Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier: KUn4lDVQ3ccsgHA1ysrMRHNY0I99sRDQ470Z1MFJtGs=
Subject key identifier: 02:C1:B2:8E:2D:B0:9B:64:14:F7:F7:86:93:6D:6F:44:D7:A9:83:FC
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial: 0198D58375102214A78FFB66D14EE1530A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number: 0212
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: +Aty8VNrpV8CFHfEXlE6kbMUtiMBHz+sJwOh1qbYgXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:75:10:22:14:a7:8f:fb:66:d1:4e:e1:53:0a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=02c1b28e2db09b6414f7f786936d6f44d7a983fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:68:a1:7b:c2:94:fd:7d:fe:5a:57:79:3e:
b1:73:48:ff:19:49:f7:ca:90:11:48:a5:0f:3a:6a:
ea:e1:92:f5:a6:60:42:15:4a:34:16:69:ef:d4:3e:
1d:06:7e:90:f9:01:66:cc:cf:0c:47:4f:34:65:8d:
87:1f:56:ae:8e:b4:e5:2e:70:04:b6:fd:14:ad:c1:
5e:6d:44:24:48:1d:9e:1b:c6:ac:20:77:05:dd:5e:
0e:83:e9:8f:fb:d8:6e:d3:83:24:5e:04:49:c8:a3:
31:fb:af:57:61:e3:43:43:b6:f6:4c:30:c8:0b:9e:
41:9a:e0:5e:fd:78:68:72:f0:dc:7d:5c:d9:6c:fa:
b8:e7:b5:41:9f:20:e9:b2:21:5a:b6:46:bd:7f:06:
23:c8:c7:08:12:59:69:93:ea:9e:9a:06:bf:45:77:
d3:51:3e:72:56:58:41:c4:d3:c0:2b:9c:94:09:59:
87:70:62:42:76:e0:39:ab:18:2c:54:8d:55:21:bf:
ca:d1:2b:e5:5c:c4:6a:72:89:33:82:b8:85:03:e5:
a6:54:30:99:87:47:84:1c:7b:eb:5d:45:d0:e6:1a:
26:63:c4:f1:91:f6:e8:de:30:cc:3b:76:80:8d:b6:
e6:07:c3:83:ae:78:82:63:f7:dc:2a:b5:dc:2d:93:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C1:B2:8E:2D:B0:9B:64:14:F7:F7:86:93:6D:6F:44:D7:A9:83:FC
X509v3 Authority Key Identifier:
keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dd:ae:42:4f:42:a4:2e:7c:a6:8a:b7:d6:d6:86:9c:b5:e9:
59:7c:07:6f:20:7e:67:ff:7d:c4:dc:28:3b:bf:b3:56:af:f3:
ac:0c:51:4a:89:bf:62:a4:74:ee:aa:73:19:e6:87:20:b3:e6:
13:49:93:99:ff:6c:7c:e4:21:96:c0:9d:c1:b2:86:a1:0c:75:
6e:66:be:32:1e:7e:b0:e4:1d:06:58:5f:f3:bf:34:b6:cd:3f:
0e:52:32:a0:0c:68:2c:51:10:03:24:c1:07:ec:b0:68:e5:ae:
da:7e:e8:64:71:19:50:16:44:57:70:2c:80:22:8e:94:b7:c8:
4f:cb:41:7a:2f:57:00:9d:4f:02:a2:a6:60:eb:6f:eb:1c:f9:
d1:cf:be:b1:31:8e:ad:27:2e:33:1c:56:c5:16:40:a5:e7:bc:
87:96:47:eb:bb:23:9f:a6:19:29:b0:62:d3:38:f0:12:26:cf:
b8:25:02:b0:c0:b8:06:75:7a:89:00:7e:a9:e6:27:c5:0d:b2:
05:53:27:a0:38:a0:7b:01:e9:70:91:eb:a6:0d:f3:a4:23:19:
d4:65:2b:d4:74:96:49:34:43:06:1f:19:22:cb:2c:77:31:19:
d2:01:e2:3e:64:22:f1:25:8f:2a:38:21:6c:fd:35:64:13:2d:
d5:6f:ec:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:10 2025 by rpki-client