Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: EYPVr/4N95uxbYpK4k8OBQ8uLqD0lKgMjtfb5ksdS34=
Subject key identifier: 0F:8C:8A:5E:E2:C7:B8:B0:7A:F6:35:D9:CA:4D:87:EE:03:45:8F:3F
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 01984A77DA851CE42EFCE3583D2BD0357A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 144D
Signing time: Sun 27 Jul 2025 06:00:25 +0000
Manifest this update: Sun 27 Jul 2025 06:00:25 +0000
Manifest next update: Mon 28 Jul 2025 06:00:25 +0000
Files and hashes: 1: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: bGA2ravB2SMVnEPTj2UBfFYQK+7GJdUUEigyxs5AZ/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:da:85:1c:e4:2e:fc:e3:58:3d:2b:d0:35:7a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Jul 27 06:00:25 2025 GMT
Not After : Jul 28 06:00:25 2025 GMT
Subject: CN=0f8c8a5ee2c7b8b07af635d9ca4d87ee03458f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:43:c7:ae:e6:96:2d:a7:2b:84:9d:25:1d:
14:83:16:ca:13:21:ba:d5:e7:c0:a7:a7:bf:53:44:
15:3b:0b:fa:d4:92:08:c6:5c:11:17:af:ce:bf:38:
96:fe:b8:e1:b2:cc:1b:e9:1a:3d:ff:a3:eb:68:3a:
f1:e8:97:49:f8:1f:f7:7e:a5:7e:b0:b9:83:4c:89:
8c:0b:f4:43:7f:55:a7:57:26:0f:34:af:28:77:4c:
c2:94:9e:0f:18:ff:06:27:ef:4d:4f:ef:57:0b:80:
b5:f0:e3:a5:a6:08:26:47:3f:f3:81:03:2b:86:56:
d0:23:e7:00:18:5a:39:45:dc:03:ff:c8:36:76:60:
36:ca:24:17:bb:75:e8:9a:8c:57:75:21:08:e8:a5:
8e:67:35:36:9a:b0:b0:8c:1e:e6:82:bf:61:3c:76:
e3:67:2f:cc:0d:f5:9b:bb:37:48:3e:0c:a9:87:72:
d0:2a:53:1f:3f:4d:f1:82:54:ba:7e:24:64:2b:73:
b4:45:a8:4c:23:26:db:be:9d:bf:00:d9:56:c5:0f:
38:eb:07:8b:44:d1:16:a1:aa:7b:58:9c:eb:c2:ff:
f2:14:2a:ce:0f:b7:00:64:6d:eb:a7:04:4c:89:0b:
a6:02:f7:cd:a0:d6:3b:a6:cd:d5:f1:c7:46:0d:d3:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8C:8A:5E:E2:C7:B8:B0:7A:F6:35:D9:CA:4D:87:EE:03:45:8F:3F
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:db:31:51:aa:ed:02:73:b3:0d:a2:55:6a:6a:72:9c:8d:91:
9a:d6:97:53:82:28:98:4f:dc:a8:27:0b:c7:30:4a:34:f3:19:
01:1b:30:be:a5:86:87:68:be:32:69:37:14:3b:80:10:58:3c:
eb:e1:b7:50:88:7d:88:53:82:7a:45:91:94:0d:24:fe:f5:93:
cf:8d:2d:4f:ea:fe:9d:9e:0d:5c:37:6f:49:08:38:dd:ae:c2:
db:cf:1d:0a:60:0f:82:45:c4:1f:09:19:82:1c:d0:31:52:9a:
d7:3d:c1:1c:09:77:21:fe:32:8b:72:4c:dd:f9:1d:b2:b5:bd:
b6:ce:52:82:1e:6e:4e:66:26:09:fc:b5:fd:4b:9b:ab:cd:19:
c2:9f:bb:d9:06:6b:c2:32:a9:12:b0:99:60:1e:97:4d:5a:55:
51:91:22:f5:f5:3a:5b:a9:ff:d5:6b:5d:30:17:e9:d7:80:56:
d8:a3:91:04:2b:72:f1:29:ec:09:ff:14:cb:20:bd:8a:eb:74:
89:6c:76:3b:16:63:28:77:ec:86:5c:e1:b4:4d:a0:9b:81:d1:
50:71:a0:59:67:53:7a:5d:2c:10:93:3a:da:5d:ec:78:ee:42:
18:6e:64:86:04:45:27:44:74:53:8e:98:79:6a:94:65:49:53:
30:d8:6a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:07 2025 by rpki-client