Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: KvlpxXlUc7RgPtJIx8A4e9S1MFrF7iusxTMDrVH8krk=
Subject key identifier: A6:66:74:16:B3:88:49:94:EF:43:2B:74:C9:71:9D:4B:7E:61:9B:77
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 0198D661686563D29712BF1F79A2C26B696C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 161B
Signing time: Sat 23 Aug 2025 10:02:44 +0000
Manifest this update: Sat 23 Aug 2025 10:02:44 +0000
Manifest next update: Sun 24 Aug 2025 10:02:44 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: i7Lm4YC2TGIjzvm28jq9A5cGOceQZge2U4pysZW89OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:68:65:63:d2:97:12:bf:1f:79:a2:c2:6b:69:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: Aug 23 10:02:44 2025 GMT
Not After : Aug 24 10:02:44 2025 GMT
Subject: CN=a6667416b3884994ef432b74c9719d4b7e619b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:a5:ab:cf:d7:58:60:d3:18:01:43:ff:e6:
b1:40:4c:de:25:66:6a:65:16:8f:8b:40:76:6c:bb:
a1:b8:d6:fa:e8:8d:4f:64:00:7a:2c:98:7d:af:d2:
8d:c4:0a:d3:75:be:42:d2:37:b9:fb:03:f3:e3:a9:
ee:05:a0:df:23:1e:42:7c:c2:72:41:9e:e0:93:f0:
56:64:32:d8:75:59:69:67:c8:0b:59:34:79:b8:52:
b3:70:e0:c8:14:da:e0:99:1e:ee:d9:a2:2a:af:e8:
cf:c0:70:1a:a6:c1:72:56:af:f5:65:5c:f6:ae:59:
2a:c0:45:82:72:d2:c0:8e:1e:82:c9:0b:97:b9:93:
3b:74:88:c4:96:46:8b:e4:bc:f6:91:d8:ba:c7:fc:
d8:cc:e3:46:86:51:9b:c7:37:ef:6d:2e:54:46:8e:
1c:3a:7d:a0:03:42:a4:21:c1:de:95:e1:b2:5a:a7:
c7:c4:a2:d6:20:3f:26:ee:3e:cd:bb:61:e5:f8:0a:
6d:76:50:06:5a:d4:d3:74:f6:a4:08:64:eb:fe:66:
9a:27:7e:5c:52:dc:6e:ce:47:66:4d:de:c2:c0:07:
73:87:68:e8:d8:08:e7:4d:9d:be:d6:a0:3f:13:42:
31:c4:c5:78:89:f4:c6:c0:ea:ff:4a:aa:d1:4d:48:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:66:74:16:B3:88:49:94:EF:43:2B:74:C9:71:9D:4B:7E:61:9B:77
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:06:78:d7:ba:b6:e6:c4:2c:f9:89:c5:4e:ac:8f:7d:fb:b1:
a9:02:2b:1d:e4:5d:d5:ab:81:82:da:f5:22:03:38:41:ec:ed:
44:fd:8d:1f:b2:43:ea:e6:64:fe:e2:99:6c:5e:c1:75:a7:11:
e0:6f:4a:10:dc:1a:9e:0c:78:5b:25:29:32:56:63:5a:1c:03:
0b:68:fb:c9:1a:2e:f4:77:ef:7f:60:2f:32:ae:14:14:83:19:
93:76:89:0d:05:55:72:d1:01:ad:ff:91:a5:e5:e4:ff:77:17:
50:53:f8:a6:82:79:3e:50:db:e4:54:19:d2:5a:8c:f2:9d:fc:
d8:25:38:1b:fe:cf:f6:c4:fa:8f:3c:7c:bb:27:50:59:e6:80:
e8:b5:2b:a7:04:e1:c9:f5:18:61:94:dd:76:f5:b1:c0:ff:98:
d4:70:d8:15:b8:08:55:12:d5:56:c0:5f:55:6b:b2:1d:db:88:
07:b1:1e:df:b2:43:e0:a8:45:17:cd:cb:91:5a:e9:35:a9:6b:
c2:52:c9:b6:e5:fb:dc:c5:b0:5b:76:c9:5a:85:71:a3:9c:92:
86:1a:84:cf:d8:93:1f:dc:9f:b8:2f:24:2b:98:5a:d9:e8:a1:
37:9c:7e:1d:db:70:f2:62:b9:04:77:a8:12:5a:b4:b8:cb:9e:
fb:ec:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:37 2025 by rpki-client