Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier: JAV/NXF5ZLJodeN30RF0F6DdqEWFuvpHE/1dJ0BhIKA=
Subject key identifier: 2C:16:3D:84:27:54:8F:4F:55:73:0D:9A:6F:0C:17:42:A5:D1:08:C6
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial: 019921B0DE9AAB3D1664CB73FC29F2460F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number: 0272
Signing time: Sun 07 Sep 2025 01:01:03 +0000
Manifest this update: Sun 07 Sep 2025 01:01:03 +0000
Manifest next update: Mon 08 Sep 2025 01:01:03 +0000
Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: 9QQ+3/Puu04CHVn0t80uq1r13O8XI3TZGbxmOa06u48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:de:9a:ab:3d:16:64:cb:73:fc:29:f2:46:0f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Validity
Not Before: Sep 7 01:01:03 2025 GMT
Not After : Sep 8 01:01:03 2025 GMT
Subject: CN=2c163d8427548f4f55730d9a6f0c1742a5d108c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fe:ec:e9:13:00:f2:c8:83:b5:81:be:1a:d2:
de:ea:c4:ce:ec:98:be:e8:9e:4c:03:a3:dc:af:1f:
27:c8:05:7d:34:e9:d4:33:60:98:c9:a6:3a:9f:92:
5c:f2:7b:7f:f2:fa:0a:eb:94:f5:e6:6e:d0:a3:3c:
fe:ed:ef:a1:e0:09:79:02:d5:81:3c:37:5c:8b:d5:
2e:fe:24:ca:77:3c:80:e2:ca:15:84:6b:d2:2f:6a:
90:b5:0e:4c:91:80:50:9e:f3:69:23:5a:c7:80:1d:
19:40:38:40:5b:f6:ad:d2:32:36:09:ea:e6:bf:f0:
fa:34:ce:9d:2f:ae:9e:9f:4c:6e:85:a7:9a:98:5a:
45:a2:1a:2b:8b:f3:7c:9f:05:f3:82:42:a8:eb:0b:
fc:20:81:82:32:69:60:25:80:ec:1d:08:55:43:e9:
1b:64:a7:6d:63:27:da:1a:79:56:db:39:41:7d:d6:
b0:ed:e3:b0:07:21:fa:61:44:dc:e7:35:43:7f:85:
24:94:75:98:22:c7:bf:fc:3a:1e:40:c5:c8:45:2e:
36:f9:67:21:9f:54:8f:a9:0f:7a:a6:f2:20:7d:49:
f0:c3:6a:49:0c:92:83:f8:9a:4b:f8:bc:3d:44:0b:
33:2a:10:be:d1:c9:3d:ff:7f:e3:46:60:fe:d8:e2:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:16:3D:84:27:54:8F:4F:55:73:0D:9A:6F:0C:17:42:A5:D1:08:C6
X509v3 Authority Key Identifier:
keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:62:b3:48:5e:75:19:22:a6:76:0c:ac:0a:81:f4:82:91:84:
7a:05:6b:6e:1d:25:79:3b:cf:5b:be:64:7e:3c:85:31:99:d1:
c9:9a:f7:7b:9a:9a:b8:f2:b5:5f:59:63:7a:dc:57:ae:6d:2d:
d1:46:50:05:fa:a4:ea:b4:b6:ce:4f:cf:48:d9:ac:0f:2c:6c:
ad:f0:b1:f4:cb:50:ab:1c:44:38:77:e3:46:3a:83:6a:9e:6b:
80:2f:fc:6d:0d:1f:a5:64:2b:f9:15:b6:f2:65:24:36:ce:3e:
fc:2c:de:61:9c:8a:0c:03:6c:f4:d8:e2:7f:05:50:6d:cf:bc:
37:b8:27:cf:96:b5:45:97:f8:54:8f:22:69:9a:e3:05:b4:8d:
9e:f8:91:d2:3b:cf:ce:cc:2a:e2:48:91:65:98:20:20:1a:9d:
5d:e1:00:c6:a6:66:d0:a5:ea:6a:20:be:95:e5:35:1a:51:db:
8a:3e:36:53:b4:e3:b7:48:60:ee:7f:fd:98:f7:99:ba:df:08:
a9:38:a1:99:4a:02:59:93:6d:2e:f6:5b:61:52:8b:d4:5a:c9:
8a:4d:f2:dd:3c:6d:66:7e:3c:f3:ef:88:dd:a9:fe:3e:98:26:
55:9a:f8:da:2f:7c:06:5b:a1:01:b7:8f:58:05:6b:81:be:f8:
67:5b:06:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:31 2025 by rpki-client