Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: BghUvoOtxV9UgVqr85FxTRyHcrqPxow5UIW3MIsHBvQ=
Subject key identifier: 8D:2A:DB:43:A2:4F:FB:BA:A4:A8:24:C5:7E:D5:1D:01:3A:85:57:09
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 0198D73BA28F62ABE2FCBF40DCEDF8EBDABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 0325
Signing time: Sat 23 Aug 2025 14:01:06 +0000
Manifest this update: Sat 23 Aug 2025 14:01:06 +0000
Manifest next update: Sun 24 Aug 2025 14:01:06 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: DUFU/UJHAAozYLAKEaCyy8pG3VK2UWTNsxhMNxAw/iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:a2:8f:62:ab:e2:fc:bf:40:dc:ed:f8:eb:da:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: Aug 23 14:01:06 2025 GMT
Not After : Aug 24 14:01:06 2025 GMT
Subject: CN=8d2adb43a24ffbbaa4a824c57ed51d013a855709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:6f:35:68:0b:67:1e:af:45:1b:91:43:3e:
fc:db:d3:99:9d:6e:16:8b:d2:02:6b:12:47:1b:7b:
73:c9:29:2f:41:51:dd:d5:de:4c:5a:9a:15:26:74:
d4:bb:03:9f:8b:e4:f8:68:fb:16:23:03:2c:7f:bb:
4c:91:97:7c:07:2c:5e:72:ae:04:ab:55:89:ec:1e:
01:25:76:19:d8:7f:1c:95:ec:80:c6:52:98:15:08:
24:6d:d1:f2:9e:02:3b:81:48:2b:59:63:cb:a9:b2:
81:70:5b:e8:c2:62:b6:18:3b:36:db:02:0e:8a:81:
01:30:5a:38:ff:ee:81:de:48:65:00:d7:e5:be:1e:
14:01:53:c2:65:93:d7:9a:e6:de:6c:69:79:83:7b:
5f:5b:c3:ce:d9:e6:ad:28:ac:66:9e:10:59:32:c0:
4c:9b:e3:8c:4c:d7:e5:ee:cc:16:c6:fe:09:d8:a1:
27:9e:79:55:45:26:72:cf:70:c5:7e:c3:06:ed:6c:
86:24:f5:21:74:7d:8d:45:96:91:92:fa:91:84:42:
2e:f1:0b:02:68:2a:3d:e0:84:1a:5a:36:89:b4:2e:
f2:2b:19:5c:aa:a8:1d:02:52:44:e2:cd:a6:15:b7:
4a:24:41:a9:26:fa:35:f0:4c:a6:2b:cf:b1:76:54:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2A:DB:43:A2:4F:FB:BA:A4:A8:24:C5:7E:D5:1D:01:3A:85:57:09
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:73:c4:af:b2:75:46:7c:bf:08:b5:ea:1e:9b:92:98:b4:40:
69:84:cd:2f:37:14:ab:20:3b:a2:2c:73:ab:28:cd:f6:1b:ec:
7a:87:01:d3:63:72:2c:86:44:0f:ce:3f:3d:e9:b5:ef:e4:63:
17:d3:34:91:af:18:e3:b6:76:ab:d6:cb:e9:f7:9b:a9:1b:0c:
1c:20:fa:18:e5:c4:f9:40:6f:76:92:96:15:23:17:c0:f2:25:
f0:20:f1:9f:17:0c:3d:82:4b:09:cb:8a:04:0b:91:db:81:47:
54:45:8a:11:9b:85:7b:fa:eb:ef:64:78:e7:86:77:52:3b:91:
62:af:10:5f:d3:c2:2a:ab:52:b0:4d:93:aa:1f:78:91:61:2b:
cb:4b:07:98:4f:c2:0d:8b:0a:2c:ed:0b:ac:8e:f4:6c:2f:39:
f8:03:8e:31:60:af:2d:0b:7f:2f:da:bd:20:cd:d0:0f:d8:4c:
5e:c4:e7:76:93:f9:b5:e5:27:8e:a2:67:61:39:df:1b:5a:df:
49:0b:67:c6:d9:e6:ad:60:5a:1b:7b:05:1c:95:18:bf:2c:b1:
db:9b:df:c3:4c:9c:0d:e3:d9:28:44:e2:4e:c3:21:fd:a2:44:
03:17:d8:41:91:23:c4:57:15:91:f8:16:8f:02:49:78:96:6d:
3a:ca:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:17 2025 by rpki-client