Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: f76qbcfGG4KTvkdmampN0xkKlRFlIPJ8EqjRms6luDU=
Subject key identifier: 54:E2:F5:60:E7:AA:1E:83:35:FB:C9:5F:8D:C2:77:78:5F:21:11:80
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 0198D6CD7E5486D891EAFA099D4191574A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 0364
Signing time: Sat 23 Aug 2025 12:00:48 +0000
Manifest this update: Sat 23 Aug 2025 12:00:48 +0000
Manifest next update: Sun 24 Aug 2025 12:00:48 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: D4t82V81PnvcAz6YLF7rBnzIQKMdCGlosaBJckriuSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7e:54:86:d8:91:ea:fa:09:9d:41:91:57:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: Aug 23 12:00:48 2025 GMT
Not After : Aug 24 12:00:48 2025 GMT
Subject: CN=54e2f560e7aa1e8335fbc95f8dc277785f211180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ba:23:4c:1f:a3:4a:ac:18:cc:47:4c:9c:3d:
7e:3e:ac:60:8a:85:0b:71:40:f1:9b:74:c5:fc:25:
a1:a0:ea:6b:8f:b7:68:d0:18:fc:30:c2:cb:39:7b:
58:c3:25:e8:34:5b:e8:05:a3:21:8f:53:f0:eb:69:
33:c6:b3:95:b1:9e:bf:56:2a:ec:a8:80:47:95:65:
e7:c3:be:01:b8:89:0e:96:3f:a4:af:36:3a:1b:4e:
23:91:64:7f:45:af:f4:a8:fd:3a:f8:3f:97:4e:ba:
21:f2:63:22:d4:70:39:eb:cc:cb:1f:a8:a2:49:93:
aa:db:d6:cd:69:27:41:45:dd:b6:51:e1:b7:c0:24:
01:f9:f9:c6:ad:51:85:85:c2:5e:f6:61:0f:d2:be:
e0:71:96:1b:62:34:b4:b1:f8:0c:25:c0:62:d7:b6:
63:2c:4f:66:a6:a2:35:ac:9f:c5:c6:f2:02:e5:9f:
00:f3:2e:9b:3e:bb:20:27:c7:a9:91:6a:41:fb:c9:
f8:13:cd:11:7c:6b:4e:fc:fe:96:2c:d3:aa:83:59:
c1:9f:29:de:1b:56:e0:91:9c:2b:85:42:a9:2b:4d:
84:5d:26:f7:6a:75:a8:bc:32:f1:30:f1:7f:58:c5:
61:71:e4:5a:38:80:c4:c9:ab:fa:da:73:06:39:c4:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E2:F5:60:E7:AA:1E:83:35:FB:C9:5F:8D:C2:77:78:5F:21:11:80
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:2f:da:93:7f:ca:c3:e3:09:b7:6f:6b:d1:b3:4a:3d:42:ba:
61:47:14:86:c8:2a:6b:9d:5e:e3:b8:80:cd:c7:fa:e0:17:21:
55:6c:e8:be:06:de:d5:b6:47:d3:8b:f7:ef:48:7f:1a:3d:a4:
6e:3b:29:f4:97:6b:ad:f7:d6:43:50:c8:73:d8:cb:c9:d3:86:
b1:24:d2:57:d0:28:fc:3d:b1:66:3a:ba:54:9a:90:80:15:f9:
f8:2c:68:71:91:87:f8:ea:7b:f9:fb:1f:e5:52:e8:68:04:d2:
3f:6c:8d:57:c9:91:55:d6:74:b3:53:c8:97:03:e8:72:d3:f0:
42:c4:5d:e3:91:fb:f9:d4:dd:c2:4e:10:3e:d2:bb:31:75:c7:
bc:73:0b:f1:cc:e7:e5:cd:13:b7:7e:f7:ae:19:f2:5e:0b:fc:
e7:7a:c9:ee:76:70:34:b4:a3:bb:93:a6:dc:11:45:fc:ef:bf:
71:ce:5e:af:63:03:b8:9f:ec:9e:67:c4:c8:88:d7:36:31:d5:
3a:e3:1f:4f:4e:93:18:79:ce:99:e1:bc:c9:4e:81:22:1e:05:
91:f4:92:64:92:ed:45:9d:09:78:78:4e:7a:0e:b5:4d:90:82:
0f:1a:b2:bb:88:71:58:94:14:31:71:b4:93:ab:25:ca:e9:b3:
b5:c2:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:45 2025 by rpki-client