Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
File: kXWIXPl40u9mE3YhRTC57WjFtFg.mft (raw, json)
Hash identifier: t8WtVpsVIGyugEvP3MyBSS/VFTqcdN4DWbn7iP6Ghyo=
Subject key identifier: 35:25:4B:E6:42:E6:0A:CB:A7:77:9C:90:9A:34:81:C9:64:53:B0:A2
Authority key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
Certificate issuer: /CN=9175885cf978d2ef661376214530b9ed68c5b458
Certificate serial: 01984B539D45E9665B0C6C014C96F4C48AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
Manifest number: 091F
Signing time: Sun 27 Jul 2025 10:00:27 +0000
Manifest this update: Sun 27 Jul 2025 10:00:27 +0000
Manifest next update: Mon 28 Jul 2025 10:00:27 +0000
Files and hashes: 1: kXWIXPl40u9mE3YhRTC57WjFtFg.crl (hash: 55TayRQREiumZQHER3sjljzH3EmO6UO7hislHKS05lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:9d:45:e9:66:5b:0c:6c:01:4c:96:f4:c4:8a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9175885cf978d2ef661376214530b9ed68c5b458
Validity
Not Before: Jul 27 10:00:27 2025 GMT
Not After : Jul 28 10:00:27 2025 GMT
Subject: CN=35254be642e60acba7779c909a3481c96453b0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:fc:da:80:fb:1b:40:b9:9c:55:a0:ac:23:
08:a9:bc:87:46:6c:0e:c6:e8:b6:c1:e6:36:92:82:
19:3c:a9:24:20:cf:35:f9:69:d0:a1:bc:da:29:49:
d4:30:de:7c:b2:6f:d3:08:9b:89:a1:f4:d7:5c:7a:
37:c7:b1:d2:9a:bf:c0:9e:6a:6e:5b:d4:d6:a3:9e:
b7:61:e1:5a:0b:0b:38:29:6e:cf:be:9e:e3:2d:cc:
fe:1f:38:7a:80:0d:ae:64:df:34:4d:2e:3d:69:f2:
bd:36:c5:d3:fb:ed:ac:4e:37:e7:fc:ae:4d:17:cb:
1f:63:36:b4:10:9d:81:2e:f4:59:78:6c:c0:b9:d4:
b4:bf:31:1e:07:1b:99:e8:3d:08:6b:40:ee:66:49:
a0:0d:1f:f1:75:da:99:96:bd:ad:0d:5c:1e:81:fa:
06:6d:62:c5:5e:8a:76:81:49:1c:2b:5f:6a:35:b6:
3d:fc:c3:39:ab:7b:51:6f:9a:61:67:0d:e1:55:db:
20:d7:7f:62:c2:94:4f:4a:32:7e:59:b6:17:11:32:
06:e2:e6:ff:33:bc:b9:6e:6e:44:65:12:7e:ff:d9:
a9:3a:39:9b:51:17:3d:fd:c5:77:04:78:5b:40:cd:
1d:bd:66:6d:16:56:20:ee:a7:06:0f:24:a2:4e:fd:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:4B:E6:42:E6:0A:CB:A7:77:9C:90:9A:34:81:C9:64:53:B0:A2
X509v3 Authority Key Identifier:
keyid:91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3b:76:83:d4:89:17:74:f0:3c:32:36:71:c1:8f:b4:c8:0d:
ba:d7:bf:be:b6:f7:6a:48:35:a5:ca:87:af:01:fb:a9:c7:41:
9f:ba:c5:30:9f:c1:c9:89:16:89:67:30:93:cd:9a:12:83:db:
ae:12:1b:7a:60:94:3e:d4:9a:f2:c4:1d:88:78:df:d4:8a:e0:
a7:3d:1d:ed:d0:88:03:74:10:56:3c:cc:d6:77:d8:f8:f2:45:
43:15:c5:85:55:31:e4:57:e8:42:cd:b7:7c:a0:7f:c4:6c:5f:
c1:f7:7f:22:9a:ac:90:db:1a:0c:c0:9c:4b:0a:be:d5:ea:11:
f6:1b:f2:4d:d1:80:fb:a0:e7:38:a8:2b:c5:49:00:e8:14:fa:
6b:99:ff:60:1c:62:48:4f:3f:7c:1a:b5:8d:a2:6b:73:54:39:
f7:8d:ab:cd:94:88:6a:a9:20:c1:44:4f:35:60:ad:57:2e:85:
55:79:c9:1c:cc:81:f5:1f:07:cc:3c:98:0a:ce:53:ee:92:c0:
05:69:30:fb:3a:53:d9:00:ae:d4:81:15:4b:5b:91:7e:a5:ad:
91:14:d6:cf:9b:74:80:dc:3d:49:c4:49:f8:51:45:aa:cd:4e:
cb:ac:92:4c:d2:01:14:af:bb:8c:a1:99:ad:6a:20:09:7a:58:
46:1b:d7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:09 2025 by rpki-client