Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
File: xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json)
Hash identifier: SGLtPuiTmCDGENK9fMoIW/HEZKWo16EcC6nWb0wEYns=
Subject key identifier: 1F:4B:D1:4C:CD:B6:FD:20:33:3D:7C:47:90:DC:B7:70:79:72:4F:2D
Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
Certificate issuer: /CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Certificate serial: 01984EC2A46CD71B41D7EB24A6F2E8A8755E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
Manifest number: 0D27
Signing time: Mon 28 Jul 2025 02:00:35 +0000
Manifest this update: Mon 28 Jul 2025 02:00:35 +0000
Manifest next update: Tue 29 Jul 2025 02:00:35 +0000
Files and hashes: 1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: TGY8qhQEPbC3CNKkNz/12hKFOCR4BCP2LE2HcjgiahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:a4:6c:d7:1b:41:d7:eb:24:a6:f2:e8:a8:75:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Validity
Not Before: Jul 28 02:00:35 2025 GMT
Not After : Jul 29 02:00:35 2025 GMT
Subject: CN=1f4bd14ccdb6fd20333d7c4790dcb77079724f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:cc:d9:dc:0e:a6:09:20:fa:4c:46:73:a2:
21:94:31:b3:f9:7c:08:79:34:6e:11:ca:a4:b4:04:
68:c2:5c:51:0f:56:f4:de:ec:6d:ce:4c:07:90:fe:
50:c4:c1:5c:53:a6:4e:8a:2c:a6:32:eb:36:3c:5a:
b0:9b:8e:cd:e1:68:03:ec:4a:57:92:55:4a:17:70:
1f:74:b3:84:33:d3:bf:98:1a:47:a4:3b:ea:a1:20:
bf:c2:2f:ed:c6:d8:4c:4e:66:b0:98:3f:45:d6:2e:
29:e5:12:75:36:cb:0d:b3:9d:27:de:15:69:71:29:
34:4f:32:69:df:64:1a:5c:1c:ea:43:87:fa:c3:c0:
3d:18:1b:a5:04:b5:53:2e:0c:14:9a:ee:66:9d:61:
95:67:01:bc:df:27:fd:af:32:40:91:64:36:34:e9:
18:4f:1c:c8:4d:c0:82:a1:cb:8a:a4:df:7f:15:8c:
94:3a:92:0f:2b:14:c9:d0:6e:b5:5a:ef:ac:0d:2d:
82:8a:88:52:1c:7d:da:5f:2d:ab:55:86:28:73:88:
95:40:40:0b:88:c0:33:28:d4:54:1a:b2:0d:71:16:
23:11:a0:61:02:17:9c:a7:cb:d3:38:14:34:dc:34:
32:59:5c:2d:b2:32:ed:72:40:00:7a:7e:ba:70:48:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4B:D1:4C:CD:B6:FD:20:33:3D:7C:47:90:DC:B7:70:79:72:4F:2D
X509v3 Authority Key Identifier:
keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0a:1d:c5:2b:0e:51:82:f6:f0:b7:17:6e:e2:1b:e8:8b:66:
ad:b3:36:9c:a1:39:3f:e6:42:c8:30:76:d5:40:14:68:4d:43:
ca:f7:fc:ce:88:f9:f4:1b:95:d9:44:c0:13:03:70:16:79:25:
a0:56:6e:f8:0c:14:2a:27:ba:6f:dc:f5:d9:ea:a2:b0:59:bf:
08:b0:e3:01:e5:35:34:76:9a:56:90:92:ea:22:2f:ec:d7:ee:
6c:b7:e0:3d:12:cd:3c:cb:7a:a4:9e:25:d6:88:03:16:22:b4:
7d:29:58:89:9d:d0:16:3b:2d:17:25:f6:66:be:5f:4d:88:ed:
8d:49:5f:5b:07:ae:34:a8:1f:6b:12:7f:0d:53:81:e6:c8:cb:
90:3c:09:7a:c8:48:85:e3:13:60:cc:7b:8f:1e:51:3f:be:04:
92:c3:4a:82:f3:22:9f:4b:cf:c0:97:a7:ee:c1:20:8b:fb:81:
2f:77:c9:a6:25:c7:e5:94:94:9a:d1:30:68:33:a5:da:63:a1:
ec:18:ea:83:4a:be:ad:b5:bc:f2:1d:23:aa:be:14:c0:48:31:
49:31:e3:90:6b:5c:4c:bd:08:3e:32:2f:28:dd:06:83:c8:e8:
55:3d:31:6b:52:cc:b2:06:04:da:e5:e6:ee:7c:85:ce:c7:63:
cb:86:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 11:05:27 2025 by rpki-client