Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
File: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json)
Hash identifier: hf08PhCeQqOnz7mUdzb64sXXY7it77+tg12Hy+m5M4U=
Subject key identifier: 5B:1D:65:FF:B1:54:65:AC:69:62:F4:78:F0:77:F8:CA:3D:A6:A1:9A
Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
Certificate issuer: /CN=c618f03f9874370653aa3a026f6707c2e0e74764
Certificate serial: 01984A4182D94C9168428894072680ECEF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
Manifest number: 06E6
Signing time: Sun 27 Jul 2025 05:01:03 +0000
Manifest this update: Sun 27 Jul 2025 05:01:03 +0000
Manifest next update: Mon 28 Jul 2025 05:01:03 +0000
Files and hashes: 1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: 8OmlY5nodse9eh1AW/61adTS9NVuRYd8TqAXfrQ2Yk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:82:d9:4c:91:68:42:88:94:07:26:80:ec:ef:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764
Validity
Not Before: Jul 27 05:01:03 2025 GMT
Not After : Jul 28 05:01:03 2025 GMT
Subject: CN=5b1d65ffb15465ac6962f478f077f8ca3da6a19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:67:cc:64:a5:2d:4b:be:04:00:a4:78:97:
4e:4e:85:3d:25:8f:3f:ec:13:9a:b3:16:2a:9f:9b:
4f:09:41:21:38:d7:e0:e2:4b:3a:19:ee:cb:28:7f:
3c:51:d2:60:a8:32:57:35:13:e7:aa:f0:37:13:0e:
78:82:46:be:f5:55:83:35:87:03:d2:ef:e5:62:6c:
1e:6c:f3:c0:0e:2e:ca:48:1d:c9:70:fd:cf:45:e9:
27:bc:b9:37:92:ab:21:7e:2b:74:fc:a5:57:15:5d:
38:2b:55:fe:a3:4c:9c:cc:fd:a9:4f:ae:f3:9a:99:
ad:a5:e3:75:e5:2c:37:d6:f9:19:31:a5:d6:79:a9:
bc:d5:49:09:f9:29:69:45:26:80:46:a4:c9:5a:b2:
f0:7e:d0:82:0e:85:27:e4:80:05:1a:6f:ff:a3:cd:
5e:07:f4:60:03:ae:b6:dd:0b:7d:cf:22:99:26:f7:
ba:e2:af:d3:f4:5b:4f:8b:f0:f0:62:aa:ba:5b:a3:
75:4d:7f:fd:85:0a:83:4e:61:65:d8:07:a6:7f:af:
8c:59:94:49:93:9f:d9:2c:ad:57:86:e1:d4:8d:20:
51:85:52:69:50:ec:fd:a9:23:78:71:0f:4c:0e:ef:
66:65:9c:9f:18:63:4c:77:67:23:65:85:54:07:7c:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1D:65:FF:B1:54:65:AC:69:62:F4:78:F0:77:F8:CA:3D:A6:A1:9A
X509v3 Authority Key Identifier:
keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:81:81:c9:f7:25:cd:31:a6:65:d9:53:20:54:07:ef:c6:1a:
a3:5f:da:bf:64:4d:bd:94:e5:7c:76:39:d8:77:c1:f0:f1:52:
40:8b:0a:e8:dd:50:00:09:41:cc:d1:8c:24:b9:e4:25:ca:64:
24:a9:36:21:9a:76:4d:6f:a9:fa:a9:90:2f:f7:a5:6f:47:3f:
44:4e:a1:1c:ca:b4:0c:0d:05:3d:48:41:5d:8b:3b:3b:59:fb:
02:c2:0d:0a:39:fe:c3:c1:65:73:8c:0c:b6:ae:1a:1b:fe:b6:
7d:7d:79:e1:b9:73:96:0e:8c:17:55:04:5e:a8:88:18:ed:53:
c7:52:33:3d:a1:59:4d:26:ad:58:ae:e9:b1:29:e4:bf:1d:ef:
7c:1d:20:3c:23:06:69:39:3b:c4:38:28:63:a3:b4:09:2a:13:
fb:82:f6:11:49:7a:51:56:54:7d:c9:63:ba:8f:c0:2a:81:5f:
4e:85:bd:f6:31:3f:fe:31:d9:51:65:22:d0:01:85:3b:9f:8b:
78:d9:74:18:6e:9a:8e:b1:e0:3e:12:c5:7f:bd:19:4f:e6:6b:
44:fa:73:1a:41:6c:51:8d:c0:1e:2b:da:42:df:bf:0c:33:17:
68:fa:16:98:54:d7:50:7e:d6:dd:2d:74:82:1c:5c:5c:70:3d:
86:4a:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:21 2025 by rpki-client