Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
File: kXWIXPl40u9mE3YhRTC57WjFtFg.mft (raw, json)
Hash identifier: HHq6gx6jLdTtJPHtFJhksUOCvUIzv+RiVNKJ2jPbfUE=
Subject key identifier: 64:7A:F1:9F:DE:2D:26:D7:58:C2:27:91:BE:7A:34:42:B1:E7:91:0A
Authority key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
Certificate issuer: /CN=9175885cf978d2ef661376214530b9ed68c5b458
Certificate serial: 019873E21A990A5913B4E750AFF155614667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
Manifest number: 0934
Signing time: Mon 04 Aug 2025 07:00:54 +0000
Manifest this update: Mon 04 Aug 2025 07:00:54 +0000
Manifest next update: Tue 05 Aug 2025 07:00:54 +0000
Files and hashes: 1: kXWIXPl40u9mE3YhRTC57WjFtFg.crl (hash: Zzh+8wuUkzGuPBs/7opZYHU7br2k324+fSB5zPNHSAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:1a:99:0a:59:13:b4:e7:50:af:f1:55:61:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9175885cf978d2ef661376214530b9ed68c5b458
Validity
Not Before: Aug 4 07:00:54 2025 GMT
Not After : Aug 5 07:00:54 2025 GMT
Subject: CN=647af19fde2d26d758c22791be7a3442b1e7910a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:68:92:23:36:4a:b5:26:15:db:20:df:5d:
48:07:c0:42:8e:dc:9c:f7:78:33:b2:10:7e:28:60:
cb:c9:23:6d:a9:3a:d8:74:45:f3:bc:23:f3:69:ad:
85:b3:2b:8c:db:ad:28:8d:4f:83:09:7a:2c:c8:7e:
33:4b:93:04:04:95:b1:23:02:7d:a5:46:9d:dd:bb:
5c:a7:a0:10:36:10:f4:8b:9f:f5:98:b8:d9:7a:0c:
cd:a4:79:83:31:36:33:d5:51:82:ca:5f:5e:4c:17:
81:d8:ae:eb:a3:43:f1:e1:8d:ab:47:be:2d:12:19:
4c:b8:df:3b:d5:22:9a:fa:0a:af:1d:c6:11:07:ef:
c8:a3:4c:ea:21:d0:81:c3:b8:15:88:ce:50:60:31:
4a:0c:e3:2e:52:5d:5f:cf:56:1b:93:79:1a:03:a7:
d1:f3:24:ac:d9:94:35:c8:e4:22:90:53:9a:9e:dc:
56:82:24:7e:34:40:bd:e3:44:e9:c4:95:40:bb:e5:
49:e9:41:d9:a5:2b:0f:fc:9a:7d:7a:8b:36:4e:b2:
78:7f:bb:9d:e7:97:b3:90:51:2b:8e:5d:c7:39:20:
2a:3e:63:45:ea:10:62:9c:61:56:bf:36:ed:79:55:
d7:94:31:48:91:d1:f2:39:91:d8:51:64:ad:c6:b8:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:F1:9F:DE:2D:26:D7:58:C2:27:91:BE:7A:34:42:B1:E7:91:0A
X509v3 Authority Key Identifier:
keyid:91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3b:39:fe:72:bb:1d:55:35:76:cb:ab:cd:9f:75:93:a1:10:
e7:92:16:40:a9:c5:c2:21:bf:c9:f6:9b:1c:61:38:a9:30:06:
16:2f:fa:5b:ab:77:62:ab:55:13:db:7d:19:38:e2:80:27:62:
a5:62:93:f7:4a:22:7d:d9:cd:51:cc:1f:e0:33:7e:ab:8c:77:
de:7b:87:80:d5:b8:98:45:5d:c6:e4:93:97:b5:8e:cc:be:76:
29:f3:ba:e0:49:47:34:bb:48:a1:fd:ce:e5:4b:e7:37:ca:f0:
f0:53:cb:2a:76:7b:f6:37:92:a0:7b:2d:44:e4:16:00:85:53:
7e:a5:e9:db:df:ad:5f:41:32:bf:07:e7:a6:ff:dd:b0:9d:8f:
30:30:c0:8b:30:4f:91:85:fc:a8:b8:62:9b:6f:57:e2:65:6f:
84:ee:92:5a:58:ff:7e:45:7b:a6:72:44:1d:60:2f:8a:cc:3f:
b8:2a:06:b0:08:0c:45:8a:62:58:a6:85:1f:22:41:f7:f7:82:
0c:06:a1:f2:d1:0d:ce:26:65:45:49:e7:ce:c5:35:d9:b0:5e:
4f:87:e3:bd:5b:ec:9d:c8:2c:f4:b1:6f:46:9b:d0:1f:74:ee:
38:b1:57:11:f1:7d:db:f5:d0:b6:64:02:da:a4:75:89:4c:01:
de:4f:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:45 2025 by rpki-client