Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier: j4W9KHU8NqxUrsF86D+9KCTpld+kOUUEvtHcFl+CQD0=
Subject key identifier: D1:ED:9B:DD:E4:BA:FC:FD:DF:E4:9E:0A:FD:29:5D:29:D8:BE:B4:17
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial: 0199FFC78574AA378A18B2BB7A2F121D78EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number: 1673
Signing time: Mon 20 Oct 2025 04:01:29 +0000
Manifest this update: Mon 20 Oct 2025 04:01:29 +0000
Manifest next update: Tue 21 Oct 2025 04:01:29 +0000
Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: cG6OHdMSCkkSdBFZrVdRvtbSH/zegpgGSaO3Ff+jXCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:85:74:aa:37:8a:18:b2:bb:7a:2f:12:1d:78:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Validity
Not Before: Oct 20 04:01:29 2025 GMT
Not After : Oct 21 04:01:29 2025 GMT
Subject: CN=d1ed9bdde4bafcfddfe49e0afd295d29d8beb417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:c7:8e:f1:3c:ca:24:42:4c:61:e4:64:4c:
eb:2b:97:82:9c:0d:be:a8:f4:a4:6a:0c:5f:5f:c9:
3e:d6:81:85:2b:be:b9:c2:d9:b2:c6:c5:0c:81:cb:
29:83:8c:46:2b:c8:d5:c6:01:f1:4c:13:05:68:d4:
0f:eb:79:28:91:b2:8f:f2:8b:75:03:a8:38:d9:1d:
2e:89:00:6c:74:26:a2:1c:60:2f:c5:d3:f4:d0:30:
14:35:b9:50:e0:b0:f7:84:86:70:4a:0e:b8:f3:b9:
8e:d4:dc:7a:75:ff:6b:89:06:3f:7b:9e:19:af:3d:
26:3a:6e:95:eb:af:93:13:87:6e:43:7c:96:01:59:
92:dc:53:b3:67:b8:64:84:75:2d:9a:8a:7f:6f:2c:
fe:90:4f:28:61:e9:00:3d:06:80:57:85:62:29:a7:
ba:72:8b:3c:cf:e3:c2:28:2c:d8:1e:72:55:6b:c7:
40:90:2e:32:a7:b6:44:74:92:e4:94:97:bf:ae:b7:
e6:11:06:7c:18:6f:7d:51:d6:5f:f8:48:2e:a1:79:
6a:a3:8b:73:83:88:67:26:f1:6f:11:88:0a:bc:87:
ad:fb:83:71:03:66:d5:82:a6:b2:3b:fe:e2:69:13:
00:e6:ce:2e:dc:39:d8:99:02:c6:99:ad:06:46:77:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:9B:DD:E4:BA:FC:FD:DF:E4:9E:0A:FD:29:5D:29:D8:BE:B4:17
X509v3 Authority Key Identifier:
keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:58:54:3a:d3:af:a9:0d:ef:7c:0b:11:e4:d1:c1:d1:d7:fb:
14:43:65:71:b4:1b:18:98:71:7c:19:c6:ca:5d:51:bf:ba:e8:
44:ff:a7:c6:1e:77:89:d7:3d:f9:3b:54:43:12:28:2f:1d:0a:
40:0e:1b:a6:79:ac:f2:bf:ab:32:ca:03:66:a5:0a:49:99:1c:
a7:cd:7d:b9:d3:50:c3:31:c4:6b:9d:ad:4d:e5:18:77:ff:36:
4a:9a:fd:3b:f8:44:d4:9c:43:84:5f:8c:d9:fa:18:41:6c:93:
dd:60:21:f7:9f:8e:41:ec:7a:f5:d8:10:f7:8e:1b:d2:5f:af:
36:df:1c:a8:d5:85:1e:fe:ab:52:7f:2f:86:56:4d:71:9f:a1:
9a:16:45:54:86:41:51:c1:62:60:4a:84:7b:be:c0:25:f6:1d:
d3:d4:f4:7e:5f:f2:e0:3e:90:95:21:43:55:6e:72:41:b7:70:
84:af:0d:78:06:c4:8c:ae:e8:05:85:24:b2:71:d7:45:b4:78:
74:00:01:30:7d:44:65:70:96:a3:43:5d:b2:b9:35:02:c9:d4:
d9:66:df:17:78:01:60:7c:24:2a:7a:c7:b7:af:8e:c6:4d:87:
56:65:53:a2:6d:6b:ec:a9:9b:5f:bd:9a:9a:96:29:e2:4e:10:
cc:0e:c9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:36:02 2025 by rpki-client