Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier: qI+mnwCONDPlUmjZX3lGTa+gCq0M9QlAjemKNFRV47Q=
Subject key identifier: F5:1D:FD:90:83:C9:22:98:E4:13:9A:EA:1F:AA:E9:38:40:6A:0C:F4
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial: 0198D6CD1E3E1702CA820B0D7C39C045C614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number: 0F4A
Signing time: Sat 23 Aug 2025 12:00:23 +0000
Manifest this update: Sat 23 Aug 2025 12:00:23 +0000
Manifest next update: Sun 24 Aug 2025 12:00:23 +0000
Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: gxJd9Mt7+8bua7DQ7fcRb5oyYYl89WEsHp6A2SyonbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:1e:3e:17:02:ca:82:0b:0d:7c:39:c0:45:c6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Validity
Not Before: Aug 23 12:00:23 2025 GMT
Not After : Aug 24 12:00:23 2025 GMT
Subject: CN=f51dfd9083c92298e4139aea1faae938406a0cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:be:6c:80:85:09:fb:70:37:f4:bd:20:90:2d:
b7:08:56:32:0b:67:f8:a2:51:0c:3b:a1:b4:fb:79:
a5:e2:f0:78:ef:d4:28:2e:d6:45:c4:0e:d9:0c:c1:
ed:d1:b5:34:86:e5:57:61:54:2e:13:83:35:3b:aa:
83:a2:7e:be:c7:4f:2a:6d:7f:87:0a:a8:87:ec:4f:
a8:29:2c:b3:7d:c2:ad:c9:3b:56:58:bc:8a:a4:b5:
c4:9c:13:95:c4:bc:df:4d:39:d9:1f:19:72:27:a7:
eb:a4:4b:ba:15:d5:d8:39:5e:fa:9a:23:d4:13:c4:
e5:00:95:87:4e:42:23:1b:db:d6:2d:39:d1:49:d3:
4b:4a:be:f7:71:74:ed:5b:86:35:f1:ab:b5:09:0f:
63:50:4a:de:de:81:a2:5d:40:54:96:82:d7:ff:e2:
4c:ca:8f:a4:ac:0d:a4:38:49:2e:eb:cb:03:12:81:
ed:59:fc:fe:af:32:94:f1:53:7c:b7:50:6b:0b:be:
f1:75:ad:d1:26:bb:00:cb:8c:17:14:5b:8d:e4:51:
30:7e:e2:2b:7f:98:56:00:0a:80:f1:95:8b:c5:77:
87:08:82:14:70:e6:3a:c6:6c:57:6a:aa:1f:90:69:
1f:b5:2c:98:27:17:af:6e:c4:f3:23:21:31:82:9f:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:FD:90:83:C9:22:98:E4:13:9A:EA:1F:AA:E9:38:40:6A:0C:F4
X509v3 Authority Key Identifier:
keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1e:a5:88:44:0f:10:76:e2:1f:b5:16:f2:ab:10:a1:fc:17:
bd:78:9d:ea:c3:a8:ed:02:94:34:d1:b6:b4:40:0f:c7:dc:1c:
b9:d0:b8:78:60:69:1b:eb:12:de:c3:32:b2:db:20:43:b0:cd:
e1:bb:e1:3c:d1:8e:9e:d7:f5:e5:2a:15:f5:c7:1f:c3:49:81:
6a:77:01:a6:f1:ce:5a:03:a8:ac:29:7a:9b:1f:09:ca:5e:44:
4e:df:9b:94:43:16:86:4a:0d:4e:e4:99:b9:9a:ed:a6:5a:b3:
d1:a1:ad:e0:a7:18:31:5c:f8:85:f1:d0:d4:79:93:81:9d:cc:
32:58:6f:be:09:47:7b:a9:a9:dc:f5:77:08:70:9e:68:a0:e3:
5d:42:85:50:ae:13:49:83:4d:9d:9d:09:cd:cd:75:27:76:e4:
2b:47:02:7a:ec:92:df:be:17:cc:d5:e1:4a:5c:73:35:c3:ff:
b3:1b:18:62:f5:d4:7a:57:7c:ef:fe:30:03:25:2b:b9:2e:95:
46:37:a8:59:1b:1e:98:c5:e8:2f:8e:4a:c2:48:87:ff:89:9e:
b8:2a:a2:1c:56:46:94:02:32:03:a2:73:1b:f4:48:db:cf:2c:
da:14:0f:03:e0:55:51:9d:64:cf:44:4e:9d:ca:8b:0a:ca:6e:
8d:cb:f2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:24:12 2025 by rpki-client