Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
File: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json)
Hash identifier: UyCJxjWHw1WqC2ZZLlcuGMFuA2XWNrH4FGPRMrNqL+0=
Subject key identifier: 03:1F:F7:C6:8E:03:88:5F:B9:73:57:49:1C:05:BD:A0:90:5B:9C:B3
Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
Certificate issuer: /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Certificate serial: 0198D65F69622203A8558B34C3303CD22405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: z6evrPqH4I7w9JRd20Nzl7FLCzzs/ojSc3shN6fvySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:69:62:22:03:a8:55:8b:34:c3:30:3c:d2:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=031ff7c68e03885fb97357491c05bda0905b9cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:f4:ea:14:cc:ce:0a:03:4b:65:01:d3:ef:
7d:94:f9:16:06:6d:fd:54:d8:83:8f:e1:c9:41:2a:
bd:4f:32:8d:ae:3b:bc:e7:98:37:6f:59:d5:c5:b7:
c4:68:5b:3e:04:42:11:d8:4b:c2:12:f9:96:44:cd:
58:72:45:f5:de:3b:9e:31:8a:f2:b5:e1:5f:d8:f0:
1a:c7:ca:60:50:cf:6f:d4:cd:70:5f:0f:b4:75:86:
58:c6:12:bb:89:ed:e0:68:e2:dd:f4:0a:0f:68:91:
b5:a5:4c:06:3d:3c:df:2b:5f:4e:db:e7:f4:a1:20:
77:fc:64:d3:24:f8:1f:37:6f:5e:d2:d3:b5:51:70:
3c:20:91:f3:c3:07:b9:f1:21:67:36:65:b2:df:b8:
8a:68:94:d6:01:5c:dc:a0:d8:1e:5f:6b:4a:83:12:
51:cf:3f:6f:2c:1e:1a:64:db:7d:c2:70:6a:f9:89:
ef:ce:a7:a5:f8:0e:e0:8e:5d:75:82:e1:8e:4f:31:
49:79:29:11:9f:dc:8c:56:dd:e2:cf:c2:63:08:19:
bc:48:f4:c5:6a:a0:51:d8:33:4f:d4:06:c8:b6:de:
8c:d4:73:06:c3:fd:7e:03:18:9d:ef:15:8c:00:a3:
9c:93:27:a3:18:14:03:7d:83:68:bd:42:fa:3e:51:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1F:F7:C6:8E:03:88:5F:B9:73:57:49:1C:05:BD:A0:90:5B:9C:B3
X509v3 Authority Key Identifier:
keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d3:61:b7:20:75:eb:b8:10:15:33:82:e2:ef:7a:ac:0a:b4:
bc:ac:21:53:b1:32:0f:81:db:64:32:40:7b:cf:27:02:9a:7e:
14:96:e0:39:bd:8f:c4:00:a6:25:4c:13:7a:2e:a1:ba:96:5b:
cd:d8:d1:a6:48:6a:c2:e6:55:b2:bb:9e:5f:0c:22:ce:79:23:
9d:7f:28:16:84:bc:75:51:e0:32:27:43:d4:a2:fe:4a:53:23:
35:36:3d:b3:63:64:33:4c:79:71:75:e1:16:46:eb:ca:51:29:
61:1b:a9:a5:f7:9f:66:be:be:23:53:b0:ec:87:1a:8b:dd:71:
a0:66:97:69:24:5e:be:e6:7e:2c:6e:b9:ff:6b:e8:15:47:0b:
0b:57:e6:e3:c7:1c:c2:95:5b:2c:3c:53:97:32:cf:8d:cd:36:
a0:6c:3b:59:30:07:da:35:dc:60:ab:c5:8e:ec:84:6c:10:b1:
93:d4:f7:42:3c:0c:82:d5:51:22:88:dd:b6:ca:13:52:14:0e:
34:8c:97:7c:0d:07:1a:85:db:90:cd:32:38:dc:f5:40:e0:54:
7b:d3:9f:36:ef:98:11:62:cb:43:d8:f0:07:eb:64:23:10:88:
7c:cc:72:81:8c:81:fc:c9:be:51:2d:ed:af:39:6e:90:ca:e3:
55:43:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:30:48 2025 by rpki-client