Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
File: xDzur3eV-33zSLBLIn5QpJoaG3w.mft (raw, json)
Hash identifier: 0pn96fgOcd/vKwdyELvWbbb4KropAAWn+rVhZT9ohhY=
Subject key identifier: C4:A5:E0:92:5F:7C:4B:91:49:30:36:C1:D0:F3:C5:CF:59:93:6C:01
Authority key identifier: C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
Certificate issuer: /CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Certificate serial: 01984475E176B5BA242956D339549A0FDE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
Manifest number: 1338
Signing time: Sat 26 Jul 2025 02:00:32 +0000
Manifest this update: Sat 26 Jul 2025 02:00:32 +0000
Manifest next update: Sun 27 Jul 2025 02:00:32 +0000
Files and hashes: 1: xDzur3eV-33zSLBLIn5QpJoaG3w.crl (hash: 9QAnSjy+GKkHww+d2JC27R3AhRi/WX/shtRz2bMZJtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:e1:76:b5:ba:24:29:56:d3:39:54:9a:0f:de:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Validity
Not Before: Jul 26 02:00:32 2025 GMT
Not After : Jul 27 02:00:32 2025 GMT
Subject: CN=c4a5e0925f7c4b91493036c1d0f3c5cf59936c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:cc:5d:ae:59:ff:24:16:6f:11:fe:4c:af:
ba:a5:b2:fd:3b:b2:4b:2e:54:31:09:86:3c:3d:03:
30:0e:83:4b:1a:41:f8:d7:10:3c:93:c4:fc:ed:94:
96:ac:69:61:1b:b3:e2:69:ca:a0:8f:e4:c1:02:cc:
8b:49:ef:f3:92:08:2f:26:9f:70:dc:43:a1:c2:42:
7b:70:53:e6:c4:5f:72:f6:1e:48:09:05:55:3e:0d:
eb:00:ee:3f:14:89:60:31:fe:cc:1e:ad:28:5c:00:
e7:b9:9f:1e:47:24:c8:6c:52:b3:1a:2a:1c:59:4b:
dc:57:f7:f8:61:c1:93:bc:d8:6a:0b:49:72:fb:1b:
d4:23:4f:49:de:5b:95:ee:14:b1:60:8e:78:ff:81:
42:f4:15:ab:0e:d8:5f:0a:0c:12:96:40:d3:d6:19:
9d:90:2d:dd:ac:21:21:e5:96:06:9b:87:f1:ae:d9:
ae:68:5f:bf:29:f4:00:93:a9:3c:af:de:b7:68:fd:
19:9c:b4:83:4f:e4:0c:b1:fd:60:b1:3a:f4:48:cf:
3d:77:27:3f:17:63:b8:e9:c7:1a:3c:86:ea:ab:f1:
ae:91:27:ac:ad:8d:94:0c:1e:aa:84:05:4a:f9:26:
fb:a4:38:9b:58:be:95:24:f4:86:ec:81:66:da:bd:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:E0:92:5F:7C:4B:91:49:30:36:C1:D0:F3:C5:CF:59:93:6C:01
X509v3 Authority Key Identifier:
keyid:C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:08:cd:6b:2b:92:31:6b:6a:0e:62:24:d8:88:96:ab:12:7d:
3e:d0:8f:41:e0:12:4e:87:a8:e9:4c:c0:69:84:fe:5e:3c:c6:
82:3f:0c:7e:4c:8e:29:bb:a4:4b:12:08:43:94:f5:94:c9:9e:
a2:1f:9d:9c:63:e7:28:74:1e:c6:41:c6:aa:2d:7e:e2:a9:f2:
de:c5:d7:ee:b9:33:7e:97:34:d7:d5:d3:60:84:32:08:db:86:
3b:59:07:3d:af:34:ab:2c:cc:31:ad:76:ae:b7:f9:23:a9:5f:
2e:8e:28:b5:e9:8f:de:c6:05:24:d8:f2:be:d2:d0:ce:9b:c8:
61:8a:75:dc:c2:fd:3e:94:ad:64:cd:13:cb:e4:44:58:2b:fd:
f5:80:56:a7:eb:27:20:9c:ae:3e:59:99:7c:1f:b6:a5:b8:51:
00:fe:93:a8:24:7c:a6:49:73:a2:0b:d4:2b:17:eb:eb:e3:fa:
4e:b1:43:9f:92:a3:d6:c9:65:13:9f:a4:f1:21:f9:73:79:2d:
f9:0b:2b:ee:02:d1:81:f3:57:e5:a2:2e:0c:04:f4:cf:31:fd:
d8:e3:72:f5:ae:0c:5d:1b:38:94:db:88:b9:79:51:28:43:ab:
58:9f:74:8e:c8:3b:6b:30:d8:45:9f:e9:48:20:76:bb:c5:db:
6b:a3:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:21 2025 by rpki-client