Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: 9mdx0Lte9UtGpUUKWvHBNU7O3tl75LNXoA68SFfvAP8=
Subject key identifier: 24:80:B7:7C:A1:7F:7C:25:CD:85:07:B3:E8:9A:A2:8F:9D:1E:95:64
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 0198745051A272DAFD6F8EB03D956489A2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 0DC7
Signing time: Mon 04 Aug 2025 09:01:17 +0000
Manifest this update: Mon 04 Aug 2025 09:01:17 +0000
Manifest next update: Tue 05 Aug 2025 09:01:17 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: IDPAZnh5ocZzJSpstLVKmBVh6x116tzAKmdsDjdgucM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:51:a2:72:da:fd:6f:8e:b0:3d:95:64:89:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Aug 4 09:01:17 2025 GMT
Not After : Aug 5 09:01:17 2025 GMT
Subject: CN=2480b77ca17f7c25cd8507b3e89aa28f9d1e9564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:cf:bb:09:ae:38:87:13:4e:97:3b:66:f9:
70:21:5d:6f:8c:fb:c5:67:c5:c8:3c:d8:e3:5a:88:
2d:03:0b:9c:6a:2b:b5:8f:13:5a:10:78:8b:7d:4b:
12:72:39:ea:cb:a0:b7:6e:fa:2a:e9:1e:7a:e7:5c:
81:4c:aa:f6:ab:c4:b9:09:bf:e5:eb:01:f6:0b:c6:
c2:d1:84:8f:af:a4:c8:ab:8c:02:ee:f6:f6:9c:fe:
26:bb:b5:f2:53:66:4b:ef:69:e8:5a:49:fa:25:28:
e7:39:ba:c8:35:b4:97:ec:bd:79:85:72:7e:2c:9a:
83:aa:ee:23:c3:44:56:54:c1:6e:78:27:3b:78:f3:
72:06:38:95:1c:14:ab:38:09:fb:6f:f5:af:98:02:
fb:8a:b3:27:6c:77:95:f7:73:22:00:df:66:f1:45:
71:ed:3d:0e:06:22:e4:33:23:37:10:01:dd:46:ad:
aa:05:c3:30:d2:7c:3c:91:df:9e:4f:b7:3b:fa:80:
45:95:1a:64:28:62:8c:e4:87:29:10:b6:dc:ce:81:
97:9d:98:8e:0f:e5:f0:d9:15:c5:2a:e8:08:fa:75:
b6:65:95:e4:6a:e4:26:2c:90:53:dc:c2:1b:ed:c0:
af:94:a1:35:c4:c8:5d:ca:12:8a:4f:25:84:fc:2f:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:80:B7:7C:A1:7F:7C:25:CD:85:07:B3:E8:9A:A2:8F:9D:1E:95:64
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e9:72:40:b2:26:22:2b:72:b7:62:d5:69:05:66:e7:51:82:
4a:90:38:0f:d4:e0:1d:96:a7:1e:84:cd:e1:6b:b0:a5:7f:20:
d6:e0:32:74:5e:48:d6:a4:3f:28:f6:a8:c9:1c:f0:1d:a1:78:
e5:52:cc:24:28:c9:c0:52:18:b6:3c:35:5b:d6:c7:ca:03:6e:
f7:49:68:f4:f3:24:0c:91:a2:1a:81:ee:2e:41:10:96:e7:8a:
bd:04:e1:62:32:a4:dc:a4:44:bc:a0:81:96:74:75:fb:42:aa:
36:44:a9:ed:8c:bb:51:58:6c:44:2e:51:ab:b5:83:c0:6b:1a:
30:5a:09:98:40:92:7b:f5:82:7c:a8:82:d3:ec:a8:f3:1e:9c:
79:43:bc:07:a3:50:7e:16:d9:3d:ff:00:6a:ad:43:4a:55:21:
1c:16:f0:30:a6:b9:a8:a2:d8:7c:65:04:ad:cc:1e:2b:d9:b5:
37:0f:d5:c2:98:cb:c6:6a:60:ab:25:79:9b:a1:ac:42:80:6d:
1d:1c:d5:7f:04:78:ad:02:16:e9:42:c2:1c:56:aa:3b:59:53:
0e:d2:b4:b5:94:15:6d:e1:04:6c:16:dd:3c:19:82:f0:61:74:
15:89:40:72:7a:ac:ea:9d:e8:ad:90:a1:c2:96:42:01:af:b1:
fe:f2:26:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:22 2025 by rpki-client