Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: JgUrfHiYTsb11yF7JeBMBG80TwQFNCG/Ab5ZYgftf0g=
Subject key identifier: DF:3D:DA:43:FF:35:FF:CA:51:5A:75:0B:19:35:B9:D9:21:E7:B9:46
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 0198D5837CFB1BB3B47D4492EA985A5DFFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 1495
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: 6i9eFPvIQgNBIztyxdOS9lLx+FnctvQo2wZA8Y/RX6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7c:fb:1b:b3:b4:7d:44:92:ea:98:5a:5d:ff:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=df3dda43ff35ffca515a750b1935b9d921e7b946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:62:6f:30:78:79:e6:40:6e:f1:d0:2d:9a:
7a:73:8f:50:33:1c:63:84:cd:2b:c4:7b:b5:92:82:
76:8e:7f:85:c8:39:05:e2:23:eb:28:9a:d6:ac:b4:
bb:55:ba:bc:a2:0a:6b:e2:51:70:5d:01:ed:01:65:
7d:92:b6:3e:82:45:dd:df:fc:89:00:72:4e:95:5b:
c6:2a:b2:13:71:df:08:ab:1b:4e:22:32:07:94:32:
bd:23:07:27:4f:7a:b0:ff:25:60:22:ae:e0:f4:04:
6f:ea:9d:48:d0:b8:76:61:38:34:f0:14:ae:65:b4:
82:32:ae:86:80:20:55:94:f1:0a:79:d7:65:8c:72:
18:c8:2d:20:4b:00:56:e3:93:3a:14:51:69:79:f3:
47:74:b5:64:f9:ee:d5:ed:3c:5a:95:b6:41:91:7a:
0e:be:10:6e:39:90:9c:2c:76:cf:c2:53:55:71:b3:
15:9d:1b:c5:86:79:1b:29:8b:af:07:f0:06:1a:85:
17:05:75:3d:38:1b:10:5f:e9:3c:31:58:cc:05:65:
21:e3:4b:a6:1e:e1:a4:8d:9f:e2:f0:19:d0:ac:92:
a3:a7:56:4e:36:68:f4:20:ca:9a:ad:dd:c5:4f:a8:
56:69:12:79:79:79:61:ee:26:c4:b8:1f:60:0f:44:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3D:DA:43:FF:35:FF:CA:51:5A:75:0B:19:35:B9:D9:21:E7:B9:46
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:db:71:c9:9e:e9:c9:aa:1e:3a:64:dc:c2:be:c7:18:ce:7e:
fe:b3:38:e7:64:5a:24:0c:ed:35:ca:cb:2f:d6:a6:a6:d5:b3:
84:d7:54:41:ad:b9:ac:d4:52:c1:13:73:13:e6:dc:bb:11:f9:
02:3b:8a:31:64:c7:f5:be:c5:8e:2d:b0:a2:0d:c7:41:7f:3f:
f3:9e:4b:c8:61:b0:15:3c:c7:b8:58:ab:da:4d:ca:b7:ff:ac:
6b:df:dc:cc:44:f1:01:a3:c4:90:a1:62:d7:90:bb:58:11:d5:
6b:3a:e5:8c:05:59:da:dc:0d:50:5b:a0:d3:12:ee:2a:f0:25:
ca:c2:f1:06:bf:62:70:1d:36:d8:e6:81:55:1f:8c:5a:91:61:
6c:2e:5c:38:b7:54:be:cf:7b:0e:a3:9f:36:d9:2c:83:95:22:
d1:37:24:25:0c:6e:0f:2f:83:4f:0a:5f:c5:e9:a0:b0:9a:5b:
2f:67:1c:b6:60:56:ad:de:8f:3b:90:0b:6e:15:71:08:12:14:
1a:4d:80:f8:8d:98:de:6c:88:b3:2e:60:b1:57:af:40:71:d2:
66:05:c6:c5:3b:5e:6b:81:12:9b:d8:ac:fa:05:94:a1:98:9a:
12:69:a9:91:cc:5b:f0:10:a4:ac:f2:3d:73:0e:50:9b:af:24:
02:d2:72:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:49 2025 by rpki-client