Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
File: xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json)
Hash identifier: Y3gjfqVg/I4IJG7WaO8iAYdBdEhTGKuDLxVu+jzJmf8=
Subject key identifier: 3F:91:B6:20:12:71:5C:02:EB:74:C7:2E:A8:42:4D:B2:49:B0:F2:F2
Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
Certificate issuer: /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Certificate serial: 0198D54E5B0042BF96865190E05BF0174064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
Manifest number: 0446
Signing time: Sat 23 Aug 2025 05:02:18 +0000
Manifest this update: Sat 23 Aug 2025 05:02:18 +0000
Manifest next update: Sun 24 Aug 2025 05:02:18 +0000
Files and hashes: 1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: fdDE1FHLzk1VlxAaBZ1MZxxbxazYU6b/en59r8xPaBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5b:00:42:bf:96:86:51:90:e0:5b:f0:17:40:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Validity
Not Before: Aug 23 05:02:18 2025 GMT
Not After : Aug 24 05:02:18 2025 GMT
Subject: CN=3f91b62012715c02eb74c72ea8424db249b0f2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:be:5f:1b:48:a3:34:1b:03:81:08:f3:96:
47:28:47:30:e2:b9:2c:cd:a1:b9:d6:2a:97:91:fd:
66:7b:7d:13:ed:42:39:c0:24:b5:3f:fa:71:ec:ee:
6e:dd:e7:c7:47:09:16:aa:0e:4b:60:b6:35:d2:df:
9e:e6:7d:19:cd:54:1b:c0:49:c1:1a:42:0e:2d:d7:
0b:39:22:2d:ea:9c:ea:a0:8a:6c:6d:e6:1d:e2:50:
b3:20:55:c9:96:4a:df:30:1c:88:d3:60:76:1d:ff:
2e:fd:54:9b:a5:23:73:ae:d2:48:20:69:cd:a2:4a:
00:0f:2f:8e:11:f8:97:e3:e7:84:7f:5a:d1:fb:2e:
a5:a5:b8:97:59:2a:9f:44:02:8c:11:cb:b5:f2:5d:
c9:32:5d:b7:41:a9:8f:41:6e:67:57:f6:6d:23:6e:
a6:1a:dc:0a:64:a2:a4:07:2d:32:32:29:5a:73:35:
8c:cd:25:95:a8:45:21:4d:78:11:52:91:75:eb:41:
a1:44:47:37:0a:5b:33:77:96:b9:cc:01:73:2a:25:
d9:45:d9:40:30:8c:f0:03:c5:25:3c:84:c2:b3:d1:
e6:e9:4e:8c:93:6c:e0:3e:d4:d4:c0:b3:26:52:08:
17:ee:6c:c5:2d:4c:b7:12:84:c3:0c:d7:7f:b7:78:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:91:B6:20:12:71:5C:02:EB:74:C7:2E:A8:42:4D:B2:49:B0:F2:F2
X509v3 Authority Key Identifier:
keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c0:47:02:19:5f:e9:bd:bb:c3:52:24:3a:f8:a7:e4:59:cf:
3c:14:b4:47:d9:15:77:e7:48:d0:c9:f5:3e:57:ee:57:08:c4:
d5:04:a9:7f:fa:3c:13:a4:4e:e8:d4:69:eb:e7:4c:56:1c:fb:
f7:03:4e:d7:70:51:b6:eb:ff:e6:b6:0a:83:58:7c:81:b7:58:
26:43:37:72:2a:05:6a:2e:d7:bd:6d:a8:30:e1:0c:66:7a:01:
f2:43:23:02:5b:46:b8:c7:a9:4c:67:6e:06:1d:8f:e5:97:76:
5a:4f:5b:da:53:95:8c:69:a3:0b:88:78:98:34:a7:92:72:09:
d6:64:fe:e8:76:7e:67:f2:7c:57:83:01:fc:94:84:fb:2b:c4:
5a:db:61:80:b2:f5:e3:7b:1d:0f:ba:7a:1d:4f:8a:98:f2:2f:
f4:62:35:6c:57:74:da:51:a5:91:01:8e:7c:08:b2:05:f8:91:
94:8f:8c:4c:bd:ea:8a:9d:19:36:db:f3:4c:f2:be:ff:0b:e0:
d0:ac:88:65:9e:cb:78:11:06:5f:b9:3f:d9:21:8e:21:51:51:
6f:06:44:02:6d:f8:be:85:fd:af:5c:a7:4c:e2:1d:25:f7:4c:
f9:18:0b:64:85:1a:d4:82:63:57:88:f6:94:89:45:69:e5:08:
ed:ac:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:56 2025 by rpki-client