Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: CfBRe4SjXa7k6J72nFLQYNdbhdzzYr2PLik6bU3XwLE=
Subject key identifier: 6C:49:BE:F9:55:ED:BF:EA:CA:A0:83:D9:53:EA:BC:62:A5:0C:2F:2A
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 0198D65FF058AC0F46008908AE8611B85E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 0A06
Signing time: Sat 23 Aug 2025 10:01:08 +0000
Manifest this update: Sat 23 Aug 2025 10:01:08 +0000
Manifest next update: Sun 24 Aug 2025 10:01:08 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: uKviNQKnwYo8E+5Snj6om3mdxnEZg24N/8P89UhhsRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f0:58:ac:0f:46:00:89:08:ae:86:11:b8:5e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Aug 23 10:01:08 2025 GMT
Not After : Aug 24 10:01:08 2025 GMT
Subject: CN=6c49bef955edbfeacaa083d953eabc62a50c2f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:19:9c:ba:00:16:ed:9c:4c:85:8f:4d:b5:
c1:8e:01:5f:07:93:05:ef:d4:df:8b:51:82:c4:ee:
c4:d9:78:19:2c:dc:2b:43:14:92:db:dc:99:53:c5:
f8:7c:72:7c:4d:39:9b:fa:e7:2c:f2:f2:53:16:5f:
b4:e0:70:75:b9:4d:c7:6a:e0:36:06:13:85:41:91:
f2:28:fe:83:6f:9e:7c:fd:a7:24:bf:38:7c:15:cb:
bc:78:08:f1:eb:5d:af:06:5f:28:e7:11:2d:55:09:
73:cf:fa:e7:7b:15:11:a9:a3:82:11:0e:8d:76:1e:
cf:27:ab:4f:23:40:80:39:9f:1c:62:ea:ce:a6:65:
a1:96:a9:1c:72:5e:e4:e8:2b:a6:de:35:ef:e9:bb:
f4:b1:d7:7a:e5:00:86:82:06:b1:5f:f4:6d:62:d4:
04:09:b3:5e:14:25:53:37:ca:f0:80:ae:ea:d1:5f:
e1:0b:ab:57:ad:cd:45:9c:c8:e8:66:16:2d:9b:52:
84:55:6b:94:dc:a8:db:07:f3:98:e8:f9:fa:aa:57:
6c:f3:dd:8b:82:f1:40:12:53:52:99:5b:96:c9:b1:
60:5a:4f:76:df:7a:fe:fc:20:6f:d8:13:6d:ce:0f:
9c:b2:46:98:76:77:9c:07:35:b7:92:05:79:e5:5b:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:49:BE:F9:55:ED:BF:EA:CA:A0:83:D9:53:EA:BC:62:A5:0C:2F:2A
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:98:d8:fa:c2:a2:98:0e:9a:c2:47:79:04:56:f6:a9:c2:cb:
b9:44:c7:0b:4f:2c:a6:40:ca:6e:64:9d:0b:47:4d:3e:bb:d8:
1b:71:d7:e8:35:8c:25:ae:d9:09:80:1b:b4:79:38:76:d4:38:
3a:70:11:c3:c2:dd:6a:70:ff:a8:4c:5e:f5:b1:7b:27:2b:b5:
2c:1f:5f:b8:68:34:ac:36:1c:6b:23:d4:d8:53:8c:8f:67:a2:
43:ed:ad:30:c2:91:2f:21:94:93:d2:7c:49:16:b0:37:e4:76:
3f:aa:fd:1b:1c:f1:72:5b:b3:b3:38:51:0c:f6:8e:7c:b2:03:
c8:60:66:7b:42:e0:ee:6f:ca:ad:ef:b7:6a:26:24:b7:a4:5f:
56:f8:17:b8:03:c8:39:6b:c9:c0:96:2b:cf:b5:e5:a2:d6:6c:
5b:51:0e:7b:ae:06:32:66:47:f0:d1:b3:f7:fa:81:05:20:f7:
9f:b7:87:49:d6:a2:7e:e0:83:29:67:d1:7a:51:ec:5b:9f:98:
27:4a:b8:c2:2b:56:81:79:f1:d8:0c:1f:ea:a4:6c:6d:ed:93:
0a:a1:47:29:94:23:d2:22:fd:2c:d7:fa:bb:84:4d:6b:a2:a6:
a6:ac:76:41:41:dc:8b:09:f4:fe:a7:b7:e0:a4:52:3f:42:54:
6a:35:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:01 2025 by rpki-client