Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: YVGfV0y7FgThsYR0v9x3eWmIxGd1U5kkkMGjHs+VUgY=
Subject key identifier: 28:60:5C:1B:11:C1:1C:96:C2:DE:8B:8D:47:0F:73:02:6B:87:36:C9
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 01984A419FBF825C0B0569349D33BA46D4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 02DC
Signing time: Sun 27 Jul 2025 05:01:11 +0000
Manifest this update: Sun 27 Jul 2025 05:01:11 +0000
Manifest next update: Mon 28 Jul 2025 05:01:11 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: HXNWod1YRxBujgyhhr+RdLSZNgwfNJ+UoyaZUtNGZuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:9f:bf:82:5c:0b:05:69:34:9d:33:ba:46:d4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: Jul 27 05:01:11 2025 GMT
Not After : Jul 28 05:01:11 2025 GMT
Subject: CN=28605c1b11c11c96c2de8b8d470f73026b8736c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b1:ad:83:ac:a3:78:2d:af:ab:cf:79:d6:12:
96:7c:ad:4b:7a:35:d7:0e:af:82:fb:24:71:0e:0c:
cf:56:5e:df:70:a5:e3:58:0d:c0:7b:82:02:95:fe:
b0:3a:82:0e:37:f3:3b:c5:af:ca:d8:88:8e:99:e9:
63:7b:7a:ca:50:09:da:14:17:8b:a9:f3:3b:fb:a8:
48:9d:3b:a1:13:cd:fe:47:f2:36:c4:96:15:4a:91:
24:17:b9:a2:63:90:ea:54:62:4b:96:cf:5a:56:88:
d4:b0:0c:ab:5b:7b:85:2a:ca:64:1c:11:77:66:75:
0e:62:54:62:88:8e:59:2a:52:08:8b:16:6b:d2:7c:
aa:77:77:f8:22:d8:94:70:5d:ad:53:30:13:95:09:
2f:0a:17:a6:7b:c2:4b:56:6c:d0:15:df:4d:52:35:
44:21:de:52:e6:82:42:6d:55:72:0a:36:e9:78:e0:
cd:5e:ab:ec:4c:74:a6:ae:0f:86:73:fa:6f:3e:13:
6a:c3:5b:35:66:91:6a:5e:ed:68:c6:53:ba:36:0a:
98:6f:9e:54:14:e6:73:3e:7d:31:b0:24:64:0e:e0:
f8:dc:ec:84:54:85:e9:57:29:fa:bb:a9:7c:ae:09:
b0:cf:79:56:08:5e:4e:ff:55:5a:95:9b:a1:db:a2:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:60:5C:1B:11:C1:1C:96:C2:DE:8B:8D:47:0F:73:02:6B:87:36:C9
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:76:60:e9:88:f9:04:45:04:7d:76:e8:40:99:47:ec:82:9c:
42:aa:0e:d7:a9:a4:0a:e0:66:40:a9:7d:86:62:f4:69:4e:43:
6c:d4:61:28:d3:5a:2a:98:90:4c:bb:f2:1c:42:b9:89:c5:8d:
ff:1f:05:04:13:46:50:64:5e:dd:c3:ff:5b:d7:57:b4:78:48:
74:e4:2b:7f:08:9c:2b:2e:00:9b:c3:af:bb:5a:8d:9c:d0:e6:
d6:6a:d5:37:e5:c2:5c:a3:0a:b4:88:63:46:63:30:f5:e3:79:
28:25:c1:5e:cd:43:53:5f:d0:99:9c:f5:13:ef:31:18:49:be:
b1:c4:a1:17:8d:fc:4e:f1:e3:6c:5f:f4:c1:3e:cc:19:e4:ce:
4b:b0:0a:cd:8c:d1:d7:b2:68:45:96:5a:6c:2c:3a:0e:22:6d:
2a:ee:5b:59:bc:75:38:64:48:dd:ed:a6:a0:f1:7d:d8:4a:2a:
86:f0:e5:86:f4:a0:76:11:3a:80:7f:84:84:ac:28:9b:fe:b9:
a8:42:b7:12:52:8d:b1:08:7c:09:b6:2d:33:f5:8e:8b:99:27:
51:ff:0f:71:45:19:4b:87:4f:7e:f7:b3:cd:1e:30:fd:18:c3:
61:35:8f:bb:dc:8d:62:e1:0e:97:b1:81:6b:11:7a:48:ef:0e:
df:e9:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:40:26 2025 by rpki-client