Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
File: XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft (raw, json)
Hash identifier: UwfOZyn+5cxmTMH75EfrPRWLWY4ggjLJJ225w58Q+3o=
Subject key identifier: A6:A0:BB:56:3D:93:4B:54:D6:41:DD:B5:45:E5:39:8A:37:B3:01:06
Authority key identifier: 5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
Certificate issuer: /CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Certificate serial: 0198D998C282C8AA828BCD184AB0D962C2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
Manifest number: 164A
Signing time: Sun 24 Aug 2025 01:02:03 +0000
Manifest this update: Sun 24 Aug 2025 01:02:03 +0000
Manifest next update: Mon 25 Aug 2025 01:02:03 +0000
Files and hashes: 1: XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl (hash: k/uN+eAh+aB6IF9YJSf7uPu8Js3VcUmpo32Kq0qHNWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:98:c2:82:c8:aa:82:8b:cd:18:4a:b0:d9:62:c2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Validity
Not Before: Aug 24 01:02:03 2025 GMT
Not After : Aug 25 01:02:03 2025 GMT
Subject: CN=a6a0bb563d934b54d641ddb545e5398a37b30106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:f4:ec:e0:50:87:26:51:06:24:01:67:26:
21:d3:b0:04:4f:10:b5:f1:62:8b:ce:43:eb:dd:c8:
21:29:c1:8e:f6:13:29:9c:a8:6c:e3:24:7e:4b:22:
bd:ef:71:15:d2:86:72:7d:61:1b:f9:04:47:8e:4d:
5c:65:58:67:38:04:5f:d6:a7:74:3c:0e:f5:62:31:
40:3d:97:7b:84:7b:5d:5b:c2:c7:d1:8f:fe:20:2b:
b6:20:87:d9:4c:9f:8a:10:64:c5:18:56:2d:5b:50:
53:22:c3:3f:7f:c1:02:13:4a:02:2b:45:7a:e4:10:
0e:ca:67:e6:94:ef:f9:79:2b:8f:ee:01:4d:12:f1:
d7:0f:5c:aa:51:a9:a8:a6:47:f5:4f:f6:c0:0a:da:
7c:75:7d:c0:d8:48:1f:4c:a9:d1:33:11:17:61:7e:
08:c7:69:f3:b3:6a:7b:e0:19:65:54:e6:0f:ef:8f:
62:10:b5:36:3b:bb:e0:68:dd:70:04:d1:21:ec:f0:
48:37:f5:98:5e:21:39:70:52:fb:a6:20:db:4e:97:
d0:d3:6a:88:c7:7b:1f:d6:57:91:14:77:03:16:4b:
73:b8:12:c5:92:6a:1c:3c:7c:7b:92:2d:55:d9:be:
0f:7e:07:d1:46:24:64:67:11:e9:93:ac:cb:2e:5c:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:BB:56:3D:93:4B:54:D6:41:DD:B5:45:E5:39:8A:37:B3:01:06
X509v3 Authority Key Identifier:
keyid:5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8c:d5:e0:79:46:69:e1:b1:f4:ad:57:14:fc:7f:c5:3b:65:
d4:fe:45:5e:6d:73:de:de:ae:74:d9:3d:bc:b1:d3:fd:f7:c3:
75:93:95:e4:75:69:10:c0:a9:34:96:9e:d5:20:3b:0e:a6:d4:
c3:49:0e:94:56:13:a8:f4:d7:18:33:fa:4b:55:49:03:59:dd:
ab:e5:54:c4:1c:a0:ea:72:22:77:58:9e:df:d0:cd:9e:b5:c2:
86:c3:75:dc:b1:38:b7:95:e7:78:50:0e:99:e5:8e:2f:7c:61:
53:d6:27:57:c1:5c:47:f1:1b:70:24:02:d5:28:d9:c5:1c:1b:
f9:0b:27:ae:ee:70:3e:9d:41:b1:63:a6:e2:ea:68:c2:f2:aa:
99:79:c8:39:88:21:74:b0:99:d5:e3:da:97:80:4c:60:d1:30:
9a:e0:64:7c:55:b4:26:2e:1b:f7:95:d7:cf:ae:11:29:62:d0:
b5:44:a5:6e:66:7f:c9:96:63:36:20:2d:d4:07:26:f3:17:7a:
38:3b:d0:ff:3d:cd:81:97:5f:20:2b:7f:00:58:28:ef:62:47:
5a:51:0c:70:c3:8a:72:c8:cc:27:77:f9:77:51:8e:5c:c6:7f:
8f:85:c0:c5:2a:1d:16:07:d1:3f:50:85:57:e7:8b:d9:06:0b:
b8:04:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:14:36 2025 by rpki-client