Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
File: xIzPWOSy4trdSoSDPAZ87iuXRek.mft (raw, json)
Hash identifier: kVIcYSdTra6BPuZUuGj+P2NjIYSvROQwZNFbxYRP5KA=
Subject key identifier: 89:C3:0F:E9:C2:D6:19:C2:95:80:90:0F:F7:24:27:2F:58:94:30:E5
Authority key identifier: C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
Certificate issuer: /CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Certificate serial: 0198D5BC1DE70DCDC21BA5BAD2EBCC8506FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
Manifest number: 0879
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: xIzPWOSy4trdSoSDPAZ87iuXRek.crl (hash: 9lq3+FNRN6l8pEtHQi+HwIdgV58Caw+J8Pi0Lj2x18U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1d:e7:0d:cd:c2:1b:a5:ba:d2:eb:cc:85:06:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=89c30fe9c2d619c29580900ff724272f589430e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:9f:2b:64:ab:2b:c9:6a:15:52:5d:bb:8e:
eb:3c:d9:ed:0a:6e:21:82:f3:2e:a7:c9:09:7e:4d:
f0:11:23:71:9f:e3:ae:09:67:73:47:16:0f:29:dc:
89:c0:b7:40:4c:52:86:ee:e0:0b:fd:58:67:06:ee:
18:1f:3a:96:9a:4c:25:ec:e0:0e:45:50:96:45:89:
b3:d8:dd:b4:d3:49:b6:8c:df:04:0e:51:26:96:7d:
63:14:f3:1b:51:85:f6:d4:f4:f8:14:56:42:37:02:
aa:f6:fa:24:11:63:c6:35:64:e9:96:7a:e4:78:77:
d9:66:62:a2:2d:87:54:b9:fe:57:aa:b4:d9:3d:d5:
6f:c4:1e:a4:95:e0:49:d1:33:4b:13:77:c6:f3:8a:
8e:ea:a1:2e:fd:45:4c:48:62:f6:52:96:c7:b5:ab:
f3:b0:aa:79:ee:07:13:b9:ca:ce:25:3a:1b:15:7b:
63:02:86:4c:3e:38:d3:f0:67:b0:44:6d:26:9d:fa:
c7:77:8a:fe:5b:07:ad:62:d3:6d:ad:05:cd:64:0c:
bc:70:31:61:b9:19:bc:ec:47:e7:28:af:05:6d:d1:
9e:34:00:ad:b6:d3:f8:bc:0d:b9:dc:de:70:59:45:
53:97:d0:41:1f:a2:21:de:58:22:ff:93:b3:f3:68:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C3:0F:E9:C2:D6:19:C2:95:80:90:0F:F7:24:27:2F:58:94:30:E5
X509v3 Authority Key Identifier:
keyid:C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f6:d5:b4:9f:77:3c:88:ab:7e:e0:1f:c0:2d:fc:7c:cf:fc:
1e:ab:b6:68:c1:6f:09:e0:10:2b:39:8f:0f:a8:a8:b5:76:6f:
9b:33:75:32:64:bd:52:8a:7d:f1:49:ce:e4:ca:02:ab:26:8e:
13:9c:16:71:ef:4a:16:b9:a9:a7:37:90:a0:1f:25:5f:3d:59:
d1:a2:fa:b9:ae:6e:ef:a4:13:f5:0d:f6:97:17:57:07:aa:a7:
3d:6f:fd:39:6f:17:0e:e0:fc:d8:1e:fd:89:40:bb:9c:ee:92:
6e:7b:13:35:1c:a2:13:97:2d:a8:f0:cc:a8:98:0c:2f:6e:16:
16:b5:dd:8c:50:1d:14:4e:a6:34:94:4c:87:67:d2:00:cf:f7:
e1:f2:97:c3:d3:16:8c:9a:86:bb:85:7a:f9:4c:e3:8d:42:ea:
36:ea:95:67:5e:89:18:9d:22:d8:b1:e0:07:56:e1:f5:93:ec:
82:b9:c9:00:b0:76:21:ca:59:4c:15:53:3e:70:95:93:52:e3:
2c:a7:98:ec:66:39:07:80:fd:39:43:6d:ee:89:69:09:f7:f3:
b6:1f:22:5b:a0:32:ad:78:32:47:76:13:25:d5:a5:49:72:c1:
e5:7c:96:41:9d:af:63:0c:7e:ca:85:31:70:80:29:44:9d:96:
b4:3b:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:03 2025 by rpki-client