Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File: xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier: 6pWwAluph3cd+vNR4rPZU6bHYzTKmItySXduEFecxJs=
Subject key identifier: 5A:55:17:EF:D2:D8:79:4A:02:D9:E2:8E:6A:CA:1F:F0:0E:B8:39:61
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer: /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial: 0198D705BE548BEC2355A611A4CF90F4292D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number: 0D56
Signing time: Sat 23 Aug 2025 13:02:14 +0000
Manifest this update: Sat 23 Aug 2025 13:02:14 +0000
Manifest next update: Sun 24 Aug 2025 13:02:14 +0000
Files and hashes: 1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: 0kvpGqXelI+GlE8rnf2AbytsEXPvY916vIqtjOWYsLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:be:54:8b:ec:23:55:a6:11:a4:cf:90:f4:29:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Validity
Not Before: Aug 23 13:02:14 2025 GMT
Not After : Aug 24 13:02:14 2025 GMT
Subject: CN=5a5517efd2d8794a02d9e28e6aca1ff00eb83961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:a5:43:4b:64:71:42:c8:4a:2b:f7:d8:d9:
bd:46:d3:91:38:7f:da:0c:89:35:6b:c7:34:e7:07:
b7:08:11:8c:58:07:46:11:59:96:d4:d4:7c:f9:d6:
fc:9d:a3:08:5d:12:99:82:e4:62:ca:6d:b0:eb:4e:
03:91:6d:2b:2a:42:36:28:19:95:a3:7c:74:16:6d:
98:a4:61:04:c2:fa:c9:a7:86:47:a3:aa:b7:75:62:
c0:90:92:15:bd:c7:5c:47:0a:d1:de:3b:f4:9e:dd:
5c:ab:ef:3b:19:7f:59:92:13:0c:17:2d:95:49:09:
0b:c5:72:60:4f:2c:ad:f9:5b:b2:6e:0c:fd:04:a5:
4c:e2:82:40:99:59:d3:b3:e5:6d:52:60:6c:df:32:
fc:f3:1b:ff:04:8b:48:48:e1:35:5d:fb:f9:88:53:
cf:30:d2:49:58:61:ac:6d:1b:b3:11:77:69:11:47:
d3:ba:2b:3f:a2:3e:c8:dc:98:20:7c:cd:00:b2:89:
d2:15:ef:8c:fc:eb:15:17:68:27:35:1d:88:ec:ba:
0a:9d:db:b2:54:48:2a:a2:91:81:8b:e7:b9:ae:b5:
a9:9e:06:65:6b:33:06:93:9a:21:1c:aa:37:4d:a5:
d2:4f:5d:e7:90:d3:7b:5a:cd:99:e8:a0:8e:66:8b:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:55:17:EF:D2:D8:79:4A:02:D9:E2:8E:6A:CA:1F:F0:0E:B8:39:61
X509v3 Authority Key Identifier:
keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a7:57:5d:99:84:1f:54:b0:7c:0c:84:b0:5a:5d:c5:77:74:
70:c1:35:48:75:4d:07:20:16:9d:b4:8d:86:60:fd:5d:e0:48:
96:6f:69:9d:b2:88:d3:fb:a3:e8:f2:54:f9:91:fb:00:aa:37:
a5:64:6c:eb:68:ec:3a:a7:9b:67:6f:ad:f4:61:30:78:e6:69:
b5:da:d9:a9:fd:0a:56:07:c6:89:37:e5:a4:18:f3:c9:58:2e:
d1:c4:f8:71:40:81:e7:9b:9c:41:41:4a:5b:9c:ca:a9:9f:95:
c5:1c:51:14:18:02:5b:fb:0c:0e:27:65:a0:ad:76:3a:94:8d:
fd:8b:b0:b2:b0:38:24:d9:44:ed:94:09:e8:0b:1d:49:43:de:
db:39:9f:12:93:66:da:80:72:27:d9:ef:e2:35:4d:ff:d1:f9:
31:04:8d:26:cd:67:3b:fa:2d:ce:b0:b3:4d:bc:67:e2:9f:3c:
54:96:0e:40:cb:17:32:d3:ad:91:88:1d:c1:fa:3f:28:5e:5f:
ba:97:9c:6e:f6:03:c1:eb:55:14:a1:f9:09:8d:80:81:d5:f0:
f3:96:ae:83:7b:28:16:d7:da:3c:f6:55:ad:5b:b3:8c:85:a6:
52:ca:c9:07:f5:b9:11:ea:41:5c:db:dc:88:32:22:e8:44:27:
e8:89:22:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:54 2025 by rpki-client