Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: 1+GDGcjuqr5LpSfG/2EU75GOeMiN8NDGdV9L1PbI2pw=
Subject key identifier: 71:B8:50:7A:8B:08:9A:AF:48:5D:3E:89:FF:1E:D3:71:B8:AB:99:8E
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 019921B04FD089AA8EF25470946497418ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 09E4
Signing time: Sun 07 Sep 2025 01:00:26 +0000
Manifest this update: Sun 07 Sep 2025 01:00:26 +0000
Manifest next update: Mon 08 Sep 2025 01:00:26 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: bhwUwS+eInEJngE+jVWzl5sL0U81qwysx8d3Bgh5iyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:4f:d0:89:aa:8e:f2:54:70:94:64:97:41:8e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Sep 7 01:00:26 2025 GMT
Not After : Sep 8 01:00:26 2025 GMT
Subject: CN=71b8507a8b089aaf485d3e89ff1ed371b8ab998e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:df:0d:d1:6a:8d:32:e3:c0:05:d4:5b:80:
0f:1e:40:21:8c:1d:ae:c8:f4:17:c5:db:98:df:fa:
b0:cf:1b:9e:bb:36:9c:57:a4:04:96:97:02:df:8c:
3d:c1:6a:80:49:8f:15:73:07:d9:a9:be:93:68:22:
79:28:d3:13:bc:22:66:64:5d:67:21:6c:cd:ad:1a:
d1:77:a1:90:3d:2e:65:1e:c4:11:89:66:1a:51:53:
a8:e8:8b:55:3e:e3:30:8e:d3:9d:f7:9a:e5:ae:c9:
f7:8e:e1:89:79:6e:90:f0:2e:9d:ef:75:a2:3f:de:
39:09:13:48:97:44:aa:4a:0f:98:f4:5f:86:bb:91:
80:a8:f0:5f:09:f5:32:74:39:e1:27:3a:d0:77:e9:
50:06:1f:aa:30:fc:3b:84:3f:d8:50:5c:d7:b0:d1:
99:56:b9:b0:6b:32:8f:24:ec:aa:78:a3:d8:30:90:
60:f1:0f:11:fd:fe:a5:7a:77:2c:98:bc:b9:90:27:
6e:10:70:81:8a:bc:3f:a1:34:5b:5b:3f:44:e0:cd:
b2:f6:b3:43:ce:60:68:2a:a2:8d:4b:7b:6e:fa:76:
32:24:34:44:a1:bc:47:86:fe:71:4d:ef:a3:e3:de:
25:df:35:38:d4:c4:3a:47:18:e8:88:cb:24:6f:6d:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:50:7A:8B:08:9A:AF:48:5D:3E:89:FF:1E:D3:71:B8:AB:99:8E
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1a:05:91:a1:ce:eb:88:1c:26:77:a7:3f:4c:cb:d4:3a:a1:
9a:6b:14:c1:1c:68:15:c3:6e:1a:12:72:24:e4:5d:4e:c5:eb:
82:e6:14:65:97:71:5b:9f:ee:62:56:61:c9:8a:f5:f2:b9:15:
91:e0:0d:84:95:cd:13:28:4d:67:36:49:4f:52:38:eb:b5:98:
4a:23:25:60:f4:41:5b:4f:50:18:4d:18:95:69:4a:56:5e:b6:
e2:c1:8c:06:36:a8:20:83:e5:6b:8e:95:ef:94:06:e1:fd:0a:
c2:e5:09:9a:5c:f9:2e:59:38:f1:02:1a:f3:e5:33:55:2d:1f:
8d:11:3e:59:af:f9:23:9a:64:5f:16:d9:00:15:6d:e7:b8:53:
7a:64:01:5d:ab:03:92:4e:77:ea:5a:b0:60:2e:2d:cc:4a:94:
20:88:a1:e6:dd:1a:12:c7:f3:dd:4f:56:d5:36:33:1e:06:14:
00:3e:05:92:c5:51:b9:12:95:50:28:40:6c:4b:ac:f7:1f:97:
61:3d:92:38:e7:02:57:d5:2b:c6:8e:3c:ad:9f:1f:07:b8:f8:
54:3d:04:87:be:1f:f0:8f:37:66:64:22:5e:26:54:20:cd:0c:
a5:a4:73:d5:86:ea:2f:a8:8a:ba:89:00:e4:47:44:ea:e4:8b:
ed:22:73:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsE/QiaqO8lRwlGSXQY7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OThhZDU3OTdjYWQ5MTUwYWVkMmJjMGI1ZDM5Yjg4YjFi
ZjJiZjQwHhcNMjUwOTA3MDEwMDI2WhcNMjUwOTA4MDEwMDI2WjAzMTEwLwYDVQQD
Eyg3MWI4NTA3YThiMDg5YWFmNDg1ZDNlODlmZjFlZDM3MWI4YWI5OThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBbfDdFqjTLjwAXUW4APHkAhjB2u
yPQXxduY3/qwzxueuzacV6QElpcC34w9wWqASY8VcwfZqb6TaCJ5KNMTvCJmZF1n
IWzNrRrRd6GQPS5lHsQRiWYaUVOo6ItVPuMwjtOd95rlrsn3juGJeW6Q8C6d73Wi
P945CRNIl0SqSg+Y9F+Gu5GAqPBfCfUydDnhJzrQd+lQBh+qMPw7hD/YUFzXsNGZ
VrmwazKPJOyqeKPYMJBg8Q8R/f6lencsmLy5kCduEHCBirw/oTRbWz9E4M2y9rND
zmBoKqKNS3tu+nYyJDREobxHhv5xTe+j494l3zU41MQ6RxjoiMskb23zKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG4UHqLCJqvSF0+if8e03G4q5mOMB8GA1UdIwQY
MBaAFMSYrVeXytkVCu0rwLXTm4ixvyv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZTJlODgtOGY1ZS00NDZhLTgzNzIt
YTZjNGNjOWY3ODQwLzEveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZTJlODgtOGY1ZS00NDZhLTgzNzItYTZjNGNjOWY3ODQw
LzEveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBoFkaHO
64gcJnenP0zL1DqhmmsUwRxoFcNuGhJyJORdTsXrguYUZZdxW5/uYlZhyYr18rkV
keANhJXNEyhNZzZJT1I467WYSiMlYPRBW09QGE0YlWlKVl624sGMBjaoIIPla46V
75QG4f0KwuUJmlz5Llk48QIa8+UzVS0fjRE+Wa/5I5pkXxbZABVt57hTemQBXasD
kk536lqwYC4tzEqUIIih5t0aEsfz3U9W1TYzHgYUAD4FksVRuRKVUChAbEus9x+X
YT2SOOcCV9Urxo48rZ8fB7j4VD0Eh74f8I83ZmQiXiZUIM0MpaRz1YbqL6iKuokA
5EdE6uSL7SJzJQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:21 2025 by rpki-client