Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: H88xZzk7dXqIGDOSd3eRxBheYl3+KzbKyAljCrmkhuI=
Subject key identifier: E6:CC:30:6A:8E:A6:61:2B:94:A4:9C:A4:2E:5F:75:0A:28:AB:57:22
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 0198D4A7AA29A0F0DFA9D6C5CF1252DE5FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 0618
Signing time: Sat 23 Aug 2025 02:00:14 +0000
Manifest this update: Sat 23 Aug 2025 02:00:14 +0000
Manifest next update: Sun 24 Aug 2025 02:00:14 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: 8nlR3jV0UcDpFhkbVL/btgLfxr2+SpoelHCKpZKoiqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:aa:29:a0:f0:df:a9:d6:c5:cf:12:52:de:5f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Aug 23 02:00:14 2025 GMT
Not After : Aug 24 02:00:14 2025 GMT
Subject: CN=e6cc306a8ea6612b94a49ca42e5f750a28ab5722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bc:72:a6:05:e4:dd:a7:2c:1b:84:95:de:4a:
c6:f7:c3:2f:b7:6d:e1:7d:30:80:99:5b:67:61:06:
9f:52:e0:17:d4:cd:d1:c3:49:8c:51:c8:0c:ec:ff:
ca:c2:59:20:68:fb:53:8a:85:72:7f:ee:86:a6:e1:
5c:ba:0c:2a:0e:1a:83:83:e7:ac:b9:47:f5:bb:ca:
b4:4c:17:e9:b8:90:f9:e6:a1:30:26:2e:83:0b:e6:
df:31:49:ea:0c:16:42:23:aa:f4:00:0c:bb:57:f9:
28:20:d8:65:f2:99:a7:26:01:ff:e3:5f:4b:8e:40:
4a:a1:32:1a:0e:f1:22:06:a1:be:c7:86:94:f1:1d:
a0:ed:79:73:ab:50:3c:94:39:be:2b:06:1c:a3:10:
06:dc:94:a6:8a:13:6e:46:ef:b7:e8:a2:fb:1c:8e:
18:90:d4:0d:70:33:99:5e:68:06:03:d7:cd:d3:b8:
51:00:0a:c6:06:97:c6:04:17:3c:b0:72:c3:bc:1e:
a7:52:cc:ac:f8:74:9b:f4:ef:c2:47:f9:cd:58:1b:
e4:18:31:6a:cb:fd:7d:27:71:10:36:9d:a9:85:9f:
c0:68:71:9b:0e:f9:01:17:1e:d1:52:f1:3a:a7:72:
e9:e8:1f:95:d0:5b:cf:65:8b:85:e1:fe:bf:6e:73:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CC:30:6A:8E:A6:61:2B:94:A4:9C:A4:2E:5F:75:0A:28:AB:57:22
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6c:61:3e:a7:87:77:d9:c2:a4:51:9f:95:e1:36:87:63:cd:
17:c3:a5:c9:70:93:6c:58:ae:b4:60:be:4f:e6:4c:79:96:80:
d6:8e:73:87:15:48:ff:7c:9a:12:1d:ac:6a:8b:fe:60:f4:f6:
a7:85:4d:50:65:23:8a:2c:1f:39:5d:26:60:72:06:a4:9e:b1:
9f:c9:82:77:d8:7c:c2:58:e7:26:f4:2b:48:a7:d8:f9:07:94:
7d:fc:d1:bc:0e:4e:b2:af:ec:cf:e4:a9:86:49:cd:bd:1c:ab:
33:38:62:bd:36:cf:b2:53:b4:43:a9:09:5b:77:1c:d2:b4:32:
1b:98:16:be:05:92:1c:29:67:0b:eb:79:12:ad:d8:c9:da:8e:
75:40:58:c0:bf:6a:b5:7c:bc:74:00:0c:68:2a:71:61:67:f2:
8f:11:ba:9c:e2:9f:e0:d6:fc:10:b9:e7:84:8d:fa:9b:10:f2:
04:6f:4e:6b:43:25:05:d4:31:00:e1:54:8e:df:5c:2c:d2:73:
4f:e8:48:01:de:2a:8c:3d:67:d6:26:e0:1b:e8:de:eb:a3:68:
eb:72:40:64:9a:ae:d5:65:d9:bf:49:3b:48:07:78:11:cc:39:
ae:35:26:7e:73:2e:fe:8e:cf:7e:d5:eb:88:8c:d1:c7:6b:28:
7b:de:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:49 2025 by rpki-client