Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: B4dJscCPF6WwEdABW3SDaq18uhVsDv7YJNWxSfW5hs4=
Subject key identifier: 32:2D:F9:E3:4C:F3:3C:D5:90:FC:0A:28:E5:0A:EA:CA:A0:88:A6:44
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019892C90C4D81BC59C383683136B0A625D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 08BB
Signing time: Sun 10 Aug 2025 07:01:45 +0000
Manifest this update: Sun 10 Aug 2025 07:01:45 +0000
Manifest next update: Mon 11 Aug 2025 07:01:45 +0000
Files and hashes: 1: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: iAXTEuWZkQssZsL9YvBB34BcUXkaCsiKL6OPC9RmDkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:0c:4d:81:bc:59:c3:83:68:31:36:b0:a6:25:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Aug 10 07:01:45 2025 GMT
Not After : Aug 11 07:01:45 2025 GMT
Subject: CN=322df9e34cf33cd590fc0a28e50aeacaa088a644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7d:f2:e1:46:64:83:b2:f1:08:72:3b:b9:c1:
1c:40:b6:55:01:ac:52:e7:cb:7f:be:64:48:42:97:
6a:89:7d:f0:36:ae:94:db:e9:03:ae:60:df:c4:10:
42:a1:76:98:c2:8d:52:15:e0:f0:fa:94:17:e0:c6:
0f:60:56:16:29:e0:31:24:62:c1:e4:58:76:0f:35:
fa:48:f5:10:b2:7f:36:26:24:7f:6a:b9:da:fd:89:
dd:53:6b:1a:d8:84:3b:7a:c9:36:30:37:61:c2:6b:
0a:2d:5a:3f:aa:bd:db:e9:35:57:b1:4a:3e:e6:66:
db:b1:d9:67:96:da:09:bc:0f:af:f5:14:d3:cf:a1:
d8:43:01:ee:8c:db:ec:3d:fc:83:d9:d3:c7:f8:21:
dc:ca:d5:1a:39:a2:84:cd:03:7a:9e:bc:9b:16:8f:
5f:41:43:e9:ec:ee:f8:3a:12:eb:13:4f:ea:07:29:
af:e8:13:20:70:20:12:0e:09:e0:85:1e:bf:86:23:
43:a2:dc:f2:4f:72:8a:a5:eb:3f:03:05:39:c9:f4:
23:48:ab:dd:de:c3:96:98:ca:e3:45:29:31:13:28:
bd:21:25:44:0b:80:1f:16:c6:3a:8a:92:26:92:dd:
aa:d0:c8:fd:7d:cd:49:5b:3c:72:5e:c3:f3:87:f2:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:F9:E3:4C:F3:3C:D5:90:FC:0A:28:E5:0A:EA:CA:A0:88:A6:44
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:59:10:1f:2b:56:50:63:7b:a6:a6:6b:f4:86:e7:fb:66:8f:
6b:24:7c:0a:e1:d0:90:2b:94:b4:eb:9b:24:47:26:2c:30:1d:
c3:a7:20:3d:d9:8a:9d:24:d3:61:9c:31:37:1f:6f:81:79:23:
32:24:76:dc:f5:76:df:44:1a:5c:57:b5:cc:fc:ab:68:fe:0e:
31:62:a7:c4:c4:53:a0:16:54:d0:73:e6:75:f1:6f:d1:cd:f2:
1f:d6:bb:e6:d0:89:7d:f7:86:86:a2:bb:1f:81:0f:ba:25:3a:
ef:38:34:6d:87:14:a2:7f:04:78:4d:bb:92:1c:4b:99:8c:db:
d9:6b:ed:5b:a9:e6:9f:e4:d8:e0:b9:92:56:9d:94:64:6b:9b:
c9:59:8f:09:7e:59:73:b7:95:ee:6c:a6:c3:82:67:7d:32:6c:
81:85:a9:16:19:28:a8:79:df:e3:a9:31:f6:7c:e4:e7:76:86:
64:4d:aa:6f:29:89:89:91:a6:80:88:66:d5:c0:7c:a2:c1:63:
44:76:c5:8b:95:00:86:2c:0e:6a:74:61:84:ce:d9:6e:03:b8:
c9:ec:59:ce:58:ba:79:55:2c:de:15:54:2d:c0:9b:17:7f:5d:
7c:cc:9a:7a:3a:9f:44:18:3f:d6:f3:26:68:30:13:f2:94:ed:
ef:b0:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:06 2025 by rpki-client