Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json)
Hash identifier: sY9i/pCiH/9PJ0MGRCQ581OW4quwxridgvOkpMlQcT0=
Subject key identifier: 1B:77:A4:D5:4F:AD:98:F4:D8:52:CF:83:CF:33:B0:46:E5:AA:38:DF
Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Certificate serial: 01984A09DB52C4922B59EB8DD421F989FEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
Manifest number: 07D7
Signing time: Sun 27 Jul 2025 04:00:16 +0000
Manifest this update: Sun 27 Jul 2025 04:00:16 +0000
Manifest next update: Mon 28 Jul 2025 04:00:16 +0000
Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: Ixb5B3AHpaXHw1FoZig6FF8O53qL/SKADBZrxuvdxcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:db:52:c4:92:2b:59:eb:8d:d4:21:f9:89:fe:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Validity
Not Before: Jul 27 04:00:16 2025 GMT
Not After : Jul 28 04:00:16 2025 GMT
Subject: CN=1b77a4d54fad98f4d852cf83cf33b046e5aa38df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:94:10:1c:f0:c0:35:85:15:9e:4c:d4:9a:
0c:d9:c9:47:97:a6:3d:f3:54:71:9d:d6:19:a6:5d:
8f:bd:52:63:46:15:20:35:bd:8e:93:2a:d6:32:4f:
be:8b:0b:64:ed:6f:55:e4:52:35:cf:a7:87:41:38:
00:0b:14:e8:21:5e:9c:bd:cf:b3:48:53:30:f5:81:
17:2a:df:c7:2a:36:16:cc:3c:9f:4c:93:7a:3e:5f:
0a:96:cc:f8:dc:ed:9f:41:dd:b0:56:1a:67:8c:30:
a9:ab:95:0c:cc:67:8a:9d:54:64:25:94:1f:93:0c:
59:c0:ac:21:bb:4c:e3:f4:93:06:76:ad:47:4a:ac:
4a:d7:ce:c7:47:db:58:f8:67:56:ab:4f:ca:6b:46:
9b:7f:e9:0a:92:ae:21:b1:fd:01:f3:ff:52:20:9a:
24:80:67:e7:86:b1:b8:02:6e:7f:a5:9c:6a:c6:46:
35:2b:87:b0:c0:a8:f2:fc:f9:33:8e:ec:6b:f4:16:
8d:0c:74:77:bb:6e:14:c2:22:34:02:d1:97:bf:16:
e2:ca:ee:b6:d1:28:89:96:68:7b:a1:25:12:d1:2c:
c0:db:59:9f:9f:0a:eb:0c:1f:7e:f5:73:18:2f:c4:
a4:9e:fa:8d:4e:8e:a0:64:c2:35:11:18:97:9d:a1:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:77:A4:D5:4F:AD:98:F4:D8:52:CF:83:CF:33:B0:46:E5:AA:38:DF
X509v3 Authority Key Identifier:
keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a2:2d:28:c6:cf:c2:e7:a6:17:33:19:ab:11:3b:ed:03:0d:
f7:7f:9f:55:e5:e5:7f:b8:23:5d:e2:0c:4e:fe:47:9e:78:97:
95:b8:0d:1d:bf:97:fa:99:b1:8a:e0:55:ba:a2:47:bc:f9:cd:
b7:5e:1e:2e:81:f4:62:8e:8e:d6:a5:f9:60:c8:59:f0:bf:91:
3b:25:08:80:e9:e7:14:06:61:7c:e3:29:a6:c9:fa:b7:ec:c4:
e6:d2:a6:64:6c:d5:d5:4f:da:74:16:1d:50:d4:54:d3:df:3b:
22:91:e3:bd:2b:cf:12:2a:43:db:86:bd:b2:3b:e2:91:ba:1e:
48:44:34:e9:05:91:a0:ae:30:24:42:37:32:7c:cd:fd:cf:af:
9b:75:12:57:f1:0f:eb:a3:cc:25:f6:38:a0:5c:44:3b:56:9e:
46:90:ed:81:20:9a:5a:1e:25:2e:33:37:2a:29:c4:77:60:b5:
e0:c9:8a:d4:73:d5:58:d5:fb:0c:e9:5c:ca:1a:ad:ff:ee:ac:
c2:48:f6:70:27:15:d6:5e:47:72:c5:af:d0:ae:cd:e8:57:a1:
67:86:c0:6c:99:0b:ff:c4:7e:40:d7:bc:12:b9:be:f5:bf:30:
d8:f4:58:ce:a7:e3:4a:b9:99:9b:4e:ff:00:32:0c:12:40:b6:
07:f3:45:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:55 2025 by rpki-client