Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: SxYYAeOf64vCOamgkpd8T239Rl2B5mS5MW2mSKQE0WQ=
Subject key identifier: EA:6F:17:B0:2F:77:D9:9E:0E:BA:73:89:B5:53:CE:2B:B2:89:C5:9A
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 0198518CAB075BF8538A6E5B7CF710CBAFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 038F
Signing time: Mon 28 Jul 2025 15:00:29 +0000
Manifest this update: Mon 28 Jul 2025 15:00:29 +0000
Manifest next update: Tue 29 Jul 2025 15:00:29 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: ebnsWoj6c6PDC99pRdcOlrl6acqhl4qNNx/p344si90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:ab:07:5b:f8:53:8a:6e:5b:7c:f7:10:cb:af:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Jul 28 15:00:29 2025 GMT
Not After : Jul 29 15:00:29 2025 GMT
Subject: CN=ea6f17b02f77d99e0eba7389b553ce2bb289c59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:e8:32:82:3a:d0:b7:09:88:94:c1:ea:45:
68:30:5b:c1:84:d5:b4:ba:45:51:d3:84:29:b7:7a:
3b:22:ab:96:d1:64:42:04:57:54:4d:de:ad:c3:d7:
9e:4d:a5:de:20:87:22:b2:a0:50:d5:6d:b3:eb:10:
90:22:7c:d4:97:12:aa:ca:af:24:30:75:ca:54:a0:
3c:cf:56:ce:0a:00:3c:78:70:12:c7:47:6f:45:4d:
21:84:39:05:9f:64:1d:0f:fa:13:fc:58:57:0b:22:
5d:55:68:b1:5d:da:8a:2d:7a:48:3c:5e:39:eb:21:
37:ab:7b:28:e5:00:06:fa:2c:5d:89:77:2d:f0:6a:
76:16:53:e3:e8:d2:a8:b2:bc:04:51:dd:b0:30:cc:
0f:29:ce:64:2f:d3:4a:42:a3:f6:fc:5c:c4:9b:ee:
98:48:d5:81:7e:76:1d:74:a5:38:fe:97:46:a5:cf:
79:4a:41:dd:30:94:ff:a1:26:e0:0f:56:fa:e0:d0:
e4:c8:00:0f:f5:4a:43:d7:0e:ef:2d:e1:7e:11:1f:
28:ef:d8:f2:3a:47:34:4c:7f:fa:f9:33:31:7f:9c:
ae:48:99:93:bc:3d:8f:14:02:73:87:e9:a6:61:4d:
7b:21:2c:04:0c:1e:4c:2b:1f:34:67:c3:5b:7b:73:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6F:17:B0:2F:77:D9:9E:0E:BA:73:89:B5:53:CE:2B:B2:89:C5:9A
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9c:4a:5b:23:fe:c1:35:70:5c:01:30:4c:ec:2a:4c:00:85:
db:e9:ff:f4:17:ac:f2:9b:61:56:52:7c:8b:4f:70:2a:6f:ef:
e7:26:90:49:ca:6f:d4:24:e0:d0:83:43:12:e8:91:22:a5:b2:
4c:17:44:cb:32:86:4b:8c:67:92:b0:42:c0:1b:76:31:2a:8b:
dc:dd:ea:e1:b2:40:3f:63:e4:a3:7a:3f:65:15:dc:dc:9b:87:
dc:3e:6f:e5:41:d8:07:90:d3:93:5b:f6:79:0f:e6:03:82:ca:
6f:cf:92:9e:82:f3:ff:f0:58:a1:70:66:70:0d:ba:02:45:76:
18:de:7a:87:15:0d:8c:2b:36:fe:12:ea:8d:58:8e:73:31:fe:
6b:7c:de:6e:1d:74:89:b7:a2:08:c4:dd:3c:1c:b6:6b:c7:ed:
2b:22:63:a8:40:70:bb:3c:6d:7b:b7:13:64:9d:1c:7b:16:e5:
0a:90:93:77:77:4e:1c:96:5e:30:ea:21:1c:f7:55:b5:60:c2:
d1:f5:76:c8:54:46:be:77:a4:9e:d1:e8:de:bb:dd:fc:99:61:
41:7d:eb:73:1a:67:9f:98:1c:59:cf:14:d1:2f:45:05:c0:98:
e5:48:38:62:02:ac:59:22:ff:07:6a:b3:6c:01:36:a2:c6:40:
cb:4a:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:07:14 2025 by rpki-client