Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json)
Hash identifier: auFvGGEWZZMwiSFiQzZjhrLOd/m9689TCndTIXF11p0=
Subject key identifier: 04:59:A7:A1:89:CA:30:E6:66:BA:94:63:36:75:A2:81:29:19:AC:BA
Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Certificate serial: 019849D39CDAF94BE178052510EDD6C6A6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
Manifest number: 11E8
Signing time: Sun 27 Jul 2025 03:01:01 +0000
Manifest this update: Sun 27 Jul 2025 03:01:01 +0000
Manifest next update: Mon 28 Jul 2025 03:01:01 +0000
Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: 3BXFYKzW/AWYa9ffjsJEzvl5kF8FTaYuDjxMyjiJI78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:9c:da:f9:4b:e1:78:05:25:10:ed:d6:c6:a6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Validity
Not Before: Jul 27 03:01:01 2025 GMT
Not After : Jul 28 03:01:01 2025 GMT
Subject: CN=0459a7a189ca30e666ba94633675a2812919acba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:b4:47:fe:bb:4e:89:be:a8:30:bb:ae:80:
7e:34:26:d8:98:e1:bc:2d:f9:49:33:47:57:16:cd:
50:ff:38:7b:a3:cf:4b:93:c6:f0:73:89:e3:db:bc:
eb:93:f6:08:15:91:d0:22:b4:a0:14:d0:77:b2:41:
6c:ff:55:3f:88:bd:e9:53:21:49:6b:1b:df:6c:65:
83:a2:1c:a4:dc:c8:e9:2a:e1:1f:70:83:8d:e0:3f:
ea:43:90:c7:cc:1f:21:3f:52:e6:d6:0a:7f:04:4c:
a9:41:3e:b0:81:24:3b:72:d1:b1:96:31:26:8d:7c:
a2:3c:a0:29:6f:76:26:8f:e2:f3:66:a5:e1:6d:4f:
c9:8c:88:27:88:15:fa:2f:28:0a:d7:e3:55:07:e2:
9a:30:3b:62:ee:78:b2:f9:f8:b6:5c:93:5b:96:22:
2b:23:5c:96:74:ed:87:6e:c6:d2:6b:f6:d2:1b:3c:
6d:b8:9b:d4:8b:bb:18:29:5e:ef:f1:3e:78:15:9c:
48:3f:f4:d1:c1:6b:5a:2a:80:4a:6c:aa:b0:a9:2c:
2e:9a:e0:6b:e4:2f:4d:9f:8a:5a:00:2e:45:80:94:
e2:9c:16:50:d1:f4:18:9a:11:e9:b9:69:92:3b:88:
f9:5b:68:e2:88:ee:5b:75:00:ed:3b:f8:fd:49:4b:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:A7:A1:89:CA:30:E6:66:BA:94:63:36:75:A2:81:29:19:AC:BA
X509v3 Authority Key Identifier:
keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:be:be:b0:65:ad:fe:6c:10:a0:cf:c5:4d:7c:de:a9:a5:12:
23:13:c7:59:ba:77:1b:6c:ad:fe:62:01:4e:fa:c5:39:eb:67:
8e:22:10:92:1b:04:3f:62:82:b4:a0:c1:8f:18:95:9b:aa:7a:
15:08:f9:0a:d5:14:50:79:60:0a:69:3c:53:26:8f:5a:54:c4:
01:1f:86:29:b1:2b:63:97:d7:71:0c:09:0b:bd:e3:14:d5:f3:
d9:c9:70:22:a4:0d:eb:2c:5e:7f:9f:ee:ab:fd:bc:fd:d7:8f:
cd:96:71:3c:4d:84:12:42:0b:70:73:92:a8:72:5f:88:c2:11:
5d:1b:74:2a:d2:ba:9e:d6:20:31:b4:a0:e7:33:4d:66:4f:d5:
bd:fe:4d:31:4b:05:58:d5:dd:fe:a3:67:1c:1b:10:65:80:45:
da:53:c7:41:41:01:73:31:dd:53:0a:18:09:1f:4b:9f:47:01:
ad:96:ef:4f:25:67:cd:a5:d8:9e:94:e6:44:45:3c:74:89:ee:
c6:44:40:75:93:f7:28:ee:1a:91:db:e1:d7:cb:dd:09:63:a7:
00:28:9c:5a:4a:ea:a0:5a:0d:cb:43:d5:52:f3:d7:c9:0d:ed:
a5:f0:b5:b6:81:67:f7:af:39:f3:c7:a4:1c:54:34:4c:ea:78:
df:77:97:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:36 2025 by rpki-client