Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: Hus8emItEt8u5eQPqY/CZL5r72aiU6CoC2tzWLzdU7k=
Subject key identifier: 84:97:32:79:58:C0:CA:20:A6:34:00:E4:99:99:F1:71:29:5D:62:13
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 0198D4E087522A349688EEA1F5C711E6FF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 0DF9
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: eGTBDl026v4uEGHXcFQXk5rCtGaf9mDYQWMCMro5Jc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:87:52:2a:34:96:88:ee:a1:f5:c7:11:e6:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=8497327958c0ca20a63400e49999f171295d6213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:2a:26:2b:53:15:b5:24:07:4f:e1:31:70:
eb:d9:a3:50:3b:0d:6e:c9:a5:6d:cb:e2:bf:07:c1:
47:0c:6e:d4:b7:26:49:67:d8:37:46:2d:79:c3:40:
3e:5c:51:0b:f1:ee:09:00:2a:c6:f7:9c:40:15:82:
bd:ef:18:07:30:6a:3a:5a:77:a1:0f:55:25:f7:e0:
11:e7:c5:f9:41:d7:ac:49:56:10:95:b2:18:8f:06:
93:1f:f5:d3:1c:26:26:30:0a:b4:71:e0:92:88:51:
87:f0:ce:d1:8d:02:0f:36:a0:56:e1:75:e3:0a:9d:
e3:5d:1c:4e:6c:03:0e:5f:99:9f:cf:a6:d4:49:77:
81:f6:6e:52:eb:e9:a5:b4:ec:f8:30:ed:6b:7d:09:
3a:9f:8e:42:a1:c5:b8:41:e5:00:ec:d0:b9:61:9b:
98:be:fc:bf:e3:aa:30:9a:fe:75:4b:7a:1f:1e:d7:
ae:e6:a0:9e:f6:82:11:67:ab:74:42:20:3a:e3:41:
0c:bb:d6:62:8e:87:bd:ae:4d:52:53:47:f7:7b:99:
48:97:28:8d:f1:37:6c:9c:e6:bf:e0:63:90:db:83:
0b:34:59:e7:ed:2b:e8:e3:91:bd:93:1f:eb:40:86:
2a:c5:2c:b5:5e:b0:f1:22:ac:8f:8c:e6:8b:3c:55:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:32:79:58:C0:CA:20:A6:34:00:E4:99:99:F1:71:29:5D:62:13
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1d:91:6c:9d:37:9c:47:90:c6:a0:1e:49:b9:dd:02:21:a3:
9a:06:e5:2c:64:dd:8d:8e:cf:90:4a:f4:6b:e9:70:78:3e:9d:
f4:db:8e:c6:80:e9:27:cd:a6:16:8c:a9:27:1f:73:1c:44:be:
c4:de:54:e6:f2:2e:ec:7b:45:b0:45:dc:17:f4:e0:15:57:81:
e3:0d:25:06:55:30:aa:66:03:1a:1e:de:e6:4c:cc:c2:48:8c:
ba:3d:ba:a2:2d:9b:bc:4f:f0:50:66:58:26:03:73:17:22:ac:
b8:1d:59:e4:14:84:53:3b:48:d6:5e:7d:ef:96:c7:7e:5b:32:
05:f2:4f:eb:7f:c7:62:bf:14:dc:64:09:4c:ff:11:71:0c:e1:
5c:29:8a:09:14:7c:8d:93:e4:e9:30:f2:a8:e0:b9:e3:b7:65:
7f:ab:40:12:bc:5b:0a:14:02:43:7f:a4:27:40:8b:45:19:b3:
68:e2:4e:36:70:bc:f2:4e:3e:3a:1a:0a:ae:6c:e6:84:17:cc:
ea:cc:9f:d0:bb:ae:d0:1c:09:26:b4:24:33:11:d4:75:ff:31:
7e:88:ca:86:33:dd:16:4b:6c:e9:50:c1:98:d9:19:ba:3c:8b:
94:8a:95:3d:8d:6f:6d:45:b0:27:95:03:36:82:5a:8a:8d:ea:
a7:e6:f6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:44 2025 by rpki-client