Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.mft
File: xAqOocjcM7gpD-vTTkU4vZWXROg.mft (raw, json)
Hash identifier: F/H7rHa/3da9hjILgFy9zV0bF6t/+Np1zq+5+FZGWl4=
Subject key identifier: 68:AB:18:D9:68:03:AF:49:86:8F:47:B3:63:D3:D8:34:7D:D2:46:10
Authority key identifier: C4:0A:8E:A1:C8:DC:33:B8:29:0F:EB:D3:4E:45:38:BD:95:97:44:E8
Certificate issuer: /CN=c40a8ea1c8dc33b8290febd34e4538bd959744e8
Certificate serial: 0198D4E0893020664A2E4455FBD0AB524168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAqOocjcM7gpD-vTTkU4vZWXROg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: xAqOocjcM7gpD-vTTkU4vZWXROg.crl (hash: m/CBvXBIk503g0aIHHzTNIApJMFk1MAglnsTb3B3+Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAqOocjcM7gpD-vTTkU4vZWXROg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:89:30:20:66:4a:2e:44:55:fb:d0:ab:52:41:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40a8ea1c8dc33b8290febd34e4538bd959744e8
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=68ab18d96803af49868f47b363d3d8347dd24610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:59:da:1c:f3:c3:d1:90:86:c9:75:bc:55:
7a:35:73:50:d6:3f:cc:72:3d:21:e1:ca:47:84:aa:
c4:0c:13:c1:f4:a2:47:ad:27:6d:be:77:78:6f:d7:
fa:4b:b6:83:ba:b2:9e:fd:b3:3e:34:cf:9f:d3:60:
7e:7a:88:21:24:4f:b8:c2:0c:a5:4e:f0:3c:38:ee:
a7:03:e7:56:98:23:c7:69:04:08:c1:c1:d2:09:82:
b9:04:28:c3:ba:db:b6:1d:a1:2d:05:fa:4a:cb:e2:
56:63:b6:b0:9b:da:a8:4d:57:9f:9a:89:ce:af:c8:
d4:14:fd:38:e1:ae:78:f1:bc:d0:44:01:61:12:88:
bc:e5:23:bb:45:ac:7c:af:2c:72:18:cb:8c:85:19:
07:fd:0f:4e:b5:56:d3:b2:a4:54:22:6e:99:7a:85:
5a:9a:58:bc:6d:6d:28:13:b1:66:85:1f:62:88:10:
09:cd:98:3e:c2:e4:79:7a:a4:b7:a1:d7:67:72:9e:
3a:cb:8d:14:88:7b:21:f8:6f:a7:02:df:90:f8:ba:
2e:07:aa:90:10:60:c5:b0:6e:4a:7b:5c:4b:b1:eb:
42:2d:92:62:f3:92:58:35:fa:77:6a:d6:91:11:de:
06:7f:5b:8f:a1:02:20:39:3b:1e:d1:f2:73:5c:be:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AB:18:D9:68:03:AF:49:86:8F:47:B3:63:D3:D8:34:7D:D2:46:10
X509v3 Authority Key Identifier:
keyid:C4:0A:8E:A1:C8:DC:33:B8:29:0F:EB:D3:4E:45:38:BD:95:97:44:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAqOocjcM7gpD-vTTkU4vZWXROg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e98bf7-c5c8-4561-97e8-e13160ac3e23/1/xAqOocjcM7gpD-vTTkU4vZWXROg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:16:9a:c1:58:d0:3e:34:e8:ab:79:7a:6e:aa:bb:51:97:9d:
b4:02:8f:72:c9:98:80:59:96:33:08:6e:ab:38:c9:a2:da:24:
b0:87:29:88:da:4e:89:ae:33:c2:ce:9f:28:f0:e2:cd:91:8b:
da:3a:1a:e0:05:27:c9:66:e9:8c:ea:e8:0e:d2:26:fa:3e:aa:
a2:6e:2a:6b:b3:0a:6c:2d:a9:83:1a:5e:d1:be:84:08:97:df:
96:60:22:ae:e0:09:d1:94:fd:9e:3c:f6:8f:f8:de:6e:6d:88:
9b:79:99:39:73:38:b6:71:ba:8e:3c:11:77:1d:fa:65:f9:2f:
2d:ec:3a:91:06:9f:47:8e:fd:ba:80:3a:45:73:6b:71:f7:f9:
cc:b9:6e:3e:ec:fa:be:dc:67:8f:27:c1:eb:7c:d8:e2:2f:5c:
68:0c:4b:3d:08:93:5c:3b:5b:77:a1:8f:35:a2:b8:e9:f8:2c:
98:f1:b1:0e:f1:97:9f:cc:5d:97:a9:43:ca:17:67:82:48:27:
c7:b7:54:2e:6a:21:13:6d:53:c0:41:5a:28:d3:78:36:8c:8c:
96:6a:e2:61:6e:07:e8:05:75:b4:19:42:d6:f9:e7:3a:0c:e6:
9f:19:c8:c8:6b:4e:4c:76:62:76:38:05:22:f9:57:82:03:73:
73:9b:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:31 2025 by rpki-client