Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: KPznlLNB5Z0gJKI6WhQItgHI+Yj010jirN7OflfL+I4=
Subject key identifier: C0:09:38:03:AE:2C:CB:9B:8F:17:88:47:31:AC:EB:99:E3:D5:78:BF
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 0198D4E0D25EC8B1BC43F270F11908E58648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 1583
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: z/3QSaq4k4iCAv7qgB0Fhq2rClf2+UDkxt/qK0X7Qo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d2:5e:c8:b1:bc:43:f2:70:f1:19:08:e5:86:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=c0093803ae2ccb9b8f17884731aceb99e3d578bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:56:97:1a:18:ba:2a:92:0c:dd:99:5b:14:
18:d4:3f:8e:f6:4d:92:91:72:a0:cd:0b:8d:a4:71:
2e:a2:85:11:28:2f:19:6f:7e:12:50:1f:c5:5f:dc:
ce:22:4f:53:a7:f7:5b:10:e1:6a:1c:34:29:eb:44:
26:ad:bd:9b:d3:e5:e1:5b:20:14:8a:bd:42:e0:46:
13:df:48:ab:a9:60:3b:11:c1:e3:e2:c1:bd:15:82:
8e:d1:13:49:e0:ab:e4:7c:a7:cd:5a:bb:89:7c:dd:
dd:c9:13:eb:4d:99:2c:82:1f:6b:86:32:83:34:6d:
3c:16:f4:2b:d2:38:5b:95:de:0f:ff:c7:48:c8:8b:
1c:e4:5d:30:e8:5c:44:c2:24:ab:ef:ef:ad:b4:1c:
5f:53:58:46:21:6d:f5:97:66:c6:f6:96:54:f9:ab:
9a:27:cb:8c:93:bd:d6:f0:83:33:ee:67:bf:77:ba:
8b:10:f3:fe:73:3b:3e:77:c7:2e:f9:dc:f8:fe:f0:
b9:d0:2c:bc:3b:20:bc:a6:bb:b4:0b:24:1f:f9:e4:
9b:3e:17:73:4a:b4:5c:36:9d:19:8b:35:8e:af:3f:
93:d4:fb:6d:ef:6a:c4:70:23:81:b3:b9:83:23:7d:
e1:fd:42:03:e7:be:63:82:1c:76:ce:7b:4f:9a:22:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:09:38:03:AE:2C:CB:9B:8F:17:88:47:31:AC:EB:99:E3:D5:78:BF
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c0:85:70:6b:13:48:d9:ff:2f:91:ed:83:06:11:2a:7c:01:
52:e3:f0:df:8b:5e:6b:5f:9d:10:6c:91:22:c7:04:f4:5d:40:
23:c1:31:f6:61:49:18:c7:e5:82:7d:03:42:bc:aa:20:f8:e6:
b2:5c:92:fd:90:c7:a7:53:b5:2b:81:d7:b4:ba:bc:e8:2a:29:
3e:ae:b1:f2:b2:53:90:62:50:94:ac:79:9a:8a:b4:61:6c:79:
80:ea:d6:0f:7e:9b:38:52:1f:87:02:84:33:c7:16:b0:c7:0b:
de:17:50:9d:cd:9d:b6:24:d6:9a:04:4e:38:5a:10:13:a4:16:
78:50:05:7a:1a:d4:b3:9a:b7:29:07:b4:e3:04:fd:fe:ab:a6:
81:b5:23:70:a3:fe:59:5d:20:0d:59:29:19:59:32:d4:c2:b9:
58:e6:17:51:84:53:96:3d:10:cf:f6:4a:b0:9c:81:88:20:98:
57:f3:a7:fe:dd:d3:d9:8b:86:45:4e:75:fe:8e:42:d2:7a:a1:
af:d9:e2:ab:c1:e4:fe:ce:ba:d1:da:aa:d4:e8:b5:e9:42:b6:
cd:05:c4:22:4a:18:df:ad:81:20:4f:69:29:d8:9e:88:2b:8c:
5d:5e:46:e4:e4:d4:48:fc:e6:dd:15:e7:ca:54:6f:92:23:3c:
46:dd:c5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:26 2025 by rpki-client