Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: WuGc+XO04Wah8Sz6Deds9nuZDAx564HTDsRDeX7VvnU=
Subject key identifier: 71:ED:25:86:59:54:E2:2B:DD:D1:A7:8E:A5:DB:40:E0:8B:6B:5B:95
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 0198D65FC3315B888DCD12D74E2E94ED9B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 09BD
Signing time: Sat 23 Aug 2025 10:00:56 +0000
Manifest this update: Sat 23 Aug 2025 10:00:56 +0000
Manifest next update: Sun 24 Aug 2025 10:00:56 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: GUJr9BJJHMkEE6ezOn12pJgUtCqNxHnfRncSDc6+fF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c3:31:5b:88:8d:cd:12:d7:4e:2e:94:ed:9b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Aug 23 10:00:56 2025 GMT
Not After : Aug 24 10:00:56 2025 GMT
Subject: CN=71ed25865954e22bddd1a78ea5db40e08b6b5b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:83:c5:00:08:52:c0:fe:9a:ba:01:02:a3:
48:00:db:02:89:11:d8:b9:da:d5:b8:09:24:f8:f7:
a1:9b:ae:a0:52:e0:a6:23:8d:92:ad:7c:e5:68:61:
39:17:c8:9a:2f:99:67:2b:3c:2a:a2:f6:74:85:53:
3f:49:7e:28:5d:13:cf:51:aa:28:e7:00:0f:98:c2:
7e:ab:7e:f9:e5:ec:78:4b:6f:ba:60:5b:c7:17:53:
38:4a:fc:d9:97:c3:04:0b:66:d3:2d:63:d5:08:22:
cf:d3:a7:52:c6:49:47:a1:a9:fc:aa:10:ba:c7:0d:
33:09:56:fb:22:ed:88:ac:21:f0:ae:79:f9:ed:6e:
8b:55:c2:c4:ca:36:1c:7b:51:b7:cd:3f:0a:0b:29:
b2:6a:12:05:12:9d:30:a9:dd:d4:eb:c7:23:87:c8:
be:4a:fa:dc:d9:ba:c3:7c:7d:37:0f:58:cb:c8:c7:
f5:b4:7e:7d:3d:91:1b:da:5f:c7:fe:60:6a:b3:b4:
33:f4:6b:14:c3:3f:15:db:59:cd:c4:52:14:ff:0d:
71:93:1e:00:98:f2:e2:d0:e2:b1:ae:cf:ab:e5:fe:
fb:37:cb:e4:3c:4a:4f:af:9a:dd:23:80:56:51:44:
79:a1:84:4c:47:2d:1f:d6:aa:50:65:a1:7e:1d:f5:
5e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:ED:25:86:59:54:E2:2B:DD:D1:A7:8E:A5:DB:40:E0:8B:6B:5B:95
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:91:d1:ae:66:24:e4:0a:5c:9b:73:3f:2c:1f:97:82:fa:8d:
fd:bb:26:47:8f:f5:fe:7a:5f:3a:7c:93:e4:db:50:64:8c:32:
51:36:96:c2:c2:e2:79:58:8b:73:65:f6:c7:1d:cf:44:e2:55:
28:63:ac:b9:1c:37:6d:a7:07:b2:74:1f:25:99:06:2e:41:b0:
bc:36:e5:88:b2:29:a7:fd:54:4b:4d:40:8b:fd:ce:74:5d:bc:
4c:5d:e1:dd:f4:d1:55:c8:ce:f6:a6:fa:a2:f4:e9:1f:7b:b8:
84:83:52:00:eb:bc:57:dc:65:cf:49:de:88:be:e7:e0:ce:cb:
a9:62:c1:69:49:f8:f9:9f:b0:83:b1:52:00:20:26:1c:b0:8d:
74:19:66:3a:fa:8a:b1:e3:ec:3a:64:b9:a6:d4:3a:22:73:bf:
e7:39:e9:c8:84:fc:2f:29:5d:23:77:ca:7d:df:01:26:1f:34:
66:e8:0d:12:a1:10:f7:08:c8:59:3a:a4:9c:f6:2c:57:d8:b9:
3b:a3:75:e0:88:c9:e0:55:e6:d9:05:8d:5d:d4:53:be:54:08:
31:fd:16:05:82:1f:26:f7:3f:33:fe:b3:6d:32:2d:06:2c:f2:
5d:54:b6:7e:2b:39:16:76:d3:03:18:c1:e0:fd:4d:79:c3:f0:
78:0c:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:30 2025 by rpki-client