Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: +NYU5Tsp/idtHBHtiWQA080rvK5bQoGf5uDL6XEDo8g=
Subject key identifier: 98:45:AE:26:81:3B:B1:D1:2D:11:6E:9B:39:7E:7D:FD:DA:29:27:F9
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 0198D473F8C2ACBA959D2CCCEA9C86C6F65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0D29
Signing time: Sat 23 Aug 2025 01:03:46 +0000
Manifest this update: Sat 23 Aug 2025 01:03:46 +0000
Manifest next update: Sun 24 Aug 2025 01:03:46 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: peJYzHZDhaUmkWYB3kf0ENT1uox459gvFSD9WfQ6HcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f8:c2:ac:ba:95:9d:2c:cc:ea:9c:86:c6:f6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: Aug 23 01:03:46 2025 GMT
Not After : Aug 24 01:03:46 2025 GMT
Subject: CN=9845ae26813bb1d12d116e9b397e7dfdda2927f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:00:ca:01:92:b5:e5:18:43:28:cd:c7:04:
06:17:d5:eb:f8:51:bb:df:ce:f6:a0:86:79:35:79:
e3:e4:49:58:92:b1:3b:ff:22:7f:5d:1c:4e:9e:5f:
4a:e9:90:c0:1d:29:e4:6e:b2:73:60:e5:ca:b6:b4:
cd:ee:46:ea:42:3d:cd:56:5e:23:57:12:64:d9:c8:
68:03:7a:6a:8e:e1:6c:14:98:d9:ba:71:b6:dd:32:
e7:8c:38:b4:4b:fc:53:5a:6b:3f:0e:39:fd:e7:c9:
44:56:4b:7a:8d:a1:5c:63:5b:34:93:61:cc:3e:d9:
8b:53:19:79:4b:62:f7:ce:4c:bf:c2:cf:55:4f:29:
b5:32:44:1b:f6:43:9e:55:c7:45:50:fa:4a:03:99:
9b:00:b7:b1:88:c1:d6:23:09:bc:d7:f6:0e:00:9c:
73:d0:7a:76:7b:47:17:af:68:92:40:d1:0b:ce:03:
d4:76:0f:f2:8d:aa:a7:8f:07:c6:10:c2:c1:90:51:
5b:f2:4c:33:5e:8c:be:7c:a1:75:2a:64:97:76:8c:
34:07:29:8c:ce:08:77:1f:5d:8c:27:2e:18:90:bc:
f8:5d:60:04:ed:23:bb:12:9e:a9:b0:df:f3:e4:34:
5d:67:2b:e4:60:14:23:a2:30:c0:3a:93:93:ee:9c:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:45:AE:26:81:3B:B1:D1:2D:11:6E:9B:39:7E:7D:FD:DA:29:27:F9
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b4:8f:9a:17:5d:dd:34:cc:cf:6d:66:56:4e:36:65:27:4d:
9d:a0:74:43:f2:21:d8:39:fa:59:87:0c:4b:21:7a:fe:3a:15:
82:45:a1:8a:80:13:d8:5c:63:0b:a9:43:6f:b2:bd:50:36:b3:
14:72:44:b1:09:c4:67:7f:08:73:e0:f1:a0:2b:c9:4c:a0:35:
de:63:53:7c:c0:69:7a:f4:05:ff:55:d7:68:96:97:b3:24:bf:
fd:02:92:ab:0a:32:56:fc:b9:98:33:74:91:47:8a:db:95:7a:
94:0b:d7:15:01:c5:99:0f:36:d4:ee:27:30:47:d6:45:34:7b:
26:6e:99:86:3b:52:5d:df:8f:69:b9:71:9f:51:1c:44:74:2c:
49:19:6a:70:91:7e:ad:e1:17:7b:e6:f7:60:0f:3e:9f:b0:ff:
f2:48:ab:e6:56:c2:fc:9b:ad:b5:cd:e1:84:80:a0:3a:f8:39:
68:6d:5a:34:cd:ed:ec:54:8d:76:3a:ed:46:95:29:87:f5:3a:
3e:1d:27:67:bc:9d:9c:e0:6b:5c:47:96:dd:81:5d:11:f2:73:
18:79:ab:5f:19:74:96:f5:5b:f1:b7:33:5d:86:ae:38:ab:d3:
b8:32:b6:4b:1e:87:72:d7:af:78:56:e1:96:21:1b:48:10:8a:
af:28:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:21 2025 by rpki-client