Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: /qWDecYG+dG3a5RXBhWpW6F8n5eMsTqtK5RV/HE4PEs=
Subject key identifier: 86:02:91:5C:8C:75:8E:92:BB:8F:A8:86:F5:05:F3:14:F3:50:5D:10
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 019873E37E6583A769EABD9293ABCEB75B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 09D3
Signing time: Mon 04 Aug 2025 07:02:25 +0000
Manifest this update: Mon 04 Aug 2025 07:02:25 +0000
Manifest next update: Tue 05 Aug 2025 07:02:25 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: 78Arnynk4yZEpNhM5ULlY+RLR2HbJp+xiwGQ4bvpUi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:7e:65:83:a7:69:ea:bd:92:93:ab:ce:b7:5b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Aug 4 07:02:25 2025 GMT
Not After : Aug 5 07:02:25 2025 GMT
Subject: CN=8602915c8c758e92bb8fa886f505f314f3505d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:d3:db:70:04:ec:16:ed:e2:0a:cf:26:3c:
b8:34:9f:a5:6e:1e:2a:10:23:8b:d6:04:ed:6c:e2:
b5:a2:cb:2b:ea:ba:78:9b:92:c5:8d:2b:e0:78:0d:
d3:92:2a:c7:eb:05:6c:48:3f:a1:56:fa:11:51:5b:
a6:9d:77:a5:9f:82:d3:4b:a6:13:0a:b9:f8:dd:1d:
25:39:35:15:ac:59:cc:da:08:e8:db:52:f4:f1:dd:
16:10:34:00:8c:35:2a:f4:5f:b5:1a:ef:c1:a2:8e:
d5:fa:c3:ec:23:78:90:7b:45:43:a3:93:78:fa:8f:
e6:ac:90:3b:db:2a:c8:e7:d7:48:ab:64:db:20:66:
8c:13:e4:8b:4d:0b:9e:35:12:fa:c0:52:06:73:30:
ee:54:82:ec:8a:12:06:3c:b9:95:eb:82:72:cd:db:
b9:a8:61:b1:58:9e:d3:0e:d4:f2:4a:ae:0d:51:16:
16:68:4a:4a:2a:72:cd:9a:43:73:ce:9e:a5:e1:76:
8b:c8:56:b8:94:f4:02:d8:2f:a1:ef:26:10:8f:88:
18:df:fb:65:7a:ab:90:c3:ac:c1:5a:8f:13:20:c3:
84:8b:77:bf:d7:86:4c:0f:94:56:c4:46:8d:39:2c:
77:2f:49:94:74:9d:22:8b:e3:97:58:a6:9d:c2:fe:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:02:91:5C:8C:75:8E:92:BB:8F:A8:86:F5:05:F3:14:F3:50:5D:10
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:35:eb:2d:8d:13:6e:50:cf:0d:be:c6:2d:77:4b:ec:c5:4f:
cd:ec:b7:49:ec:b0:c7:b2:36:d6:33:ef:ac:f9:62:d9:2e:29:
17:1f:71:30:bf:3b:b1:5a:4d:12:f7:04:46:51:d1:ad:f1:f5:
23:b5:13:53:77:b7:e0:44:30:ee:4e:e4:17:7f:c6:cf:30:e3:
16:8c:18:a7:e2:a3:2c:26:ce:f1:7d:d0:5f:54:90:0d:5c:45:
4d:25:3f:fb:06:57:af:d2:31:eb:8b:72:bd:09:44:06:be:a6:
3d:63:f2:c5:24:bd:ce:44:6c:16:3f:96:fe:6d:d6:86:09:55:
72:aa:f8:c4:ba:8d:7c:45:c5:4c:23:a8:90:83:95:b5:8c:44:
07:a9:43:a7:d9:64:b4:72:a8:46:66:29:ae:98:a3:5d:c2:86:
31:d7:a8:8c:ca:7f:79:23:30:56:dc:e3:f0:a5:cf:36:77:26:
f9:ac:45:fc:f6:38:e5:57:19:10:37:d0:2a:0d:80:78:4c:59:
e9:f0:ef:5a:bc:e7:a2:bd:e1:0e:6a:2c:07:e8:e6:00:9a:09:
75:8c:f6:f1:fc:9f:41:77:ae:01:64:c9:74:d2:9f:35:a1:f0:
aa:70:c0:6d:6b:d3:3e:3a:d5:da:72:14:4d:b7:30:12:c4:b6:
80:28:30:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:57 2025 by rpki-client