Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
File: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft (raw, json)
Hash identifier: SEl5JOBabRHyxJC15BWkrhxsh4obxWyDoGBBN2XdxHM=
Subject key identifier: 2C:60:2B:50:49:09:52:7E:13:2E:F0:AC:83:4E:5E:36:6C:B3:F7:9F
Authority key identifier: 5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D
Certificate issuer: /CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d
Certificate serial: 0198D7739705A0FE7A3D6D48FA07F04ED53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
Manifest number: 0149
Signing time: Sat 23 Aug 2025 15:02:13 +0000
Manifest this update: Sat 23 Aug 2025 15:02:13 +0000
Manifest next update: Sun 24 Aug 2025 15:02:13 +0000
Files and hashes: 1: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl (hash: 9ugyyMg3n9sVRy9564z/avsofqh5dV4z+DKlJ02vI8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:97:05:a0:fe:7a:3d:6d:48:fa:07:f0:4e:d5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d
Validity
Not Before: Aug 23 15:02:13 2025 GMT
Not After : Aug 24 15:02:13 2025 GMT
Subject: CN=2c602b504909527e132ef0ac834e5e366cb3f79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:34:e5:21:01:98:7c:71:4d:73:03:7e:b3:
8a:45:38:70:fa:7a:58:2d:a8:65:8d:bd:ef:fe:34:
6d:50:d3:5e:e7:8b:69:9f:99:f9:d5:02:52:f6:f4:
2b:51:da:ac:b0:b2:8a:1e:ed:66:40:eb:ca:00:a5:
13:6e:56:b8:5d:63:89:37:b8:17:a4:fa:78:ce:e6:
ad:0c:07:04:d4:7c:60:11:35:33:ae:cc:99:16:ee:
37:cf:68:a4:85:4a:6a:46:23:51:7f:a3:c6:13:0f:
c2:9f:55:c6:39:36:f4:ad:7a:b3:c3:fe:2f:47:e1:
1c:80:14:e5:59:31:5f:a0:72:a0:6d:fc:1a:da:ac:
3c:0a:b1:85:88:b7:e9:76:1b:cb:38:83:dc:19:a3:
17:be:fa:e5:66:f5:e3:40:20:b8:56:d2:4c:0b:d2:
da:0a:70:6b:4c:fb:b4:29:0c:8f:84:2c:a5:fc:c4:
cf:a4:7d:69:dd:9f:e3:60:1a:1e:37:a6:aa:9a:48:
29:b4:41:95:2b:04:ac:51:37:ea:f0:80:19:4d:4b:
0e:13:6b:d6:25:e0:a1:29:d0:ec:64:a5:b8:57:77:
93:aa:7c:14:db:80:d7:7b:0a:e3:40:86:79:6c:c3:
6c:c5:26:3c:d9:aa:91:9e:b3:ff:6d:e4:12:8c:b2:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:60:2B:50:49:09:52:7E:13:2E:F0:AC:83:4E:5E:36:6C:B3:F7:9F
X509v3 Authority Key Identifier:
keyid:5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:20:14:16:36:93:65:53:28:98:a3:6c:a2:1b:48:fb:cc:f7:
36:d9:a9:5c:03:5e:3e:db:5d:96:91:ec:2e:3d:9a:19:a1:8f:
fc:71:db:a1:d6:80:b4:e8:8d:f6:5b:ca:28:3e:9b:23:b5:a0:
35:1c:ac:80:93:91:29:b2:b0:8c:44:50:a1:dc:44:11:c5:a5:
81:7b:38:cf:52:b0:7e:22:35:5a:f2:80:21:fb:23:86:3b:61:
c2:52:e7:67:f3:00:f5:59:c8:e6:27:26:1e:d3:28:1c:8a:ab:
1c:8b:5e:e0:86:3d:62:b9:a2:eb:20:68:de:6b:99:64:30:f3:
b3:33:5e:8b:08:a0:3c:c7:cd:3e:34:ab:d2:e2:c3:3b:05:91:
18:6b:d5:0a:30:cd:3e:bf:5e:0b:93:14:a4:5c:54:4a:4a:7c:
00:ca:a5:5b:63:36:e7:57:6e:88:21:04:2f:3a:b4:0c:56:9d:
e2:b3:25:50:83:ea:1a:0a:d8:6e:d3:b5:93:74:d2:8e:34:99:
8f:4b:b0:67:45:a2:1a:1d:97:ab:f8:d8:d5:09:6c:48:b8:7d:
f7:7c:ef:09:74:ee:8e:b2:1b:31:2a:1c:ce:0f:54:16:01:13:
7f:8f:c5:0d:77:5d:d0:65:54:4f:34:ff:e8:6d:4b:bc:ff:60:
49:34:cb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:06 2025 by rpki-client