Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: 0xra234gzUVWF1WAlr+aqVUJSaE4FN4Y+KcAhD39d7c=
Subject key identifier: EF:42:2F:76:40:54:E5:3B:2E:4E:A4:04:B7:BE:5A:FD:77:5F:17:21
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 019896A4DB0DA83E9CA86F5AEAECE779F87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0D09
Signing time: Mon 11 Aug 2025 01:00:42 +0000
Manifest this update: Mon 11 Aug 2025 01:00:42 +0000
Manifest next update: Tue 12 Aug 2025 01:00:42 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: Z15SWxGZckxix5+Hu0PXNVnvCsBgZ5Vmjv+iojVv5Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:db:0d:a8:3e:9c:a8:6f:5a:ea:ec:e7:79:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: Aug 11 01:00:42 2025 GMT
Not After : Aug 12 01:00:42 2025 GMT
Subject: CN=ef422f764054e53b2e4ea404b7be5afd775f1721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:f4:ba:b4:03:aa:dd:31:53:69:00:54:e7:
62:dc:da:7c:b1:74:fc:31:85:9e:51:08:45:c1:88:
8d:1d:01:55:b8:28:12:45:5f:85:89:5a:6c:68:8c:
7b:16:7a:24:ed:c9:d6:63:df:46:31:99:82:97:85:
33:1d:71:e8:6f:33:29:03:73:9d:84:bb:d2:29:f7:
d0:f4:84:00:d9:be:3c:cf:e3:15:81:71:8f:0d:bc:
9a:8a:dd:1e:13:1a:e2:80:61:6a:ba:e2:35:ec:34:
4f:82:82:74:cf:04:e4:a1:a5:88:f4:28:89:d4:d0:
1d:bf:04:a5:8b:b3:54:7b:d4:58:c6:d4:da:e2:b7:
ce:d5:2e:f5:fc:01:44:0d:3c:37:c0:7d:e8:c3:70:
fb:57:3b:50:e5:c8:c8:1b:5c:30:ef:62:11:a2:43:
a3:dc:97:14:55:10:89:e2:11:c5:da:33:11:fd:fa:
95:42:dd:53:7a:d8:8b:48:eb:19:26:36:ca:8b:fd:
4d:7d:c9:6a:3f:c5:fd:0c:cf:90:51:e4:ca:56:07:
5c:0e:1f:5e:76:d7:e4:a0:2e:07:75:26:30:be:4e:
4f:38:02:3e:bf:0e:ad:80:49:d3:d9:14:72:75:3f:
87:fb:27:df:58:1c:20:f9:d3:73:f3:25:2d:fa:9a:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:42:2F:76:40:54:E5:3B:2E:4E:A4:04:B7:BE:5A:FD:77:5F:17:21
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:64:23:ba:97:a9:0f:94:9d:4c:e4:83:34:96:39:44:6e:37:
d4:e5:4e:70:c3:f4:b6:4d:55:83:94:c3:19:63:fd:3d:b1:eb:
aa:9d:09:e4:a0:cd:53:67:28:1c:f3:47:f8:28:8d:e8:67:27:
f7:00:05:77:c2:66:b0:84:08:9e:03:de:e3:c8:68:9c:a1:f1:
3c:fa:6b:08:39:7a:3a:4f:27:4b:94:99:8b:bc:0b:dd:0e:16:
0d:a6:03:15:91:92:2c:37:be:f9:b5:07:d8:75:c2:d7:03:3d:
49:c8:0f:5d:e9:c7:72:28:dd:e7:34:7e:43:71:a8:03:0d:b8:
fa:ef:74:27:1c:1c:c0:80:e0:2d:48:1c:38:af:3c:28:85:35:
cb:bf:79:a2:b1:cd:65:b8:0d:93:60:de:f4:bf:26:c9:ba:8b:
ea:e3:f2:4c:b7:2c:b5:4a:a1:17:ba:46:3e:6a:45:93:f3:b1:
9b:b4:52:d0:a4:56:f8:9d:d6:e1:91:19:bb:b6:52:5b:63:3f:
20:f7:e6:7c:bc:24:28:23:c0:1a:12:b9:e8:49:8c:80:fe:6a:
12:aa:51:aa:93:66:c8:e0:91:9e:39:c3:48:65:2e:6f:f0:a5:
cb:9c:6b:3b:7a:99:ca:8d:f0:6c:c2:0c:ba:8c:b7:b6:19:2f:
00:03:f0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:00 2025 by rpki-client