Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier: E9wyq0rTkEKDvJdYQzE+nqn4xalVfn7EtUcqNlD5dmY=
Subject key identifier: AC:EA:2A:E9:F3:68:4C:14:5E:A9:54:83:8E:D0:E9:B4:74:79:23:28
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial: 0198D705A580FEBD8AF5C58FAAB9EBAE1A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number: 0109
Signing time: Sat 23 Aug 2025 13:02:07 +0000
Manifest this update: Sat 23 Aug 2025 13:02:07 +0000
Manifest next update: Sun 24 Aug 2025 13:02:07 +0000
Files and hashes: 1: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: +xCfFiiQWDduGwkal8i8SFayZWw33AKEgqyjrZnhEWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a5:80:fe:bd:8a:f5:c5:8f:aa:b9:eb:ae:1a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Validity
Not Before: Aug 23 13:02:07 2025 GMT
Not After : Aug 24 13:02:07 2025 GMT
Subject: CN=acea2ae9f3684c145ea954838ed0e9b474792328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:61:ab:79:7c:70:41:20:1e:52:6f:fa:a8:
d5:2e:03:01:53:11:a9:ac:c8:ac:ed:42:54:f5:6f:
dc:da:e4:2c:f6:7a:79:be:eb:c4:de:e6:cd:a7:c4:
75:9e:8b:0f:34:f1:ad:54:96:7b:0a:d3:5b:be:b6:
f0:44:ee:6b:27:49:d7:af:5c:16:f0:f9:dc:38:96:
0a:8b:90:ed:d4:2b:4c:fe:2b:32:8b:f3:0d:39:50:
4f:52:c9:ac:e9:72:5f:02:0e:6d:b0:7f:a9:18:d2:
19:ab:a1:9e:d7:22:11:9a:ba:dc:16:66:3a:b9:36:
98:9a:69:4b:8d:a2:29:fc:e7:41:96:c4:6e:5d:02:
e1:f7:6b:19:8a:fc:81:a6:bb:6c:ff:f9:bb:1c:50:
fb:a6:8f:e4:be:a2:97:f8:37:7a:15:84:4c:98:e0:
b1:90:a8:e8:63:36:13:b4:b1:b2:12:86:ae:d0:9b:
18:22:48:08:dc:50:1b:1b:1a:b5:52:cc:5b:e5:23:
39:70:dc:3a:a8:c2:78:86:2c:dd:1b:1c:3c:1a:7b:
57:c1:cd:97:32:e1:49:df:25:3a:a7:e6:ef:47:e7:
87:e8:af:73:3a:ff:a5:5f:9c:e2:d0:bd:51:8d:5c:
2e:d0:f1:02:fd:48:1c:cc:5a:a6:5e:43:01:ca:d6:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:2A:E9:F3:68:4C:14:5E:A9:54:83:8E:D0:E9:B4:74:79:23:28
X509v3 Authority Key Identifier:
keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:35:83:31:98:94:99:4f:17:11:1b:e2:74:e6:d7:e2:b2:23:
6a:bf:de:10:4e:c8:76:79:94:5d:b3:80:db:e1:5e:29:17:b6:
50:38:2b:b4:dd:35:6e:16:7e:e8:bd:60:97:f2:5f:68:ff:df:
93:34:59:45:41:67:d0:0b:c3:db:82:ed:fd:72:11:6e:0e:18:
89:78:54:bf:f5:42:ab:19:a7:d6:b4:eb:58:73:16:23:e6:e9:
69:34:18:04:dc:4e:22:a6:fb:b5:bf:e9:e3:b2:96:e7:7f:a3:
28:ca:34:7f:1b:ac:05:2c:60:3d:38:f0:d5:2c:35:25:cb:ac:
3a:aa:08:c6:46:84:97:f2:9a:b4:4c:c6:56:b0:7c:86:cc:ca:
81:f5:df:61:93:31:c5:96:cc:dd:19:ac:24:54:95:29:02:eb:
61:16:1e:41:1e:04:c4:5d:d0:24:c5:d5:2d:52:ba:6a:52:b6:
17:8e:22:19:7e:6e:ba:6b:6b:42:fd:b6:85:6a:b6:78:a9:f1:
65:6b:8d:9e:99:8c:ae:97:80:76:d3:0a:03:ea:6e:35:49:ae:
35:ac:40:31:96:b6:61:96:b0:f6:e6:21:79:67:ae:77:c1:6f:
8a:da:37:04:0a:2e:82:1f:61:7f:06:7d:20:33:bf:28:47:e5:
f3:3b:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:58 2025 by rpki-client