Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier: aIKcig1Ir5O1OJwHeeVhv7Be2VC3IbytY4jxwdLCBbU=
Subject key identifier: A5:F9:D3:47:01:A8:EA:8C:AA:64:35:85:F3:7B:D6:18:A1:AE:8D:24
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial: 0198D5157835D52F843F2E7706F48C4B4B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number: 0859
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: H4vJ9cQ7ZkM6bSrvP1N+j6/z8XaqvpyX1DYbxWKuw94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:78:35:d5:2f:84:3f:2e:77:06:f4:8c:4b:4b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=a5f9d34701a8ea8caa643585f37bd618a1ae8d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:78:35:5e:fb:74:5a:d0:e1:01:1d:47:a6:
62:fd:ff:d0:a5:f8:d8:f6:d0:b6:c9:96:21:b2:87:
75:02:bf:c7:77:fe:c7:f0:6d:61:80:f0:cf:da:12:
3c:67:de:35:29:44:e6:ee:e0:fd:e0:c3:ea:a8:61:
f2:62:9e:cc:a6:ce:2b:d4:bb:74:b5:a9:ec:d6:c7:
07:71:7f:a4:01:54:41:0a:1a:dd:83:17:a1:27:12:
81:f2:0b:b3:0d:cc:2c:af:7a:42:6b:2c:e8:36:62:
89:9b:31:7e:85:4c:cc:71:42:ab:f1:80:f1:9d:81:
db:7c:9b:8f:b2:eb:8c:3b:39:97:d5:86:60:4b:5d:
25:27:ef:6a:a0:5b:33:48:73:7c:c8:17:3a:fe:3a:
bb:2d:b9:d1:9d:72:f5:d6:da:d3:ce:05:78:cf:17:
99:01:2a:51:01:3c:5d:8d:f7:fc:fe:73:d4:2a:ef:
8b:2d:5a:f1:dd:7a:66:ab:29:a4:d4:15:f6:d8:87:
c6:1f:f7:2b:50:2c:fe:e8:3e:6f:5f:66:0b:0b:e2:
ce:56:8c:2f:3b:68:4f:74:0a:1f:8c:28:e0:6c:c4:
a9:cc:a4:9b:c8:52:24:fb:85:f9:6a:8c:8c:ca:d2:
26:b0:23:ed:de:41:4d:f4:56:67:56:ad:5d:16:ad:
0b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:D3:47:01:A8:EA:8C:AA:64:35:85:F3:7B:D6:18:A1:AE:8D:24
X509v3 Authority Key Identifier:
keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:75:74:27:2e:a9:16:0f:f3:70:a2:cb:4a:7c:85:98:d7:99:
f1:fd:0b:e3:00:a2:c8:ab:ce:dc:f3:53:9e:90:45:28:f3:8a:
b9:f0:d5:84:02:19:5c:5f:de:86:99:ba:62:3f:82:6b:20:ca:
de:d6:39:d5:a8:7d:c9:21:72:19:d2:f4:8c:60:23:0f:1a:12:
e9:03:1a:ab:3f:48:75:c2:ff:71:2d:c7:a4:61:22:25:e6:52:
49:fc:56:a2:c1:92:0d:14:39:40:9c:fe:d1:a4:c6:96:a2:a3:
57:e2:12:54:ac:0c:4f:d5:da:ee:a5:8a:f0:f5:70:1f:7e:9f:
e2:3a:31:e5:7d:bb:50:e1:f7:fe:4e:a0:08:8b:f4:b4:9c:ea:
29:bb:33:c9:72:bb:c9:64:fe:a9:3d:df:e2:82:85:5c:31:cb:
b2:c5:bd:3c:e0:01:92:f3:3d:ab:7c:fb:fd:35:fe:6a:5e:4a:
b6:24:31:ad:55:f3:64:1d:8e:ed:f6:f3:97:18:72:99:e9:f1:
14:95:01:78:5a:a8:91:f3:d5:36:e0:72:c7:9d:ad:1a:db:dd:
5a:32:ef:e1:58:54:53:91:b1:67:f4:0c:1c:9a:45:99:09:a9:
ed:68:b2:51:fb:57:59:23:0f:fc:66:77:3a:e4:45:d2:cd:8d:
d9:1a:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:20 2025 by rpki-client