Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier: 0G6P/xpSGGqpbwjZmWvNXZOtFD2x1OIJKXMiTihYFoA=
Subject key identifier: 2A:83:63:9E:BF:09:4F:CA:BA:43:30:03:88:04:81:A9:C0:01:CB:E9
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial: 019847E4C6522C6467001E4A95F15FEE6925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number: 0F00
Signing time: Sat 26 Jul 2025 18:00:31 +0000
Manifest this update: Sat 26 Jul 2025 18:00:31 +0000
Manifest next update: Sun 27 Jul 2025 18:00:31 +0000
Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: N1cylUDEeC2gUb1upDPiNVsQw+ttvR93mEJrN/QEsXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:c6:52:2c:64:67:00:1e:4a:95:f1:5f:ee:69:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Validity
Not Before: Jul 26 18:00:31 2025 GMT
Not After : Jul 27 18:00:31 2025 GMT
Subject: CN=2a83639ebf094fcaba433003880481a9c001cbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:7d:47:be:36:27:02:e5:76:13:9a:46:c5:
4a:76:c0:c0:1e:3b:a2:9a:13:3b:24:a7:39:b1:a2:
c1:9b:99:1f:71:d5:90:da:a9:e2:83:e7:47:66:89:
a5:5f:45:ec:46:c9:ac:a4:34:34:e2:c7:23:6d:42:
83:1c:72:84:d2:86:d2:d0:56:ab:25:dc:c3:68:07:
2d:cb:5e:15:6c:93:0c:cd:10:e8:cf:d6:63:49:d8:
c4:7e:4a:4a:c0:2f:f6:8c:5c:ef:9b:a1:47:92:f7:
f8:dc:57:ff:06:b2:b0:09:a5:ab:72:f9:62:4d:f6:
c8:85:f1:2d:83:70:12:39:04:be:7b:9a:81:2d:4c:
12:54:ce:8d:de:a5:e2:37:c1:be:5b:4b:88:f5:8c:
ad:32:61:d2:0f:6a:e4:61:08:79:b8:67:62:4e:6c:
c8:21:62:a8:b4:1d:73:6b:ce:94:89:2d:f8:f8:22:
67:c6:41:36:c0:91:f6:1a:54:aa:7d:7b:b6:e7:36:
45:45:91:a0:29:a6:ea:e0:d6:cc:39:f6:0e:56:94:
2d:08:6e:6b:25:3d:37:4d:32:ac:88:c3:89:9d:63:
80:5e:3e:c2:a7:89:0d:ef:27:91:a1:a4:93:cc:41:
d3:2d:41:6c:a0:60:e0:e6:78:14:05:3f:56:8c:4c:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:83:63:9E:BF:09:4F:CA:BA:43:30:03:88:04:81:A9:C0:01:CB:E9
X509v3 Authority Key Identifier:
keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:74:e2:48:16:fd:f9:3f:50:5d:60:ff:30:4e:24:51:46:e3:
a6:15:7f:69:de:32:13:cb:66:13:8c:71:ba:ca:eb:c1:0a:08:
f2:89:64:2f:9a:ee:10:ae:87:fb:20:35:1a:e8:1e:fa:4e:01:
44:20:95:7d:c0:0c:fa:65:73:d3:4a:b8:95:72:49:17:b8:e0:
f7:1f:74:3a:2d:29:ca:dd:10:5c:67:1e:c4:b2:5e:c5:c4:ed:
8d:98:3d:23:ac:ce:a0:ad:bc:2d:22:8e:12:42:a4:1f:66:4e:
f5:97:08:ff:03:4d:be:5a:f0:59:76:3d:1a:a8:b9:ad:5b:e2:
cd:dc:6b:6c:cd:6d:93:df:ac:02:c4:dc:44:8c:f0:ad:6a:34:
0d:3e:af:91:3e:92:99:c9:6d:eb:76:25:ac:7c:3b:89:a5:2b:
98:46:b5:b1:30:79:67:be:4c:87:25:10:44:3c:75:7c:ec:90:
81:33:90:8d:bf:b5:29:ca:dd:99:26:30:a6:bf:79:74:29:bf:
bd:ea:37:87:a4:d3:73:78:34:5f:38:3e:07:11:a5:ee:d9:a0:
61:38:d9:4b:52:d5:da:0b:28:b8:75:08:9f:2a:c7:51:3e:86:
a8:fb:55:22:eb:b9:d3:cb:3c:60:63:58:a3:9c:e0:98:cc:65:
00:ad:70:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:04:47 2025 by rpki-client