Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier: hRXy2o9jG+W7ASJ2OwfPSnrEpcyyz36hdI2j2HBTWaI=
Subject key identifier: 3E:20:D0:5E:34:10:BC:B7:15:C6:BF:BD:D1:F8:E0:FC:79:B7:49:FB
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial: 01984778140CF7769F1288425830561AA4C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 16:01:48 +0000
Manifest this update: Sat 26 Jul 2025 16:01:48 +0000
Manifest next update: Sun 27 Jul 2025 16:01:48 +0000
Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: 0bgDGTCcJorxj2h0lYEyiCQ/EAxpfXg82fmjcvadr48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:14:0c:f7:76:9f:12:88:42:58:30:56:1a:a4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
Validity
Not Before: Jul 26 16:01:48 2025 GMT
Not After : Jul 27 16:01:48 2025 GMT
Subject: CN=3e20d05e3410bcb715c6bfbdd1f8e0fc79b749fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:aa:35:b5:5e:d0:a2:f1:9f:5f:59:fc:cf:
3c:89:56:c0:cf:2c:eb:1c:01:64:45:9b:cb:17:bc:
e4:00:90:40:26:ef:f6:04:b8:02:99:f5:2c:45:97:
cc:65:ad:25:97:66:22:92:00:70:15:e4:d5:43:c1:
3e:b8:9b:63:01:6e:0e:38:47:72:65:64:89:53:50:
ac:1d:14:56:9f:18:00:8c:f2:37:7f:25:71:6a:73:
d3:01:a0:7b:55:46:55:c4:c4:ed:a0:64:bb:9b:a3:
b5:19:6e:af:60:96:f3:2f:9b:7b:55:3b:1d:c2:38:
50:16:81:2b:84:0d:ac:12:b5:19:de:bb:0b:e8:ca:
75:70:d6:04:99:dd:bd:07:a1:0f:ca:e5:c2:27:1d:
68:a2:9e:e2:ca:72:c0:e6:f5:ee:b1:51:f5:e6:32:
df:b8:2d:9a:3c:92:c4:ad:d8:89:72:2b:d6:2d:dd:
78:82:3d:1c:da:54:cc:f5:df:4b:e0:17:67:a7:70:
03:93:7c:ec:c7:62:06:aa:39:a0:d4:e3:44:e9:bd:
06:b4:46:1e:da:89:b2:01:ac:82:a5:f4:b0:4d:6a:
1f:09:1f:d3:f9:d0:35:e2:ef:7c:05:2a:0c:db:fa:
23:16:a4:3a:11:97:ae:0f:18:a0:8a:e1:fe:cb:63:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:D0:5E:34:10:BC:B7:15:C6:BF:BD:D1:F8:E0:FC:79:B7:49:FB
X509v3 Authority Key Identifier:
keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fb:52:0d:29:14:92:97:08:ae:df:42:3f:0c:fe:58:49:ed:
e8:a0:e1:2d:1a:9b:99:2b:a2:51:0b:fb:52:35:0e:b2:d2:ba:
01:53:84:8b:2a:3d:cc:6d:d4:c0:98:cf:33:8e:de:fd:1b:2b:
57:9d:e0:b2:da:1b:89:39:d9:c0:ee:ca:72:a2:ba:40:ac:d3:
af:21:3c:19:18:9d:c4:27:ad:a5:65:ad:cb:af:3e:dd:76:7e:
76:94:a5:4f:f9:29:48:0f:f1:73:9a:d0:f3:ed:26:3a:a3:44:
ac:ad:1f:95:af:78:d2:ad:95:49:c8:af:00:d5:a2:fa:0e:42:
1e:40:46:17:f9:fb:cd:1a:f8:57:7d:bf:0a:db:04:cd:ed:72:
ee:f0:49:dc:b1:1c:07:c5:53:ed:e1:e3:0d:be:b7:78:b5:41:
52:80:98:30:1e:15:db:35:fa:fa:9c:d8:e5:4a:d4:14:c6:25:
18:7f:1b:96:25:ed:c7:95:0e:22:fe:49:4f:0e:95:21:ca:aa:
f2:4e:7f:55:14:64:2e:1b:3e:cd:05:63:7f:c4:1a:5d:af:d9:
22:99:6c:77:71:c5:ba:62:b0:f5:89:74:80:14:53:08:ac:88:
a7:b2:b4:44:c3:c8:8c:91:fc:7f:f6:22:fb:7d:11:98:91:cd:
97:3e:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:57:22 2025 by rpki-client