Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier: lnaDuR0PcfaQ/AnCm2HMkHcBiyvKDJVUbe4xrq7OEio=
Subject key identifier: 02:45:24:59:60:C6:66:4D:0C:48:50:E5:87:60:26:0A:79:96:E4:A9
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial: 0198D54E668A0A54AB03427DC51C3094BBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number: 114A
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: n/X9ZgAiimjcOQ96Bv7PPI6Z6//hp1f/0VWQZF80Qik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:66:8a:0a:54:ab:03:42:7d:c5:1c:30:94:bb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=0245245960c6664d0c4850e58760260a7996e4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:1f:b2:1a:ca:7d:ec:e7:f4:a4:e5:c9:5d:
5b:d5:12:77:47:8f:ab:b4:ad:c4:13:c2:a8:42:41:
61:ad:88:95:27:cb:26:05:0d:0c:d5:84:a8:15:f3:
a5:92:e8:95:a3:1e:22:d7:4f:93:3e:fd:1f:9c:01:
53:b2:09:b3:37:75:53:92:aa:b9:a7:17:4f:3a:5c:
ed:5b:62:2c:e2:37:20:fa:a8:c2:68:63:a8:78:44:
3d:4d:22:da:88:a2:b9:a6:54:80:ea:05:e8:26:08:
ae:da:4c:22:72:6c:3e:56:07:19:00:d6:06:0c:a9:
a2:51:5f:b7:90:c1:a9:5d:b1:4e:97:32:4b:83:1a:
f8:59:ee:31:2f:c6:53:8f:f0:8e:d7:d5:d7:f3:40:
b6:a4:42:91:a2:33:f9:3f:82:95:32:72:6f:b9:c2:
c0:a2:39:c5:41:21:98:0f:23:20:48:3b:1f:2e:ef:
33:cb:a6:af:49:4c:3d:19:ce:85:89:7d:86:bc:35:
6d:5e:d1:a8:30:0c:50:3b:3c:ca:9b:d6:71:82:38:
2b:aa:1e:b6:2f:ca:3a:aa:fa:b5:16:78:69:b6:cc:
30:1b:ed:e4:d2:9d:bf:4e:8e:2d:61:e5:c5:e1:78:
a6:71:42:dc:8a:46:08:ed:9f:c8:73:96:a6:4e:10:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:45:24:59:60:C6:66:4D:0C:48:50:E5:87:60:26:0A:79:96:E4:A9
X509v3 Authority Key Identifier:
keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:21:cd:59:47:a9:72:ff:a9:26:05:05:18:0d:e3:38:5b:34:
16:37:7c:be:97:0e:af:e2:0c:01:6c:65:9f:fd:51:b1:4f:33:
fa:e7:ad:f6:f3:d4:1a:7a:4f:3b:af:c2:2c:43:17:ed:6c:4f:
26:21:b2:ca:a5:a7:43:b8:2b:8f:4d:c1:fe:8b:50:1b:c4:2f:
f7:50:94:eb:eb:e8:33:59:0d:68:1d:17:b1:52:d5:75:94:a3:
85:b0:23:53:d2:6e:0f:d9:dc:e1:70:45:04:0d:aa:83:95:b2:
34:17:7d:a9:33:71:77:ed:52:40:5c:7b:f6:5c:d7:e2:a6:5c:
60:f4:52:84:07:4c:5c:9e:98:70:55:82:fc:a3:df:43:45:1f:
45:58:bb:03:86:09:08:96:4f:fb:0c:1e:00:fa:ea:2a:09:1a:
44:29:dc:43:43:dc:2c:6d:47:ef:eb:cb:a1:7c:a5:81:fd:a9:
d6:70:29:f2:9c:51:b3:d1:5d:06:f8:35:80:88:67:45:f5:de:
52:b8:26:b4:15:e3:18:0c:4f:25:bb:93:5c:6f:c3:62:8f:a9:
bc:fa:ef:15:2f:14:60:8f:c4:6d:91:f3:c8:cb:96:fe:2a:c7:
b4:4e:bd:02:79:19:49:af:3d:71:3a:94:58:a3:11:d8:30:02:
48:b9:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:23 2025 by rpki-client