Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
File: xRvfUzN6yxiydpUsNX6RmAvMWww.mft (raw, json)
Hash identifier: P9I7z/tzZAcLWx/07BuaDxTqHJTnhmBKgRbTXj/9dT0=
Subject key identifier: 56:F5:29:65:E7:4B:EB:A2:D0:E5:64:11:58:DC:D4:FA:19:2B:5C:6C
Authority key identifier: C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
Certificate issuer: /CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Certificate serial: 01983DCFCC774AB36125627A98406B03A024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
Manifest number: 0A0A
Signing time: Thu 24 Jul 2025 19:01:24 +0000
Manifest this update: Thu 24 Jul 2025 19:01:24 +0000
Manifest next update: Fri 25 Jul 2025 19:01:24 +0000
Files and hashes: 1: xRvfUzN6yxiydpUsNX6RmAvMWww.crl (hash: hmSZ4yWButcTDQ04XsaA7g5hOkhx4ytMxO5A5XH7NY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:cc:77:4a:b3:61:25:62:7a:98:40:6b:03:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Validity
Not Before: Jul 24 19:01:24 2025 GMT
Not After : Jul 25 19:01:24 2025 GMT
Subject: CN=56f52965e74beba2d0e5641158dcd4fa192b5c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:95:5a:2a:8c:ec:fe:01:c9:68:4f:60:37:
38:4c:b0:6e:4f:60:d6:4a:3c:14:91:40:b8:f8:4d:
0a:06:39:80:54:f5:cf:92:36:af:c9:8f:8a:2b:ec:
ed:97:6d:b2:66:1f:f0:3e:c6:71:2f:21:2e:d8:63:
01:ce:5b:28:e9:da:71:10:a0:43:25:ea:56:85:82:
98:ba:2f:01:c1:51:ff:e4:0d:85:64:0f:fc:e7:a8:
f3:f5:fa:f9:63:30:35:bf:4f:dd:d9:bb:cd:be:52:
e7:77:22:bd:a2:de:da:e4:f7:dd:74:e4:68:7d:17:
47:38:78:5e:c8:d8:77:a6:5b:d6:54:2d:83:62:4f:
6b:32:67:79:d3:52:8b:87:6a:21:45:00:ea:cf:7d:
4b:1c:03:b7:07:f1:af:4c:a3:65:5d:fe:71:5e:26:
aa:ea:e8:2c:56:4d:5f:ea:00:c7:ff:99:3c:52:56:
8d:26:55:99:ba:37:21:a4:b0:c8:46:71:b9:41:b2:
47:c6:77:67:08:ea:b3:4c:e0:b6:dc:f9:18:21:f6:
d9:4d:97:c1:de:52:0e:b5:d9:1b:a6:ff:0a:62:7c:
71:9c:66:29:3a:e4:99:5f:93:1b:77:a6:d8:59:63:
c4:fa:ba:b0:2e:45:75:35:52:c9:c5:9f:3a:bc:8e:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:29:65:E7:4B:EB:A2:D0:E5:64:11:58:DC:D4:FA:19:2B:5C:6C
X509v3 Authority Key Identifier:
keyid:C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f0:93:a6:10:f1:af:aa:7d:48:cc:0a:df:83:33:49:be:ef:
5f:ee:e9:99:cb:86:0b:f8:58:fb:3f:c4:0b:d0:c2:dc:49:4d:
14:e5:62:01:73:1d:bf:2e:fb:98:b2:71:63:75:86:55:49:6d:
35:b0:29:6a:2f:db:b4:64:be:8f:b7:b5:36:d1:35:e5:fd:87:
36:47:44:92:e6:28:36:ec:ac:87:bf:3f:58:45:74:23:3b:19:
01:9b:07:7b:a4:1b:9b:ba:2d:32:87:aa:6c:43:ff:87:4d:12:
c5:b5:af:a7:db:b2:8b:df:92:19:95:19:97:9f:e5:30:f7:42:
8b:ae:4c:72:2c:8d:e8:18:8a:a2:a5:48:43:79:bf:33:c4:25:
5c:45:25:b6:f2:a8:79:13:d4:4a:43:a7:32:c4:9e:7d:a3:34:
a6:5d:36:98:c9:9e:54:a7:6d:db:fe:67:01:1e:ac:51:dd:88:
22:87:df:81:9f:d2:f3:2e:0d:fd:71:4b:51:e9:75:e6:ef:6e:
95:1b:9b:15:31:ce:a1:3a:26:e8:8a:24:2f:36:61:ca:b0:cd:
2b:76:e4:82:49:f5:58:6c:5f:41:57:7c:66:c2:a3:45:6b:4d:
74:f4:e8:4c:8c:88:2e:19:d6:ba:66:98:8b:3c:46:09:7c:7e:
ae:bc:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:34:37 2025 by rpki-client