Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: uWD6/okNSniVyoBP2M72riONFpT7YiNpbsISD0voaIk=
Subject key identifier: F5:F1:7E:17:AA:BC:00:81:31:2B:38:C9:55:E7:EC:BD:DD:60:C9:FB
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 0198D4E02C3F8E6A813575924C8440E26BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 0E73
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: W1/LjLZo36Ndd+yPjNsvdMpTYSWfNY3bSQNGmPvZKcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2c:3f:8e:6a:81:35:75:92:4c:84:40:e2:6b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=f5f17e17aabc0081312b38c955e7ecbddd60c9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:08:e1:dc:2b:a9:9f:af:09:a0:94:34:10:
65:e6:6b:83:05:fc:fa:f0:ab:c3:9b:9c:75:42:95:
ea:49:bd:65:34:25:63:ea:21:05:bc:ed:7e:17:73:
a1:39:67:88:c4:73:f0:81:82:8b:ef:84:06:2f:c1:
c6:0f:2b:fe:b3:77:29:d1:43:dc:4d:94:8f:e1:cb:
6f:ae:56:6c:be:0a:a2:d8:34:f5:9c:6b:e5:13:d7:
28:46:59:7f:49:9b:9a:be:1e:0b:00:1e:2e:0e:1c:
62:82:ad:e5:0d:de:1e:a0:09:23:05:fb:ac:10:ea:
3a:19:8c:6c:8a:df:2c:3f:e9:80:b8:b5:b5:ef:7a:
39:28:e4:84:ce:7b:74:98:b6:f4:7e:58:77:6c:97:
bf:8b:34:6d:bd:0d:ba:6a:11:45:a1:a0:3f:8b:bb:
a2:29:ef:23:30:b8:50:de:c2:61:82:91:b7:2d:73:
2b:08:a5:cf:81:f4:b4:07:a7:77:fd:2a:1b:6f:65:
3e:17:cc:89:c1:a6:d7:dc:90:21:21:94:5a:48:35:
75:58:a5:0f:f8:50:f9:cf:ae:d8:d0:52:97:a0:ca:
9d:95:93:a6:b1:98:a6:41:bc:5d:35:8d:69:0f:87:
fb:e3:f6:60:33:2c:fc:33:33:10:69:1f:8d:06:59:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F1:7E:17:AA:BC:00:81:31:2B:38:C9:55:E7:EC:BD:DD:60:C9:FB
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:cd:14:08:e1:40:49:42:77:41:ec:44:7b:03:66:16:99:7a:
06:f2:c6:96:7d:9f:a3:a4:97:61:8f:8c:9b:78:1d:ff:9f:e4:
23:90:23:41:a8:17:98:b0:8a:3c:04:39:7a:b9:81:74:56:72:
fa:07:b1:57:58:a3:c0:d9:33:5b:ba:ef:54:89:0f:ed:2b:0c:
9b:16:4f:48:c2:99:e3:eb:df:63:f8:30:cb:b5:66:30:54:cf:
71:34:30:bc:98:48:45:46:cd:81:a8:e4:9a:55:d3:9a:b8:34:
cc:fb:da:f5:4a:ea:43:d7:c1:68:c8:10:b8:3d:9a:e6:23:22:
50:35:f6:40:7d:34:8a:0d:69:49:91:6b:4f:96:9e:45:fc:df:
52:c5:f1:05:61:38:ea:31:5d:83:f2:d7:bb:25:d6:89:4d:41:
2e:4e:f5:8e:25:1b:b6:a0:41:79:26:4c:a8:1b:94:f4:38:b9:
e1:9d:de:b2:af:ee:a0:b0:1f:97:ff:5b:42:7d:db:f6:35:3a:
96:10:a4:4a:4c:70:6a:e3:ee:c7:7a:e0:eb:7a:d5:1b:93:69:
55:25:c5:23:a7:b0:cf:5a:d6:9f:dc:87:28:a2:bc:4b:df:16:
30:35:3e:99:46:18:0f:b0:77:de:bc:1d:52:2a:bf:0a:ab:1d:
d8:39:01:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:53 2025 by rpki-client