Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: Y2KQXjhvXllgWriWBVJ710Yh3/36xPAAFF2XQiwru6E=
Subject key identifier: CE:46:4C:2A:87:6F:1A:8D:86:D4:3A:C8:AE:B7:2D:A6:7F:D2:19:1B
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 019847E4FCCEA102844662BCCF93543ABCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 0DB0
Signing time: Sat 26 Jul 2025 18:00:45 +0000
Manifest this update: Sat 26 Jul 2025 18:00:45 +0000
Manifest next update: Sun 27 Jul 2025 18:00:45 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: 1JIxuym+Zhdw5coiL4K+UQtjpb7I+xlraJdNp5YRgTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:fc:ce:a1:02:84:46:62:bc:cf:93:54:3a:bc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Jul 26 18:00:45 2025 GMT
Not After : Jul 27 18:00:45 2025 GMT
Subject: CN=ce464c2a876f1a8d86d43ac8aeb72da67fd2191b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:15:95:15:57:1a:2f:a7:34:ba:a8:27:69:11:
89:5b:df:6b:a7:36:68:c2:02:16:70:a2:b9:90:2f:
78:12:88:b7:62:c6:b8:b9:3b:1c:15:dc:db:d3:ca:
d7:b3:93:22:53:84:4d:3c:55:1e:7b:36:9d:0d:10:
ec:34:83:b0:38:10:aa:b5:81:08:f9:c5:5f:da:dc:
73:62:37:64:5a:2e:b8:82:02:1d:f7:09:3c:f3:a9:
17:80:29:7f:c6:24:e3:9a:ed:5f:ae:58:e0:36:55:
4c:fc:ee:73:56:43:ac:f2:b6:14:a0:1f:b6:4e:7e:
c7:6d:be:f3:40:04:7e:f3:ea:fd:33:13:fe:d8:41:
4a:d6:8e:9d:27:7c:02:59:95:7b:42:1c:86:88:48:
86:b1:17:88:a6:e6:c5:db:ad:26:a4:6d:2a:b8:06:
84:77:82:b2:e8:34:c7:78:9b:8d:23:9d:8e:50:5f:
58:c2:ab:45:9e:03:3c:66:05:67:ef:3e:b3:81:ca:
75:50:5e:4a:f9:ec:09:5b:27:35:2c:ed:4e:b1:11:
cc:31:0e:7b:b8:a1:59:cf:0d:61:e7:4a:8d:7f:fc:
e7:78:0d:b7:f3:d8:86:ca:85:6f:4d:7b:73:5f:d4:
d8:6d:be:25:89:07:80:96:a3:35:33:c1:84:14:ba:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:46:4C:2A:87:6F:1A:8D:86:D4:3A:C8:AE:B7:2D:A6:7F:D2:19:1B
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fb:7d:86:3b:10:09:a2:5a:04:61:0d:74:27:b2:8f:78:b9:
f6:58:b6:e9:85:34:c9:a2:89:06:c8:ad:d1:f7:71:d6:c3:ae:
2d:67:00:39:de:96:03:ad:4c:9a:23:d0:6f:cb:98:1b:72:dd:
ae:a5:a0:e5:f2:4c:fd:2b:97:f8:b8:d8:9e:c3:cf:47:00:e0:
81:d8:ce:07:f9:f9:cd:0c:c0:be:26:ec:a3:4e:0d:10:07:a1:
a7:14:8b:13:8e:88:c7:20:4b:55:76:04:84:aa:14:c2:fe:92:
72:84:6a:72:c7:90:58:ad:ab:5c:11:17:4b:86:9c:92:70:52:
0a:69:2c:8f:bc:65:68:f2:b0:1b:85:5e:0f:c1:9c:29:a0:1e:
14:4f:29:2b:66:b6:3d:d0:26:4b:da:93:2f:98:62:df:4e:5a:
b2:c9:ec:9a:e2:a8:7e:c9:f2:fb:d1:88:b1:c9:73:cf:63:de:
cf:cc:45:3f:6d:a9:b5:77:c3:10:97:a3:3d:2b:07:7d:e7:70:
ab:a1:68:65:78:24:db:c1:cb:2d:85:05:9e:70:94:ea:f5:d6:
87:ea:07:1b:6d:dd:cc:eb:ee:fc:00:34:2e:b0:87:c8:59:8e:
3c:e5:57:c6:eb:31:75:8f:00:81:ca:16:3c:21:e6:6e:93:6c:
c0:6d:43:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:05:53 2025 by rpki-client