Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: kFLLYkZXtYO+pVxZdmQ5ytQciI/UAu203QKO048V3cE=
Subject key identifier: 34:D2:A5:B9:E4:E0:C7:93:93:2A:C6:10:5D:0F:C5:D6:21:7C:6B:2D
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 0198835550EE6D4A0693BFCEA1CC242B97C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 07:01:03 +0000
Manifest this update: Thu 07 Aug 2025 07:01:03 +0000
Manifest next update: Fri 08 Aug 2025 07:01:03 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: oa9IoZhoBqKKDTs/WLFyJoNyh53oP/at9PvvQYmDeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:50:ee:6d:4a:06:93:bf:ce:a1:cc:24:2b:97:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Aug 7 07:01:03 2025 GMT
Not After : Aug 8 07:01:03 2025 GMT
Subject: CN=34d2a5b9e4e0c793932ac6105d0fc5d6217c6b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:88:12:77:f4:7a:2b:05:2a:06:37:de:ef:
77:63:3f:a6:fc:51:f2:d1:79:c2:72:54:6f:7f:bb:
e9:da:9b:e3:b7:32:42:24:d7:d4:dc:cc:9b:25:e2:
31:02:4a:93:43:f2:8d:e9:37:f6:9e:1a:9c:73:36:
e2:3e:e3:62:d6:2a:e9:7c:a5:eb:bf:04:f2:55:d0:
41:5e:5f:51:68:ab:69:36:b4:7a:84:2c:88:3c:0a:
96:ec:17:aa:be:92:67:3d:cc:e6:47:6b:8b:80:3d:
9a:1a:97:ab:cf:e2:d9:a5:f2:a4:49:1f:15:dc:a7:
3c:e2:d3:11:b8:d5:f6:f0:7e:e4:16:23:0d:d9:8d:
5d:86:4a:30:30:b5:78:79:51:c3:0f:38:e7:4d:d6:
f6:6e:c4:cc:09:d2:3d:2a:ff:4a:57:be:33:8f:c0:
33:3c:89:2b:14:ab:34:d1:61:b0:3c:db:09:a2:b6:
7c:40:40:8d:16:0f:2b:80:60:8b:7a:a9:fc:c6:01:
67:ec:f2:42:5a:bf:d0:42:74:3e:15:cd:30:bd:fe:
5e:64:38:8d:af:7b:1f:be:11:ae:55:ba:19:36:1c:
0b:34:59:74:29:bf:c7:4d:74:41:0e:f6:1f:b8:19:
c7:61:bd:fb:57:8a:8c:38:7a:f6:7f:eb:3d:98:8c:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:A5:B9:E4:E0:C7:93:93:2A:C6:10:5D:0F:C5:D6:21:7C:6B:2D
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:74:7f:ed:11:83:9b:4b:80:45:4b:67:ef:3c:db:29:c0:fb:
c7:83:23:92:04:67:94:d2:8b:bc:eb:3d:fe:f8:11:0a:0f:21:
83:21:39:77:7d:8a:ed:76:a0:31:90:95:e8:09:4c:1e:97:c4:
76:6d:f2:41:b0:f1:61:3d:ce:44:8f:6b:98:6b:42:f7:15:47:
76:6d:12:1f:4a:35:1f:58:9e:61:05:e0:69:7e:27:1e:f3:90:
f3:8e:39:f2:a2:d4:40:44:96:65:26:48:8a:7d:8a:f7:d4:8f:
a9:2b:25:7b:0f:96:e6:fb:78:22:8e:51:67:4d:d1:14:df:db:
32:fb:c4:e4:80:f3:23:50:ea:19:d2:98:c3:e9:b7:1c:74:fe:
79:f2:cd:6f:f4:aa:03:5d:1e:f2:67:f4:1d:2d:95:58:c3:a7:
2e:78:c7:de:76:0c:56:fa:1d:54:73:ae:e3:ca:fc:52:0a:be:
57:ef:ba:48:dd:d0:0c:5b:74:8f:2f:66:c3:e6:ab:5c:52:03:
9c:be:90:81:c3:56:a7:4b:73:94:c5:34:2b:2f:e0:2f:76:8e:
3b:24:bc:8b:ef:04:20:98:33:03:29:48:88:f8:35:da:59:7a:
17:6a:a9:a8:0c:2d:6a:08:43:a9:4b:f4:fa:e9:a5:a2:eb:0e:
50:1e:82:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:58 2025 by rpki-client