Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
File: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json)
Hash identifier: H8KncpnGL360wzOVh3tpAIM9dBKbVHNpuNAXJIQekxE=
Subject key identifier: 9C:19:CB:97:27:8B:87:C8:F8:11:4F:DF:A1:6C:5A:1E:5B:29:FA:38
Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
Certificate issuer: /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Certificate serial: 0198530E6B9D694B7242C393BE18C687B3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
Manifest number: 1602
Signing time: Mon 28 Jul 2025 22:01:50 +0000
Manifest this update: Mon 28 Jul 2025 22:01:50 +0000
Manifest next update: Tue 29 Jul 2025 22:01:50 +0000
Files and hashes: 1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: heIeLveS58n419oaMJi1wh63xh+QQUYtSfetws7WnLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:6b:9d:69:4b:72:42:c3:93:be:18:c6:87:b3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Validity
Not Before: Jul 28 22:01:50 2025 GMT
Not After : Jul 29 22:01:50 2025 GMT
Subject: CN=9c19cb97278b87c8f8114fdfa16c5a1e5b29fa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:34:77:a9:24:7c:df:a9:72:1a:8d:94:ab:
8d:17:f2:43:a2:ef:fb:4f:1c:3e:6d:ab:23:71:30:
57:a0:ea:d3:77:00:49:a0:41:d6:1b:6a:e5:e6:15:
6b:4e:e6:7d:08:86:7a:ae:db:50:56:0d:00:bb:9f:
96:33:58:b4:04:12:45:fe:7d:68:d8:ca:6d:bc:b8:
5f:2e:c9:27:f0:ae:00:b9:26:3d:65:e1:ac:73:16:
ef:1d:ca:5c:49:0c:f7:5b:94:78:7c:02:0e:94:09:
90:53:0c:fe:be:a3:5a:a3:ea:c0:e4:a4:0f:55:b0:
0c:40:69:4b:1c:a1:f2:1a:26:16:b1:d1:3d:f5:79:
6b:3f:d7:ab:1b:e0:d8:24:79:de:00:9d:a8:85:d0:
63:bb:18:ad:70:cd:a6:3b:46:48:e6:87:1d:90:55:
13:84:a4:cf:f6:46:a8:fc:34:49:9c:74:2a:b3:4e:
22:2d:88:a4:37:2c:a1:22:b8:61:e5:9e:c6:97:cb:
67:f4:63:b7:00:1f:2c:d1:70:72:0c:54:a0:ae:e2:
8e:01:87:ac:d6:12:bc:77:54:17:08:eb:48:dc:8c:
19:f5:40:1c:d1:55:a3:9b:03:bb:14:a7:20:48:2d:
37:11:f2:d5:a3:3b:0c:c1:e4:f8:15:3a:c2:ce:14:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:19:CB:97:27:8B:87:C8:F8:11:4F:DF:A1:6C:5A:1E:5B:29:FA:38
X509v3 Authority Key Identifier:
keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a9:fd:7d:de:a9:89:19:69:45:83:94:fa:25:9f:5a:db:5a:
bf:66:73:37:5c:f7:03:d8:ef:e5:a7:fd:dc:2e:d0:11:18:29:
6a:80:19:1a:bb:82:f5:c6:c9:35:74:d8:6f:57:8a:4f:37:0f:
77:93:90:73:08:f4:41:4a:51:1a:af:07:84:79:6f:9b:51:17:
03:8d:54:81:fb:f9:7d:2c:74:e7:c5:31:6b:87:bf:92:58:ed:
88:31:08:0a:56:eb:2e:8c:b9:8d:a3:38:c8:67:9f:3c:d0:2c:
c3:8b:2b:55:fc:59:74:18:b8:16:21:ea:47:b8:67:01:37:c5:
12:74:5e:b5:23:a7:71:e8:04:98:45:62:37:31:3f:ee:3f:14:
fa:42:9b:d7:be:e8:b4:12:8d:8b:60:a8:a1:86:ce:37:cc:78:
8f:35:85:60:6e:80:f2:67:8c:97:6a:d4:f7:a6:33:b5:22:53:
82:e5:87:58:3a:b6:74:60:d5:a5:8f:50:45:60:8f:d1:8e:19:
50:e3:b2:f3:3a:0a:5a:55:c3:e1:5d:16:8e:56:f0:37:cd:7b:
04:79:09:87:f8:d2:53:a3:b8:2d:e7:ae:a4:32:8e:4c:c2:5c:
cb:d7:43:0c:e1:61:66:f0:2e:e3:4c:51:97:f0:53:67:b9:53:
11:ab:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:25:25 2025 by rpki-client