Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: xxDLVFazZwQi/Y2dVW5BbAOad/42iCmNwpwGQcdmSoM=
Subject key identifier: 6C:D0:CF:7B:8C:5C:5A:40:6D:79:E7:3A:0F:1C:DA:D0:DA:D9:5A:B6
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 0198D515D7ACD2F8124A6905FCF2A9C4CDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 042E
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: xaXnTfXGvYzSWHj3dNZ5Dg0gYUWYSbcVsOM0tyZNFS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d7:ac:d2:f8:12:4a:69:05:fc:f2:a9:c4:cd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=6cd0cf7b8c5c5a406d79e73a0f1cdad0dad95ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:63:af:eb:01:35:e6:ee:43:d1:9a:7d:32:
02:e4:d4:c5:f4:4d:49:01:01:41:7f:e9:76:95:3b:
2d:b6:2b:e9:12:a5:11:42:ee:01:4a:df:6c:a3:f2:
5a:16:e9:9d:a5:4e:83:80:98:b8:8b:49:09:bd:67:
5b:53:0e:b6:36:82:80:fe:a8:7c:7e:b4:b3:ea:a7:
cf:8d:be:5f:9a:68:13:07:84:6f:1d:ca:5d:6c:99:
bc:a4:c0:4a:49:4f:c3:27:cc:10:87:c6:31:16:81:
9e:da:4d:ce:7e:64:64:7b:5b:82:20:65:b3:84:9c:
cd:d7:8b:12:a8:11:91:5a:45:2c:e5:8e:e4:e8:a7:
c9:02:11:97:06:be:78:77:95:3c:bb:47:0b:8a:55:
c9:78:31:5c:aa:40:26:2e:57:d4:8d:3b:2a:97:2a:
87:07:37:87:a6:a9:f0:96:5b:69:63:b3:24:39:58:
f4:40:fd:9d:44:dc:9c:8e:0d:1e:6c:64:86:06:4e:
c5:3b:9c:70:04:10:df:5a:64:71:28:19:bb:05:c1:
6b:ae:74:b1:e2:af:41:68:2f:c9:e9:11:73:46:3a:
8d:f5:cb:96:6c:54:25:aa:6a:35:6b:5c:91:2d:7b:
0b:e5:7c:8b:1a:db:0c:9e:08:c1:9d:f6:63:8c:41:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D0:CF:7B:8C:5C:5A:40:6D:79:E7:3A:0F:1C:DA:D0:DA:D9:5A:B6
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4a:5a:76:e5:bf:7d:48:f9:e1:23:ab:dd:9a:a0:39:9f:e7:
b9:f3:37:46:5a:ae:83:98:60:30:86:22:7e:94:cd:8f:7f:d2:
16:e8:3e:ab:2f:a7:7e:33:da:9e:44:35:30:c7:ef:41:5e:a9:
e6:0a:b9:f8:a8:ee:d7:7e:78:e6:c0:71:3e:01:0e:a4:8a:1c:
32:bd:7e:72:fd:a5:88:6f:3a:3f:f0:fc:19:25:2d:82:89:3a:
c9:71:4d:cf:20:2f:06:4e:d3:00:41:72:6d:60:ee:91:44:6f:
87:78:ee:88:b7:d7:c1:e1:4a:f6:d2:4a:b7:a8:3c:29:42:a5:
12:b8:39:13:b2:5e:bc:59:56:ca:cd:b2:01:70:9e:61:8b:cd:
47:cd:56:32:fa:bb:30:e4:bd:19:61:8b:da:c1:9a:5c:62:df:
39:00:42:62:48:b2:1a:a9:8c:f6:48:27:7d:60:7f:2b:7f:32:
5b:e6:f7:49:93:8d:cd:98:7a:6a:40:16:b5:20:3e:4e:ce:1f:
94:6a:8b:48:fc:a1:eb:cb:29:9b:a9:09:0f:ae:ad:db:2f:5f:
a8:3f:08:f0:26:cd:98:9b:05:21:b2:27:72:ef:f1:78:cd:82:
9f:91:20:b8:ff:62:0e:d2:d9:00:a8:15:32:75:f8:cc:63:eb:
60:74:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:22 2025 by rpki-client