Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json)
Hash identifier: tcV5ynfHGC3li6bZYzn6El10gnGpeWJyuXVDluy/dmY=
Subject key identifier: CD:54:56:0B:D8:77:A0:56:E5:87:E7:F4:ED:BA:D2:BE:64:15:20:F5
Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Certificate serial: 0198D5157BF5B2AB97E2404957083970A82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
Manifest number: 081F
Signing time: Sat 23 Aug 2025 04:00:11 +0000
Manifest this update: Sat 23 Aug 2025 04:00:11 +0000
Manifest next update: Sun 24 Aug 2025 04:00:11 +0000
Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: z3Q/B8Ptc7vTAhRhTJ4/xomnefSnHSd6lkeUDHgKavk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7b:f5:b2:ab:97:e2:40:49:57:08:39:70:a8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Validity
Not Before: Aug 23 04:00:11 2025 GMT
Not After : Aug 24 04:00:11 2025 GMT
Subject: CN=cd54560bd877a056e587e7f4edbad2be641520f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:b2:dd:b1:c7:9e:7c:70:9b:8b:d1:cc:ef:
bf:f3:dc:9e:c4:78:18:00:cd:d1:c1:4d:01:14:28:
ec:d1:53:cb:a1:36:ab:01:3c:6c:0b:7a:7e:03:ca:
69:5b:70:a0:26:b4:f5:ec:86:c7:a8:31:b3:bd:e3:
f2:b3:bd:2f:48:20:55:4c:fa:7a:70:dd:e0:06:24:
7d:61:06:e5:d6:32:7d:22:fa:86:27:2c:2e:ce:cf:
64:09:1b:b9:b8:ba:a9:5b:a0:fb:6a:dd:ae:4f:2e:
de:90:83:b8:ac:a8:91:d3:fb:ac:6d:57:6f:83:82:
48:91:77:2c:ec:b8:e2:0a:01:95:43:b3:d0:3e:13:
db:1b:66:cb:45:df:4f:5a:73:76:c9:6a:7d:86:ca:
ad:40:68:41:26:6b:3b:95:12:5d:ff:ad:a2:7d:de:
8e:08:da:0e:54:97:ea:28:0b:8e:1d:ac:a8:60:2d:
63:e6:cf:ac:b2:ac:7e:8b:2d:35:8c:97:e6:ff:dd:
ee:00:63:c3:b5:f7:96:b0:88:bc:95:fd:51:a1:1e:
c4:45:6f:08:68:e8:9f:8d:53:03:ca:35:05:b4:d6:
2c:98:df:a4:03:63:be:89:74:6f:5a:87:11:4f:12:
e4:82:6a:40:7c:d0:47:47:bf:ae:b9:7d:f8:f7:69:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:54:56:0B:D8:77:A0:56:E5:87:E7:F4:ED:BA:D2:BE:64:15:20:F5
X509v3 Authority Key Identifier:
keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:af:df:59:e0:a3:7b:81:fc:9e:b9:12:85:1d:d7:16:9b:91:
5c:bd:3e:66:3c:47:ea:59:86:79:3d:b8:7a:19:04:1b:87:ee:
61:0c:b0:a8:da:c6:db:07:13:ea:5a:00:64:2c:ce:3c:b5:e1:
85:7c:79:d8:fe:cf:16:ef:cd:ff:a3:1d:b8:6b:72:92:35:74:
09:e2:1a:ee:83:b4:22:70:72:91:15:3a:a9:c7:b1:fd:ec:58:
a1:34:e9:ce:f9:da:8d:f8:f1:d6:a8:ce:10:97:88:e8:ed:e2:
69:3f:2c:a8:b1:00:3f:52:c7:f3:74:53:7c:d4:36:0d:3d:be:
47:fe:42:42:bb:7d:15:45:e2:58:dd:d6:8f:56:32:fa:77:9b:
15:a4:ee:3d:bf:18:03:a0:b6:e3:28:c9:c5:7d:d2:bb:19:66:
92:17:3b:e0:b2:c6:fa:06:c7:c4:2d:c4:7c:8d:f6:0c:6f:f2:
da:c6:10:ec:7a:cf:f7:c9:b3:bb:f3:e1:5d:d1:f8:10:ac:9b:
8b:9c:3b:78:7e:ca:0d:05:bd:3f:d1:f6:0d:0b:67:73:3c:23:
44:42:58:b0:b3:fe:0e:e0:1a:0c:cf:85:2d:b4:4b:84:95:4f:
41:b6:f3:23:f4:38:80:44:73:3b:e1:b8:e7:d0:c5:55:9e:e6:
bc:f3:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:57 2025 by rpki-client