Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier: FZXPe3I4zCyRbCs4JWRCYijEl0jpGc2Xr8/ojOS/hyw=
Subject key identifier: D3:E4:8C:6E:01:6F:44:71:37:6D:8A:17:89:C5:81:A9:69:54:05:D1
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial: 0198D473A8F5B3374E5226CBCDA50FF5F5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 01:03:26 +0000
Manifest this update: Sat 23 Aug 2025 01:03:26 +0000
Manifest next update: Sun 24 Aug 2025 01:03:26 +0000
Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: 6cpFc4bbMZuWhSOiLpWVhzAC4HZGdtedrPU4hz45jOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a8:f5:b3:37:4e:52:26:cb:cd:a5:0f:f5:f5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Validity
Not Before: Aug 23 01:03:26 2025 GMT
Not After : Aug 24 01:03:26 2025 GMT
Subject: CN=d3e48c6e016f4471376d8a1789c581a9695405d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:0d:ea:fc:b0:17:0e:df:45:05:a9:48:7e:
fa:39:bd:ac:ad:f9:d6:25:92:2e:1f:61:cf:e1:6b:
2b:35:0c:7a:63:1a:45:e0:11:cc:15:d6:86:3a:7d:
56:f5:6f:17:57:f5:62:51:be:8f:54:4b:8b:06:cf:
3c:fc:37:f4:1c:1f:9d:8b:bd:43:af:b6:a8:93:aa:
af:80:18:af:b0:5e:ad:70:4c:71:b7:dc:14:ba:11:
cb:68:a6:72:1b:19:2f:5a:d1:42:36:fb:84:e7:a6:
75:bc:51:ac:ce:6b:9c:24:0b:44:fd:91:10:61:ab:
b3:ec:f7:17:b8:c8:ad:ba:10:b2:2d:11:cf:05:8c:
69:72:47:8e:ac:8e:99:f7:91:42:99:4b:e2:df:fc:
23:a5:4a:39:99:26:0c:37:16:64:b9:e6:f7:f3:fb:
ba:6c:ff:28:09:6e:8a:c1:9f:f9:55:a4:3b:d4:62:
9d:f4:5a:32:a4:b3:36:9d:96:fa:22:f8:36:d1:97:
e2:96:c0:1d:49:1e:54:dd:be:e6:74:3a:f2:58:35:
c5:0c:03:1f:68:0a:ee:f1:16:53:c3:d6:69:b1:24:
61:c6:d8:97:03:3a:cd:2b:28:0e:fd:6b:26:7b:cc:
a3:3d:80:da:0b:22:6e:fb:37:c3:5a:c2:f2:50:49:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E4:8C:6E:01:6F:44:71:37:6D:8A:17:89:C5:81:A9:69:54:05:D1
X509v3 Authority Key Identifier:
keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:97:df:f3:2f:d2:56:91:ce:5a:5b:9c:a3:a6:07:ab:64:4f:
c3:01:08:50:f6:98:8b:e8:b2:dd:a5:2a:68:1d:3a:09:3f:10:
4c:65:8d:01:de:40:40:ae:a6:31:85:bf:f7:22:d7:fb:7c:01:
1a:a9:31:fd:6e:e3:07:89:8c:21:71:22:7f:fa:78:f4:bb:1b:
ad:4f:86:ae:b5:a6:ba:98:96:36:39:71:ec:99:49:91:1a:de:
46:96:c3:bc:a7:fe:5c:ef:fd:9c:65:8b:59:5e:a9:f7:57:35:
eb:71:fc:16:1f:5c:ac:a3:71:f9:d6:f4:09:62:42:e7:b4:cb:
b7:5d:c7:31:d3:37:fe:39:47:f1:03:1f:42:bc:aa:8c:60:42:
a3:ea:5b:6d:89:70:49:42:bf:97:3d:90:30:1f:03:e8:b7:ab:
28:e1:a0:57:9d:01:53:a1:3e:93:72:4b:c3:ee:f0:8d:6c:52:
22:41:6b:a9:5f:cc:d6:3a:2f:99:95:34:5c:7c:28:af:42:e8:
18:8f:91:bc:13:a8:31:2d:82:b3:19:fd:2b:bf:5a:e2:47:0b:
01:f9:a6:4b:10:64:a2:b2:11:0a:c9:dd:b0:b1:7c:03:64:a0:
8b:4c:4b:48:d5:48:b4:0e:cb:fa:f7:ad:57:38:57:ea:10:d4:
ca:10:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:47 2025 by rpki-client