Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
File: XHOCiOHdRuIcmgORGXJEtHjQqyY.mft (raw, json)
Hash identifier: nf24AkDAXPjntXozLCqBbn1QQuh823quFrPLSpxtjFo=
Subject key identifier: 26:E1:51:87:B4:43:BE:92:6D:EA:BC:8A:AF:A2:F8:7E:DC:36:9F:7C
Authority key identifier: 5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
Certificate issuer: /CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Certificate serial: 0198D66076EAEA83F5306C83A6163537C421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: XHOCiOHdRuIcmgORGXJEtHjQqyY.crl (hash: JsbOMXrizDZ39MwOJ85AKqkfIcpJwJq2XOmmJOSa/g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:76:ea:ea:83:f5:30:6c:83:a6:16:35:37:c4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=26e15187b443be926deabc8aafa2f87edc369f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:66:5d:15:0c:08:26:18:10:ec:16:e5:0c:
91:5b:7f:6f:27:39:b7:84:3d:8e:ed:05:24:b3:f5:
14:05:b3:90:7f:fb:32:7f:52:1f:33:44:c1:74:87:
cc:06:7b:ae:92:78:5b:da:d9:91:7d:6b:26:71:61:
53:1c:a7:a0:f2:43:3b:dd:ef:e5:e4:2f:11:0d:92:
08:f7:46:ed:8a:f5:2a:87:27:4e:c6:7b:e9:50:0e:
da:86:1c:8c:83:49:9b:56:b9:59:bd:bd:10:36:1a:
91:7c:bc:e2:5f:84:89:64:23:e4:35:13:6c:b6:33:
50:e8:d6:ad:8b:4c:63:de:f9:88:f3:19:2f:ab:f9:
ba:3c:0d:92:3f:e4:63:9a:57:17:84:d3:52:0b:1f:
7c:9f:86:40:b7:c7:0b:62:6d:29:ae:74:85:2c:5e:
85:0c:af:d8:b5:a0:75:e4:47:16:12:59:60:c7:4b:
f8:98:a9:09:b3:9d:73:09:f1:6e:f7:75:ca:53:d9:
6d:04:3c:73:88:77:57:01:f9:f3:d8:48:48:e3:4b:
20:cd:82:36:43:ec:af:6e:4c:76:48:a4:be:4d:42:
1d:d1:35:c1:06:9f:ec:c2:52:db:ba:7a:22:af:df:
3c:6f:25:33:74:d5:a1:92:31:ed:4e:db:24:42:97:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E1:51:87:B4:43:BE:92:6D:EA:BC:8A:AF:A2:F8:7E:DC:36:9F:7C
X509v3 Authority Key Identifier:
keyid:5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1b:a3:24:77:23:61:fa:ee:0f:11:98:c2:be:87:dd:cb:2f:
52:d3:73:99:d5:10:c7:bf:3c:26:c2:69:12:c4:dc:c5:21:68:
a1:2d:41:80:b3:f4:23:47:d8:f3:65:6b:30:c9:54:36:6f:6b:
2c:c9:22:41:c4:da:ed:e1:52:c5:b5:61:43:26:4a:d5:6e:80:
f7:ff:cb:4e:f6:28:24:c9:5a:47:ae:38:70:13:8b:03:1a:94:
28:00:d6:ff:cd:7f:6b:3c:19:ae:3d:94:9f:ad:ad:a5:7e:88:
bd:0f:1f:38:bd:4c:90:02:64:33:82:6d:85:6c:b7:72:5f:3a:
f5:1f:04:1c:51:79:a7:f9:10:03:73:de:88:66:f8:f2:8a:f3:
12:0c:84:09:aa:89:c9:c1:ae:06:d9:7c:6a:68:72:6d:7f:1c:
70:67:68:0e:3f:9c:aa:f7:d8:4b:49:5e:d0:37:da:4f:ad:9b:
d0:81:b4:0a:d9:dd:67:d0:bc:5c:67:f0:53:45:49:f1:11:1b:
61:64:d9:06:23:cd:21:7f:8b:75:27:b7:ea:fa:9b:92:02:44:
df:34:21:93:9c:5f:27:aa:57:12:e3:55:c2:fc:d1:9c:8a:c1:
34:b3:b7:d3:06:29:b4:d4:56:55:9e:33:68:31:2e:4c:5f:e6:
d0:a8:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:07 2025 by rpki-client