Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
File: xRlGjFXmvnFcDagFzvta7IXTKSY.mft (raw, json)
Hash identifier: 1PArftzYdTqLWNSph/2vYT5XztautdZ16QVRgqbJ4EI=
Subject key identifier: 59:26:21:41:15:8E:99:75:DE:BD:7A:25:37:84:AF:A0:F2:1F:B8:8D
Authority key identifier: C5:19:46:8C:55:E6:BE:71:5C:0D:A8:05:CE:FB:5A:EC:85:D3:29:26
Certificate issuer: /CN=c519468c55e6be715c0da805cefb5aec85d32926
Certificate serial: 01984778475780987406FDDE3C975FC13E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
Manifest number: 0EF9
Signing time: Sat 26 Jul 2025 16:02:01 +0000
Manifest this update: Sat 26 Jul 2025 16:02:01 +0000
Manifest next update: Sun 27 Jul 2025 16:02:01 +0000
Files and hashes: 1: xRlGjFXmvnFcDagFzvta7IXTKSY.crl (hash: tOHykqzPr1RqPtX/N+s/sKijbJv+mLfpFdE80srV/7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:47:57:80:98:74:06:fd:de:3c:97:5f:c1:3e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c519468c55e6be715c0da805cefb5aec85d32926
Validity
Not Before: Jul 26 16:02:01 2025 GMT
Not After : Jul 27 16:02:01 2025 GMT
Subject: CN=59262141158e9975debd7a253784afa0f21fb88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:0c:55:cb:f1:c8:ef:a9:92:05:38:02:2e:
50:70:46:17:43:7b:dc:c7:17:2a:aa:7b:32:66:93:
5a:13:ed:ec:a9:e6:6b:e3:1a:69:97:ca:c4:6b:e1:
e9:36:c1:18:36:bf:5b:bc:11:06:e2:1d:df:f0:6c:
a3:f0:92:f2:ba:bd:ab:31:95:da:cf:9e:f7:e5:65:
ee:b8:34:f5:64:51:ab:c5:37:46:bb:2e:08:78:ff:
9d:0b:73:56:10:f1:31:c4:95:76:3b:f0:a5:12:b4:
c1:8c:ed:3c:c9:7b:97:77:bf:38:75:ce:08:0c:f4:
51:36:17:8a:63:4a:6d:72:af:92:de:1e:45:e9:fb:
ae:b7:91:e9:f2:d1:93:eb:e6:f2:ba:d4:1a:65:59:
82:2c:d6:44:9e:93:3e:7c:b2:40:33:f5:7e:7b:45:
a7:a5:28:e0:54:8b:87:b8:58:3e:b8:8d:4b:5f:d9:
1f:f7:8b:af:0f:74:48:4a:82:67:ee:75:95:1a:c1:
0e:ba:73:e5:0d:6e:48:52:7b:7d:4a:57:67:f4:ef:
2d:b7:ed:4b:1f:57:e0:8e:45:8c:6c:4e:ab:ad:30:
84:d2:c4:75:38:94:ab:e2:fa:62:ee:70:3b:26:e5:
1a:7e:a1:6e:50:f0:60:85:94:01:78:03:f2:af:41:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:26:21:41:15:8E:99:75:DE:BD:7A:25:37:84:AF:A0:F2:1F:B8:8D
X509v3 Authority Key Identifier:
keyid:C5:19:46:8C:55:E6:BE:71:5C:0D:A8:05:CE:FB:5A:EC:85:D3:29:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRlGjFXmvnFcDagFzvta7IXTKSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ca2c3-e20f-494e-b1ce-6a71b844ad66/1/xRlGjFXmvnFcDagFzvta7IXTKSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f2:8c:9e:ba:9e:6d:41:9e:48:e9:9a:cf:1f:4a:05:8b:77:
d6:e7:7f:04:02:8c:aa:d9:5e:89:ae:04:c3:3e:91:09:52:0a:
8b:45:5a:4b:25:b2:04:ca:c4:2c:8c:fb:cd:80:e1:8a:b1:c1:
e6:6f:91:56:8f:26:1c:fd:4b:58:39:54:23:1f:c5:2a:ac:88:
8d:85:44:f1:27:80:76:94:c9:ba:cf:a4:2f:0f:1a:8d:55:be:
17:d1:99:88:c5:13:2c:2b:34:3e:70:ac:18:70:e7:e0:31:39:
af:a4:e5:5c:f9:da:e3:46:1a:fc:af:ec:e1:92:34:0c:1b:f3:
ca:24:ef:d5:b6:b8:f4:28:fc:2d:7f:84:d3:a3:5f:d4:4e:a4:
2b:f3:c1:c2:41:b5:e7:10:0b:56:c4:6f:4a:0a:f3:21:41:7e:
55:f2:19:8d:d9:0e:22:e0:4a:12:40:54:3b:c3:80:32:b5:83:
2a:b8:90:cf:64:06:61:c7:13:e4:65:05:4d:84:ba:06:51:8f:
a3:6f:fc:2b:c0:48:74:f1:65:1d:ce:98:61:8f:04:21:a3:7c:
54:0e:d8:39:e8:eb:79:ee:b4:05:12:44:93:dc:99:ee:a4:d0:
26:f6:50:7b:6e:5c:12:8e:40:15:c7:ec:50:c8:49:08:f8:29:
f5:6d:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:23 2025 by rpki-client