Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: pGTApgqqUYTGyiaoNxAnRvDS8V7kidN/zxDSaeDO8Zk=
Subject key identifier: 2B:D0:D5:0A:A9:CF:C8:0A:EC:B8:F4:41:AF:B0:CD:1C:37:8D:CE:02
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 0198D51577D76C465EDF1480EFCEAB3260F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0A5B
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: j6ubhsAOre+UOrSyZmkRWfNXjo24wGroO31XtBJAO9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:77:d7:6c:46:5e:df:14:80:ef:ce:ab:32:60:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=2bd0d50aa9cfc80aecb8f441afb0cd1c378dce02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:d0:09:65:77:45:77:f8:99:7d:05:2b:30:
42:a5:11:9a:d0:eb:96:aa:0e:fd:c6:83:65:12:f8:
ea:a7:43:94:e1:3d:bc:8d:99:ac:4e:9f:63:13:70:
64:54:99:52:e4:9c:bc:5e:27:1a:7d:52:35:1a:be:
6c:1a:34:b9:40:f9:b4:4c:20:00:cf:5c:3a:c9:0c:
be:a9:eb:24:fa:62:93:6b:ea:4d:c9:01:60:aa:d8:
0c:1a:bb:8d:1c:e7:a6:f3:b9:ec:c6:6f:23:a1:0f:
cc:ba:f9:2c:ab:b8:8a:2d:e3:b0:51:4d:ac:a0:0e:
33:ae:a7:16:76:4f:10:94:d6:5a:89:ac:fa:f2:2e:
60:f1:8b:a3:44:32:bd:f2:9f:20:46:4f:4f:56:4d:
88:d2:8f:de:dc:56:89:c2:dd:77:74:0c:9f:c2:c0:
59:71:0f:36:c8:4f:a2:ae:8c:9a:0a:7a:e9:0c:27:
6b:0b:51:fe:2e:d7:e4:39:aa:02:21:fb:d5:3c:9d:
33:e9:ab:4a:7f:95:09:3a:43:64:df:eb:20:13:29:
e8:58:96:a7:cd:3f:7c:97:1f:4d:16:2b:f7:c5:a8:
64:31:3e:38:4c:ae:ab:b3:97:aa:b9:aa:01:96:7a:
2e:10:fb:b8:ad:e7:58:ca:d0:8f:79:f8:2e:f5:6b:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D0:D5:0A:A9:CF:C8:0A:EC:B8:F4:41:AF:B0:CD:1C:37:8D:CE:02
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bc:c0:55:06:c6:65:06:c4:12:f6:f8:fc:ab:e7:6f:b7:61:
7f:5d:d1:f8:e6:4f:cf:0c:cc:7b:67:e3:43:78:57:f8:d2:96:
77:91:fa:c2:9e:f7:42:1b:eb:23:c7:be:4f:f3:32:02:63:fa:
e5:5e:3e:0c:5a:5b:ca:15:b0:40:95:12:48:29:71:f6:19:8f:
29:51:e0:1b:a5:26:78:1e:36:06:fb:2e:2d:97:6c:d1:cc:54:
37:e6:41:76:87:2f:08:d4:46:14:0a:a9:ae:75:26:6a:f0:eb:
5d:b4:51:24:f7:ff:68:05:42:11:b8:00:7a:50:70:a0:0e:c3:
c7:25:a1:57:63:5c:75:fd:10:46:dc:93:9e:7a:a8:c9:c8:54:
3d:3e:aa:17:a0:0e:2a:75:0e:dc:f0:b8:4c:25:1d:98:e4:f1:
b9:ab:b1:95:f8:32:9e:0a:e1:9a:9c:cb:79:00:3f:de:d6:6e:
c5:f3:2d:af:ae:0b:d6:4f:b4:c9:bc:4d:ba:9e:a3:51:8b:64:
2f:b3:29:8e:7e:b6:ce:4b:46:36:9c:f5:e1:24:63:8b:df:6b:
72:c0:2c:89:5e:e5:9d:f6:81:3f:74:45:70:52:4c:25:48:71:
ee:db:6c:2b:1f:b5:80:fb:a4:fd:82:07:76:49:a4:36:29:ef:
e9:8c:a3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:38 2025 by rpki-client