Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: 10vB46jV1+sPvY3J1r/AuY1gKsA2iY8OW3MjuwzGP4Q=
Subject key identifier: E7:CC:A7:19:0D:BD:D6:25:C4:36:8C:07:36:90:04:2B:87:3B:7F:01
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 019849654CEFF1BDB9B4A89A7B70AB95C57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:00:32 +0000
Manifest this update: Sun 27 Jul 2025 01:00:32 +0000
Manifest next update: Mon 28 Jul 2025 01:00:32 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: pcBKTixYAOqzPpKpudiMl5lbKKYj2lfCuqiDJGAPbEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:4c:ef:f1:bd:b9:b4:a8:9a:7b:70:ab:95:c5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Jul 27 01:00:32 2025 GMT
Not After : Jul 28 01:00:32 2025 GMT
Subject: CN=e7cca7190dbdd625c4368c073690042b873b7f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:60:08:a8:08:9d:a8:d0:3e:da:48:e3:b8:
2e:90:d8:a0:83:4e:39:1d:ed:25:ed:07:f4:d4:fc:
71:b6:39:f8:5c:fc:a4:77:1f:a3:44:20:c6:0f:79:
d5:75:33:0d:43:21:82:da:3b:e4:db:74:92:f5:b4:
d3:75:9f:78:a3:02:07:df:a7:f4:73:17:00:74:c5:
6f:54:8d:7e:3a:02:97:71:c7:fb:88:8c:fb:42:5e:
d9:45:4c:7f:2a:b7:90:55:d1:c9:de:f7:3c:39:92:
73:99:82:2e:19:7b:84:b9:91:9c:9b:8c:53:ee:fd:
a7:9d:ba:70:e7:98:28:c4:28:dd:2a:96:9f:31:79:
4a:ae:dc:83:7b:a7:4b:f4:d0:7f:2c:f5:b7:4b:6d:
64:d7:e2:07:cd:8e:15:be:2c:9c:a3:b8:17:1b:ca:
86:d1:b2:f5:63:67:1d:c1:34:56:ec:2a:04:09:79:
2b:d5:ff:80:88:92:41:24:92:ba:5b:23:c2:b7:9a:
43:b4:23:ef:cf:80:3e:43:06:b0:e1:2e:d2:69:84:
b3:03:f6:03:91:8c:9e:ef:41:d8:6e:ca:94:ac:42:
f6:a3:41:18:3e:f7:3b:6d:90:30:98:d8:20:78:0a:
cc:28:57:36:b9:ff:42:f7:37:7a:8b:ac:e5:f1:11:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CC:A7:19:0D:BD:D6:25:C4:36:8C:07:36:90:04:2B:87:3B:7F:01
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:73:83:52:f0:41:2c:30:04:7c:86:a7:b1:a0:62:4c:53:94:
26:d5:07:ec:4b:ae:45:8f:4a:3f:fb:e1:12:67:6c:b8:9c:f6:
eb:43:5c:c5:06:6b:65:5f:e5:a7:0b:37:1c:d0:01:65:80:79:
4c:31:1c:f3:91:7f:b5:64:8b:67:24:aa:16:af:7c:80:43:f4:
c1:55:ce:fe:87:e9:6f:c9:c3:0f:c9:9c:03:36:7b:e8:ce:e2:
f7:1e:76:29:57:88:98:48:1d:13:e3:0c:0c:a0:5e:93:13:c6:
32:5f:a2:59:3b:f4:cc:59:8b:0b:ab:5c:77:cd:15:fb:78:ec:
32:4d:11:e8:6c:3c:33:f5:6f:b7:fb:be:67:8d:36:cc:41:01:
73:b0:79:4c:b2:cc:3e:25:47:36:3e:8d:55:81:45:44:8b:4a:
04:bf:2a:36:cb:1a:4f:2a:b8:6f:5f:9b:02:5a:2f:d4:7e:24:
ab:75:b6:8e:e5:a1:09:a2:a9:f9:ee:d7:68:69:74:dd:d2:6f:
ba:ba:ed:ed:a8:3b:07:c1:2d:71:f4:1e:32:93:54:af:1b:3f:
6c:89:dd:bf:24:23:ec:7f:00:5e:b7:da:80:02:6b:c4:47:17:
af:ca:09:52:68:33:87:a8:e4:4c:86:88:88:e8:e9:64:ca:e5:
81:ff:73:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:30:48 2025 by rpki-client