Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
File: xsfkNpOlMtPW70EYbXDXpsVfut4.mft (raw, json)
Hash identifier: MFej2BweYpRf4kHKWxVMF5W6GSHi4wwFJtH3nRVmESA=
Subject key identifier: 06:89:A5:C4:20:91:C5:21:0F:5D:B7:3C:87:4D:E5:81:7C:D2:FA:45
Authority key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Certificate issuer: /CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Certificate serial: 0198D54E81291F8D486147212FBB27D36FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
Manifest number: 11D7
Signing time: Sat 23 Aug 2025 05:02:28 +0000
Manifest this update: Sat 23 Aug 2025 05:02:28 +0000
Manifest next update: Sun 24 Aug 2025 05:02:28 +0000
Files and hashes: 1: xsfkNpOlMtPW70EYbXDXpsVfut4.crl (hash: fr8KPRQTH/F16GVBy/YHTE31bohfL/s2PJ4juRrwnkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:81:29:1f:8d:48:61:47:21:2f:bb:27:d3:6f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Validity
Not Before: Aug 23 05:02:28 2025 GMT
Not After : Aug 24 05:02:28 2025 GMT
Subject: CN=0689a5c42091c5210f5db73c874de5817cd2fa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:62:4d:57:3d:06:10:61:b4:f0:52:ac:f2:
a1:a0:68:4f:ae:0d:41:0c:f2:33:ec:10:5a:93:dd:
e4:91:a1:2b:c5:85:14:c8:ad:61:36:f2:13:3c:1d:
fc:b7:7f:69:76:8c:1c:3d:df:60:49:19:10:de:36:
60:6c:a0:0d:a0:d1:89:f3:ad:ef:7c:cb:96:ba:03:
4d:83:75:ce:75:5c:70:d6:b6:3e:66:8e:66:04:3e:
d6:df:22:04:eb:7f:62:71:0f:75:60:c8:61:2a:31:
db:6e:39:fd:be:0d:17:9f:a3:a8:4e:48:7a:b5:55:
9f:12:38:64:d6:28:00:fe:dd:a7:c4:9c:dd:c0:59:
fe:a4:3d:bc:1e:7e:93:5c:d7:ca:9a:d6:ef:a6:d5:
ca:ff:0d:46:f1:c3:a5:4b:bb:a5:9a:38:5c:91:f2:
f7:e1:35:79:23:76:fd:9d:34:20:46:a3:be:e1:3b:
50:d8:92:79:ed:3d:7e:f2:25:db:86:15:db:e7:c6:
82:d8:42:37:22:fd:a0:ac:64:99:5a:cf:df:6f:eb:
eb:13:c7:93:af:9b:10:93:7d:cc:3a:f1:eb:5c:ce:
af:2c:c1:4e:1f:e1:ec:16:29:69:4f:a5:ee:25:fd:
c0:34:9d:e2:ad:94:b7:95:28:6e:0d:55:7a:98:f3:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:89:A5:C4:20:91:C5:21:0F:5D:B7:3C:87:4D:E5:81:7C:D2:FA:45
X509v3 Authority Key Identifier:
keyid:C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:39:50:51:e9:e5:24:64:0a:7c:07:68:be:b8:b6:f0:39:4c:
fd:fa:93:ad:81:87:dd:2f:ae:6e:98:df:73:01:59:56:e6:b2:
48:ae:95:26:21:18:ca:f9:3a:52:49:d7:e6:e6:9c:f0:54:36:
36:29:bd:ce:1b:f3:aa:54:1c:61:ac:df:bb:44:02:35:73:4a:
a2:86:20:78:6c:f5:53:e5:51:a0:5c:a2:d5:ab:50:b4:ed:38:
f4:6c:ba:33:cc:9f:d2:ce:9b:6c:87:93:e3:5c:86:02:0e:d2:
88:f7:c6:51:25:12:17:ca:86:7e:e8:07:7d:15:ac:4d:a0:a5:
b8:9f:29:b0:41:5f:6d:f2:3b:a8:b6:8a:ef:a4:69:f1:bd:ea:
18:6d:3d:44:33:65:6a:bc:c2:92:bf:83:ad:03:10:0b:7b:3b:
94:38:79:ac:77:93:89:8f:08:6a:6c:4c:44:a9:f9:9c:0f:f0:
32:52:84:f3:38:a8:e6:0b:c9:37:da:8a:89:88:54:f6:80:01:
3e:43:dd:84:a8:73:be:2b:12:ef:79:37:9e:84:5c:25:a7:01:
65:46:29:c7:b6:97:e6:c6:46:21:bb:04:81:79:71:b5:f3:02:
d2:dc:49:04:11:54:3c:31:60:ca:4f:bb:62:ec:5c:ef:f5:86:
da:14:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:01:49 2025 by rpki-client