Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
File: xwy87PJahmXDWnjIIdEes6ZCNiE.mft (raw, json)
Hash identifier: jyTXWSrwBxwIrxmYJI5b5NGF08FkF/SZ3sbCs86KYws=
Subject key identifier: 09:51:70:55:A1:46:5B:18:7C:69:E3:A8:97:E0:D3:A0:31:AC:42:EE
Authority key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
Certificate issuer: /CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Certificate serial: 0198D5BBE03A3B93B363081F78147ED8A13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: xwy87PJahmXDWnjIIdEes6ZCNiE.crl (hash: jNSoDL441dzBNMUbOf+kfEEBTnDK5b5tUgF6mrlprxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e0:3a:3b:93:b3:63:08:1f:78:14:7e:d8:a1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=09517055a1465b187c69e3a897e0d3a031ac42ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:eb:da:4a:b6:dd:3e:a1:2b:3d:b3:ba:5a:
c8:a4:91:47:1f:cb:ae:33:0a:e6:30:67:c9:d9:f1:
e5:3d:1a:dd:fb:d0:67:d6:7f:bd:d3:d4:67:c2:8f:
40:b2:ab:0e:8a:20:04:d7:f2:51:f0:ff:40:81:b5:
82:b8:c0:ee:a9:03:39:14:cd:bc:42:2b:cd:c2:d4:
20:ca:54:34:3b:60:6f:62:d0:08:77:df:76:cc:97:
00:78:94:d5:e8:32:ce:7c:da:42:f0:c8:e0:0f:89:
67:d1:0c:a4:57:e1:19:d4:08:ee:f1:73:cc:8a:6c:
17:09:60:7e:9f:76:c3:c7:13:84:dd:30:7d:e6:b1:
a0:d4:9f:ce:df:f0:ac:83:d5:13:e4:f6:a0:a7:6e:
80:cf:49:65:45:48:a8:c1:19:0c:e8:77:2c:03:be:
08:f6:77:59:c2:9b:64:f3:1e:93:6b:26:ff:d1:8a:
1a:2b:c6:20:7d:b3:71:25:91:9e:d1:83:69:ad:f7:
dd:ed:df:4a:e1:51:96:79:20:2e:27:2a:20:a0:8f:
0b:b7:ed:6c:e5:e2:16:f2:42:d2:a1:23:e0:e3:29:
0a:51:9b:89:f9:13:95:e5:82:85:8b:53:d7:ce:c9:
e5:ec:d4:04:5e:13:f9:d3:d2:40:7c:a9:df:b9:a4:
82:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:51:70:55:A1:46:5B:18:7C:69:E3:A8:97:E0:D3:A0:31:AC:42:EE
X509v3 Authority Key Identifier:
keyid:C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1b:a3:22:59:c7:f1:60:d5:5f:a4:cd:1d:1b:1a:85:94:e8:
2c:36:8b:5d:75:61:b2:50:39:60:7c:48:20:ce:e4:00:31:a9:
e3:cf:66:63:14:7c:54:54:c8:cd:8c:df:77:69:ee:1f:04:25:
36:b3:aa:4e:72:5d:75:d4:f8:5e:11:f5:9c:f5:f0:4e:e4:fe:
d2:1c:7d:91:30:f7:14:2e:54:5b:9d:15:3a:37:c3:00:70:df:
96:41:eb:8a:4d:5b:df:e8:be:57:59:5a:77:ea:f5:6c:ed:a5:
e0:b3:d0:d6:7d:22:4f:03:cc:5d:65:ce:48:5d:d6:72:48:1a:
7c:c8:e3:f2:51:0a:71:db:7a:3b:9a:cf:de:db:e5:2e:2e:76:
35:88:82:72:c0:7b:8f:36:35:af:a3:1b:34:e5:4a:da:59:a4:
26:ec:f5:54:7c:3b:00:f7:f0:e3:86:e2:88:6e:f4:4d:c7:b3:
ee:83:84:d7:9a:de:9c:54:f8:5d:9a:50:8f:53:91:28:83:4f:
e5:ff:f5:0f:cf:e1:f7:1d:5b:a2:ab:3f:87:d3:ad:19:67:37:
0f:d8:67:36:63:bb:e6:16:22:18:c8:9e:09:b0:2e:47:d8:05:
d7:ec:d7:d2:50:f7:16:aa:13:77:28:1b:4c:c9:04:2e:e2:00:
40:2b:ce:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:27 2025 by rpki-client