58:a3:89:1f:d6:59:a3:64:7e:54:83:13:ad:
97:12:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:46 2025 by rpki-client