Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
File: Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft (raw, json)
Hash identifier: 19VtEoTdN6Blq3xCYMOiQf3SB4VjVTQ953a3T6n+31k=
Subject key identifier: 14:4D:88:AD:AD:51:DD:7F:DC:03:25:16:99:E4:00:AC:96:F4:67:8C
Authority key identifier: 5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
Certificate issuer: /CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Certificate serial: 0198D51629A0D0AC75F07964CC743D427E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
Manifest number: 1458
Signing time: Sat 23 Aug 2025 04:00:56 +0000
Manifest this update: Sat 23 Aug 2025 04:00:56 +0000
Manifest next update: Sun 24 Aug 2025 04:00:56 +0000
Files and hashes: 1: Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl (hash: vjgAicmQTlnxL2AGRYqqE3wrU8nnwDvuQGX91+kgPu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:29:a0:d0:ac:75:f0:79:64:cc:74:3d:42:7e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Validity
Not Before: Aug 23 04:00:56 2025 GMT
Not After : Aug 24 04:00:56 2025 GMT
Subject: CN=144d88adad51dd7fdc03251699e400ac96f4678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:e7:73:ef:f5:50:b0:32:23:dc:87:7f:57:
ad:47:bd:9d:a2:f6:81:29:c3:f7:bb:a3:6b:95:54:
bb:52:43:dd:c9:6f:cf:97:28:a0:6f:2d:9b:5d:e7:
a1:59:8f:45:10:17:d5:39:ac:75:df:7d:16:66:36:
d4:35:c0:13:4e:ba:72:3c:b9:cb:62:31:af:17:d2:
2a:16:20:b9:30:32:8c:82:78:e3:70:3a:57:ba:ba:
43:ae:7c:9c:3f:92:e3:5a:25:87:7a:8f:c0:54:ca:
ba:c1:07:62:2d:58:15:b9:b5:46:c7:cb:5f:fe:dd:
fd:d0:0b:68:de:4a:9f:15:66:71:06:42:d8:97:6f:
2f:0b:4d:36:1e:d5:26:fd:8c:06:40:d0:88:8b:2a:
90:ec:69:ba:0d:78:ce:63:62:13:f4:80:cb:f5:48:
90:16:94:79:ef:c0:94:aa:75:4c:8a:a7:a9:ac:d3:
f0:76:df:1e:76:a3:34:bb:26:de:85:b5:42:7a:5a:
18:b4:c9:89:50:65:d7:74:b3:5e:2e:f7:0d:9c:4d:
4d:94:93:9c:cb:e8:2f:c7:5a:6c:0b:d1:ee:46:3a:
a9:48:60:ee:b3:96:47:1d:09:4f:b7:5e:7a:d8:8a:
7a:a4:fb:5d:d4:ef:f1:0d:a0:32:52:51:00:77:0a:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:88:AD:AD:51:DD:7F:DC:03:25:16:99:E4:00:AC:96:F4:67:8C
X509v3 Authority Key Identifier:
keyid:5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1c:98:12:0d:b1:d6:fa:02:78:e0:62:2b:15:5d:1a:56:92:
5a:c8:71:6c:e4:a3:01:71:b8:28:09:84:ae:6f:a2:e0:c5:66:
51:b4:ab:59:62:e3:38:6d:19:9b:60:4e:9b:c1:48:85:72:47:
79:87:1e:fc:22:31:11:99:79:4f:f0:d3:a7:ec:1f:44:a1:5a:
3e:2c:5e:90:fd:a5:b1:39:88:34:f9:9d:0e:d7:cb:d6:32:8e:
16:72:03:f4:98:e7:3d:1f:df:c9:50:17:67:df:9b:67:c2:bf:
29:00:16:e3:a5:5b:d7:55:05:4e:3f:e6:db:b7:88:12:10:02:
43:c4:c6:08:ab:f1:3b:4e:76:27:13:06:32:d5:de:34:d3:3d:
60:19:1a:40:2f:d4:c3:ce:51:d0:f8:06:52:62:38:93:31:dd:
4c:96:a6:33:15:8a:41:00:17:37:67:c0:e7:2f:50:88:c9:a0:
d9:57:fc:43:67:39:4a:8d:aa:ae:5c:74:a1:de:07:1a:73:b2:
bf:a0:bc:2d:a6:46:99:55:ee:23:59:97:30:cd:e1:3a:5c:e5:
be:36:42:a8:f0:c1:13:29:b8:9c:0d:79:92:f0:15:2f:17:ba:
b2:b1:b6:aa:0c:e1:51:5b:b9:ab:60:a5:9b:52:49:33:cd:5c:
84:3b:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:12 2025 by rpki-client