Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json)
Hash identifier: HeBXAvuxNiu6ke128gIm+VewC+tjoNjQH81TBhFj6Hc=
Subject key identifier: C8:49:E9:33:77:7E:11:39:A9:85:48:3F:66:21:F1:5A:3A:62:E6:5D
Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
Certificate issuer: /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Certificate serial: 0198D661822FB32FAF6F503626052E830932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
Manifest number: 0A56
Signing time: Sat 23 Aug 2025 10:02:51 +0000
Manifest this update: Sat 23 Aug 2025 10:02:51 +0000
Manifest next update: Sun 24 Aug 2025 10:02:51 +0000
Files and hashes: 1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: YQAfcIUikhSlugT9qp3wEfpkGYxYsCY2DwlJUXZlnto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:82:2f:b3:2f:af:6f:50:36:26:05:2e:83:09:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Validity
Not Before: Aug 23 10:02:51 2025 GMT
Not After : Aug 24 10:02:51 2025 GMT
Subject: CN=c849e933777e1139a985483f6621f15a3a62e65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:86:c6:f2:20:34:34:f0:d7:8b:fb:a7:bb:
24:2c:d2:35:65:84:14:09:a1:48:2e:a0:d8:fd:83:
a1:b7:ed:44:a2:a0:e4:be:53:48:a4:35:f5:3d:ed:
70:8e:03:d8:60:75:30:fa:4e:d8:7b:18:4a:8b:3e:
f1:97:a8:92:6e:1f:05:05:c0:3e:c2:a3:5b:35:03:
6f:73:65:37:88:bf:bb:db:b8:cd:45:fd:df:ab:e1:
97:dc:0d:b8:cf:fb:02:2a:c7:34:3d:d0:f8:23:6d:
47:66:47:22:ad:68:1a:41:ed:8c:90:16:aa:c4:74:
93:38:89:17:a0:e3:2c:89:31:0a:08:3e:a7:8d:2f:
15:e5:a4:89:2a:5a:1a:3e:89:a3:3c:5b:04:05:04:
7d:1a:a6:09:f4:a3:54:2d:fd:96:49:56:83:69:a7:
ed:93:d2:11:a4:ef:b2:b0:21:15:57:d1:3e:60:70:
dc:4f:d6:c0:b8:2c:48:37:5a:9f:27:ed:3f:6a:34:
d8:88:48:12:0f:b4:47:56:4d:62:67:07:22:d5:d0:
86:df:1d:68:3e:02:e8:31:59:f3:82:5f:f7:71:79:
c2:d6:c9:94:99:b4:34:e0:53:fa:82:5d:da:8e:f2:
b3:c9:a4:52:29:13:a4:72:cb:2e:5b:80:8c:00:51:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:E9:33:77:7E:11:39:A9:85:48:3F:66:21:F1:5A:3A:62:E6:5D
X509v3 Authority Key Identifier:
keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:51:7a:d3:da:53:b9:b0:e7:77:04:39:50:00:04:a8:12:c1:
d4:9a:6b:94:49:52:a5:48:c3:b1:19:25:cc:3f:79:8a:27:50:
47:10:18:47:82:6c:2a:ef:8d:5f:75:16:5a:2b:7b:0c:30:61:
25:18:92:18:84:18:50:aa:46:fd:7d:52:2c:f5:55:35:ee:1c:
14:03:ea:1b:27:32:d1:a7:37:41:1f:29:1a:22:27:86:ff:e6:
d9:ab:66:fb:1a:17:29:fd:c1:55:0e:00:58:4a:34:07:ac:c6:
5d:2e:58:66:e9:05:af:75:1c:ab:68:83:55:eb:b0:49:72:13:
80:91:cb:e5:a3:36:e2:88:db:e8:b1:d7:ce:92:89:59:fd:6c:
5f:85:eb:7e:50:eb:61:95:33:dc:24:49:27:54:82:13:97:26:
e2:cd:92:68:38:f7:45:60:10:a4:90:5c:b5:46:68:25:16:54:
a7:63:94:50:5c:83:3f:f7:79:55:ca:2a:7b:af:e2:25:32:fa:
db:83:06:f0:ac:dd:89:b5:ad:fe:cd:00:a7:11:c5:46:43:4e:
d8:c0:fd:4e:63:2b:fa:d7:1f:a3:1c:97:51:46:6d:bd:c4:20:
fd:05:92:e5:3a:f2:61:7c:54:63:80:1d:e5:c0:8c:bc:2d:c6:
07:c7:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:30 2025 by rpki-client