Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: WqdYZs9RO1u/mzbnRaXkhZKLzGhzYIxS3GHvRb41J3I=
Subject key identifier: 20:CB:CB:1D:CC:11:AA:07:F9:5C:27:56:48:1F:08:C9:3F:31:86:4D
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 0198D4E040F2951AA6893B45AA966E51B38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 1017
Signing time: Sat 23 Aug 2025 03:02:03 +0000
Manifest this update: Sat 23 Aug 2025 03:02:03 +0000
Manifest next update: Sun 24 Aug 2025 03:02:03 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: wcjbNrZhrneUDUZO5YthLjJs+fmhpc4TrROeBlKmYRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:40:f2:95:1a:a6:89:3b:45:aa:96:6e:51:b3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Aug 23 03:02:03 2025 GMT
Not After : Aug 24 03:02:03 2025 GMT
Subject: CN=20cbcb1dcc11aa07f95c2756481f08c93f31864d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:99:97:47:9f:79:eb:2c:1e:ac:8b:bc:b4:
98:b1:b9:b8:01:f6:3f:31:55:bb:29:d5:fd:d6:35:
1c:f3:11:db:3f:13:4f:1e:22:e5:23:65:c1:0c:c9:
bb:d2:ff:f5:75:a9:a4:80:0d:b3:16:c1:b5:c7:97:
ee:ed:dc:d8:6a:c2:b7:32:18:61:f2:fd:95:1c:b6:
81:e1:57:ff:30:fe:e1:0e:94:4d:94:1b:d0:3c:e9:
59:1b:e0:d9:40:76:e6:9e:e2:6c:be:e0:88:65:fb:
81:ce:9b:36:a8:79:e0:d8:f7:61:08:9b:52:b2:b1:
96:f3:3c:0f:07:56:f7:46:51:4c:d1:e8:f4:37:fb:
31:a9:0e:39:bb:22:e0:92:b7:99:b1:45:bc:a5:9e:
d1:6f:51:0a:b3:f0:a3:5f:36:29:34:74:60:7d:2f:
87:a4:64:e1:92:70:92:4b:59:cf:1f:f8:5a:6e:86:
7f:6a:a4:1f:a8:e4:34:ce:46:7d:5d:2a:35:b9:e2:
8e:df:ba:5b:77:98:c9:1c:c9:6e:7e:17:b4:90:a4:
73:e3:09:60:6a:e4:3a:a7:6a:32:b8:dc:0f:b8:a1:
3f:b9:3d:0c:bf:8b:d5:36:62:d4:ae:de:f3:85:e2:
26:eb:0e:4b:7e:c3:84:c2:a6:8f:8e:1b:e6:c7:fc:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CB:CB:1D:CC:11:AA:07:F9:5C:27:56:48:1F:08:C9:3F:31:86:4D
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5d:68:f0:44:41:f8:39:e3:f2:e4:ed:ed:07:45:ef:6a:82:
07:b9:11:71:87:42:8b:88:98:33:ff:02:53:bc:77:f6:fe:61:
5c:44:ef:9d:3b:c5:bb:86:9f:5d:5e:06:62:ed:a4:39:10:0c:
5c:2e:9d:de:86:fa:2f:7e:30:8b:95:2c:d7:66:4b:71:14:10:
75:52:76:c7:a1:26:e8:ea:e1:ee:6a:37:4c:1b:c3:b9:7f:18:
40:68:7c:e4:5e:73:bb:57:3e:e0:b5:ea:a3:a1:39:d7:ec:5f:
d5:ec:72:a9:a3:d3:42:59:9a:6b:ba:b5:45:f8:a7:d2:bb:3b:
a7:6d:a0:1c:fa:a6:b5:89:d8:5a:b0:ac:0a:a7:39:54:84:59:
9b:f3:51:01:cd:fe:71:86:a8:dc:43:5a:f8:f5:62:93:67:c1:
17:94:61:a0:39:5a:03:a2:ca:42:4c:ac:40:10:71:5a:14:76:
cb:5f:5f:6a:c9:a7:af:83:6a:78:ef:58:36:08:62:66:41:d4:
93:11:93:c7:25:f3:a4:e3:50:3f:42:1d:92:ad:07:80:4e:5d:
40:8f:89:95:48:70:fe:78:5e:5a:bb:56:2a:4a:8f:16:cd:5e:
bf:57:a5:03:87:fe:fa:ee:ef:82:e5:60:71:52:ac:3d:87:cc:
fe:04:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:10 2025 by rpki-client