Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
File: xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json)
Hash identifier: MNYzZX+PxANTU3b3xVm7OR0lmI94x2njxEjtvZzFZ+Q=
Subject key identifier: 8D:AB:24:A4:6E:4C:19:8D:B5:98:7D:F9:D6:18:98:46:6B:FE:5F:90
Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
Certificate issuer: /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Certificate serial: 0198D8511A6AB9F9B7BE41B51CD958408A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
Manifest number: 0DA9
Signing time: Sat 23 Aug 2025 19:04:10 +0000
Manifest this update: Sat 23 Aug 2025 19:04:10 +0000
Manifest next update: Sun 24 Aug 2025 19:04:10 +0000
Files and hashes: 1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: EL907MICZum9Xy2SjVvhGEGEDf3uEf4ARax/8XlUQw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:1a:6a:b9:f9:b7:be:41:b5:1c:d9:58:40:8a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Validity
Not Before: Aug 23 19:04:10 2025 GMT
Not After : Aug 24 19:04:10 2025 GMT
Subject: CN=8dab24a46e4c198db5987df9d61898466bfe5f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:87:cd:ed:77:d8:ea:7e:fe:52:a9:53:1f:
91:d5:79:6a:14:c8:d6:4d:43:74:78:19:c2:1a:48:
32:38:69:8e:74:06:03:43:d4:24:58:bd:f8:22:bc:
d5:b1:7d:cb:ca:d6:62:ab:5f:bd:cf:72:a9:23:55:
4e:38:46:e0:0e:5a:8d:a9:da:b7:75:ff:bd:fb:ae:
c9:cc:c9:55:41:8d:8b:b8:9e:30:bd:c1:70:5f:6d:
3d:fe:79:af:d4:a1:bc:bf:3e:3d:22:d1:d8:69:f3:
da:0f:5b:3c:bf:8b:5f:21:6e:70:1a:c2:3c:97:77:
c8:59:9f:49:df:28:2b:8f:3a:de:3e:f8:e0:bc:7e:
92:c9:ea:5a:35:f6:d3:19:6e:22:27:78:f1:f0:43:
de:34:18:ed:e8:1b:80:33:d1:f4:6b:7d:6a:ce:e7:
42:2d:88:a4:a5:d8:b8:34:88:3b:53:e5:6a:c6:9b:
8e:43:5c:4d:9d:c4:30:66:f4:c4:2c:ba:a7:d7:26:
05:62:f0:1a:1d:73:87:78:06:66:47:1b:02:11:8e:
80:e7:9e:c0:db:a1:01:db:6f:28:b4:89:85:99:58:
04:54:4f:47:bd:07:13:3b:e6:62:6f:71:6c:b7:c8:
33:88:f9:8b:e9:61:9e:7d:b5:0f:09:6b:6a:48:4d:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AB:24:A4:6E:4C:19:8D:B5:98:7D:F9:D6:18:98:46:6B:FE:5F:90
X509v3 Authority Key Identifier:
keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:dd:f5:8a:5b:71:55:d1:00:95:13:72:be:50:11:25:8a:1e:
33:0b:05:6d:ac:71:fa:55:94:23:89:11:17:10:73:36:2b:b1:
e1:1d:6c:11:38:e5:0b:34:7c:6c:32:19:84:26:ed:07:6e:b7:
5a:56:ca:95:68:76:7a:b7:f0:30:db:af:78:92:41:bd:d8:33:
1b:ac:e6:1c:6f:58:90:07:05:54:a5:82:34:97:83:bd:eb:f5:
28:1e:88:1a:f0:7d:89:2c:1d:28:8c:68:bc:e9:ba:9b:4d:df:
60:a4:5b:e2:17:da:29:78:82:5a:f3:36:a5:78:72:e5:de:63:
c1:60:32:d2:15:09:46:e5:5b:50:a6:f7:f3:dc:e2:35:ab:14:
b7:e7:fc:b5:18:cb:61:94:33:96:2d:1e:ca:1f:63:34:cf:08:
25:dc:8b:28:13:72:7d:2a:7d:d1:87:7a:79:e4:94:81:1b:f2:
d8:00:4c:94:7e:64:17:fd:c8:96:85:0c:43:df:b3:43:f1:10:
a2:3d:b9:f6:30:93:bc:b8:e7:b8:c5:ee:1b:f4:a6:48:6f:88:
3d:09:63:44:32:ae:fe:66:f5:bb:e3:4d:7a:5e:5d:85:45:e4:
7d:5d:30:26:2c:17:bc:4d:33:5b:b7:31:83:b1:c3:c6:0c:43:
73:bc:10:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:14:50 2025 by rpki-client