
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
File: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json)
Hash identifier: IBQBmkf4wkYpKWrUHrpbUs8gko3AplvcHw5uUoJfplk=
Subject key identifier: 8C:57:9E:86:04:BA:D4:EC:5F:22:1B:F8:8F:89:2F:F3:06:DB:70:8B
Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
Certificate issuer: /CN=c618f03f9874370653aa3a026f6707c2e0e74764
Certificate serial: 01988BEA2F77C6594D375945E64B4338F86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
Manifest number: 0708
Signing time: Fri 08 Aug 2025 23:00:37 +0000
Manifest this update: Fri 08 Aug 2025 23:00:37 +0000
Manifest next update: Sat 09 Aug 2025 23:00:37 +0000
Files and hashes: 1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: k1nSaw9cJaNJtsEZV6BSFcWncgfcGQqaiVo1njYDBJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:2f:77:c6:59:4d:37:59:45:e6:4b:43:38:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764
Validity
Not Before: Aug 8 23:00:37 2025 GMT
Not After : Aug 9 23:00:37 2025 GMT
Subject: CN=8c579e8604bad4ec5f221bf88f892ff306db708b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:00:2c:f6:f6:4e:33:78:71:02:b7:b4:93:
57:ed:20:10:3d:32:7a:89:75:6e:5b:0f:9f:bf:91:
85:76:79:47:4f:04:da:48:af:6d:3f:58:9d:ef:2a:
7d:27:d1:ea:e8:24:33:d5:11:0c:92:a3:fd:ec:de:
ff:fd:63:a4:03:5c:fc:36:b3:ba:f2:5d:0d:4f:f2:
6b:27:58:8a:5d:d3:9a:8f:72:78:6f:c6:51:9c:a9:
05:55:8b:2a:13:1b:be:6b:14:6c:c4:8a:4c:83:31:
c2:70:ee:8a:f8:4b:78:63:fc:ed:3a:d9:70:c2:40:
24:89:b3:e8:31:2e:a3:26:43:0d:89:0f:6c:5c:08:
39:b7:af:31:b6:10:fc:68:b1:5f:1f:d2:c1:e9:95:
c0:e3:e6:10:fe:53:e9:46:36:a9:07:91:dd:e0:59:
d1:82:db:94:b4:ee:b7:83:e6:b4:82:15:bb:05:51:
bb:1e:09:58:20:f9:d8:47:29:90:bb:f7:98:10:f4:
dc:00:f2:11:ed:f9:fb:6a:d9:d8:da:4f:b4:b7:1b:
23:2b:69:10:4f:f2:fe:6d:82:8f:96:fa:2e:ac:5c:
64:3c:46:93:63:f4:32:0d:69:8f:77:94:33:87:9d:
27:95:3d:bb:eb:8d:28:f9:fe:65:9f:8b:7c:d5:7c:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:9E:86:04:BA:D4:EC:5F:22:1B:F8:8F:89:2F:F3:06:DB:70:8B
X509v3 Authority Key Identifier:
keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2e:c3:93:1c:df:d6:e8:46:bd:bb:e1:f7:ea:ea:d2:7d:d6:
36:9b:ed:af:e4:4b:0a:2f:52:c8:24:32:4b:74:9f:26:4d:f1:
44:77:52:48:05:11:0e:8a:47:0d:e6:75:8e:e5:c4:54:43:48:
25:25:a0:fb:77:7b:fc:7a:d4:cf:a9:60:06:44:65:8d:13:d4:
58:79:ec:90:e7:78:42:16:cb:a6:a1:a9:e3:7c:ef:0a:44:98:
1b:4e:8a:7d:cb:5e:ab:7b:8a:86:0e:1b:a7:85:71:69:fc:c6:
79:11:5b:34:ac:00:79:db:95:8d:54:9d:ee:97:a1:d6:d6:47:
4b:d7:f1:d4:5c:4c:42:2b:e2:9d:eb:2b:cc:f5:12:b0:87:96:
4f:e5:c2:88:38:59:74:66:c4:ec:0f:50:1f:6e:3c:38:eb:ca:
9a:8f:2a:15:93:14:71:c0:a7:eb:0f:73:e7:67:b8:5e:07:67:
1d:73:2f:5f:37:9c:d8:79:a7:f5:86:f7:1d:b9:ec:1c:ae:84:
05:5e:8e:60:d9:8f:99:a1:a0:6f:6f:d5:25:77:ac:da:63:72:
db:4c:0d:d9:8a:30:cd:ad:38:4f:ff:41:13:87:f2:c5:95:11:
5a:c6:d1:08:d6:04:11:f7:74:e3:13:52:58:43:88:c6:85:a0:
b6:c0:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:38 2025 by rpki-client