Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: 3RYOFa7gSgZrCEIWYz9Y7dfL2ONsVhlFjj9+0KOJk0Y=
Subject key identifier: 21:20:BF:95:82:0C:2D:06:99:82:FF:F4:1B:0D:FB:A3:82:1C:3F:C9
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 01984965D1EE021785400FC0E5BD3E7CED9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0CE1
Signing time: Sun 27 Jul 2025 01:01:06 +0000
Manifest this update: Sun 27 Jul 2025 01:01:06 +0000
Manifest next update: Mon 28 Jul 2025 01:01:06 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: xpa1h93VQ02qWGTDoeJiGwsEH8HgDQKL3DzIZi4ImeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:d1:ee:02:17:85:40:0f:c0:e5:bd:3e:7c:ed:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: Jul 27 01:01:06 2025 GMT
Not After : Jul 28 01:01:06 2025 GMT
Subject: CN=2120bf95820c2d069982fff41b0dfba3821c3fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:da:34:ee:f2:fb:27:7c:72:9a:4e:71:ec:
4c:72:0b:69:e6:8f:1e:57:09:f4:55:0d:0f:67:bc:
77:6d:01:5e:d9:9d:7b:c3:b5:ad:4c:ef:22:05:2b:
44:07:85:66:3b:81:e8:d4:07:04:ed:1b:0d:9d:e7:
ef:7f:2e:de:46:1c:da:6a:4a:52:61:96:8e:5b:3f:
7c:0b:fd:44:6e:d5:ba:f1:20:5a:d0:a3:48:ba:d2:
42:2a:c7:6f:f5:e1:5c:64:2e:50:fd:7e:74:89:29:
0b:4f:18:b0:3c:b0:80:a8:ef:5c:74:ea:64:16:cc:
cd:3b:fd:98:45:2a:6f:ad:a1:47:2d:07:ff:84:10:
91:58:44:b7:5a:fb:35:42:ae:ce:93:5a:2f:db:fc:
8b:2f:4a:e8:f9:5d:53:b8:83:e2:31:09:21:a0:5c:
31:56:ac:72:6e:3e:1d:1d:62:2a:5d:ce:ba:d1:fc:
63:a5:54:de:81:78:53:81:dd:f6:35:39:58:90:7d:
dc:9c:37:82:9d:e2:96:e2:5d:2f:3b:a5:bf:7d:0e:
57:45:2d:30:ba:57:27:f6:03:49:53:07:cc:9d:a4:
6f:12:cf:4e:de:a6:01:64:7a:7e:d3:78:59:d6:52:
37:ff:11:45:89:4c:5c:54:3c:12:59:33:28:51:ad:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:20:BF:95:82:0C:2D:06:99:82:FF:F4:1B:0D:FB:A3:82:1C:3F:C9
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c4:56:96:68:11:16:13:39:d0:1d:b1:dd:26:30:b4:18:4e:
c5:19:87:0a:9e:e6:50:bd:82:6b:81:9b:4b:b1:ce:da:d4:a0:
cc:1e:19:83:ed:88:b4:c7:6b:b3:e7:d7:72:5f:f5:8e:ad:c2:
72:f4:27:61:8e:22:93:7f:5b:a2:51:3f:e2:4f:99:a6:f3:5e:
c8:9f:cf:03:6f:0d:0f:b8:a4:af:13:18:64:64:52:e8:b8:3f:
45:20:40:51:10:eb:6e:de:eb:22:48:40:c1:ad:ad:d6:43:10:
41:42:c3:6d:22:a8:cb:2a:f2:17:d6:63:4f:86:48:4b:d5:dc:
42:a8:08:07:35:0b:69:a8:8f:a6:b2:d3:64:ce:c9:31:82:3f:
fd:a0:9e:f0:d5:2f:e4:48:2b:e0:ad:93:ee:24:d7:75:ae:02:
c6:d4:ee:56:2e:80:e3:f0:a4:a1:aa:dd:47:11:a4:48:24:4a:
f6:3c:54:ec:c8:67:c2:fd:23:36:c6:77:73:99:05:00:e2:fe:
1f:f7:92:6c:39:88:26:fa:ca:1c:5b:be:62:b8:d1:2f:60:75:
ea:da:02:0a:7b:45:2c:8f:2a:0e:a6:bf:3e:c9:17:44:7b:54:
05:86:b0:5a:92:83:34:cf:d8:8c:d8:20:80:17:cf:24:0c:4d:
9c:1c:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:42:56 2025 by rpki-client