Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File: xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier: 7Ts/513j7d+77maxNXy+Re9w0KNJW0Bd8CQlX1SQBjU=
Subject key identifier: 55:D1:8A:70:4F:F2:7C:DE:F5:B7:7E:77:D9:54:B4:72:B3:EF:CE:B0
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer: /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial: 019922559997700D1100EF87C252381F48DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number: 0CB2
Signing time: Sun 07 Sep 2025 04:00:59 +0000
Manifest this update: Sun 07 Sep 2025 04:00:59 +0000
Manifest next update: Mon 08 Sep 2025 04:00:59 +0000
Files and hashes: 1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: jmy9ErAKVRg6Ukuodaj+C5qLhKGMbZL36X2iyow0X9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:99:97:70:0d:11:00:ef:87:c2:52:38:1f:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Validity
Not Before: Sep 7 04:00:59 2025 GMT
Not After : Sep 8 04:00:59 2025 GMT
Subject: CN=55d18a704ff27cdef5b77e77d954b472b3efceb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:fc:22:17:d4:eb:bd:29:a4:70:3f:e7:f7:
29:63:be:5f:77:d1:65:c6:67:e5:fa:23:67:6d:77:
dc:40:67:ad:60:70:a4:2e:47:20:6c:6f:6d:23:d9:
d4:4b:2f:d4:35:ba:9a:8f:98:be:c0:b2:8f:a4:98:
f9:cb:ef:7b:33:e5:47:d8:2c:1f:57:d4:03:33:1a:
fc:8f:20:86:30:05:ca:0e:8f:51:d8:d4:d1:6b:f1:
65:cc:e6:02:8d:06:b6:38:ab:40:aa:e5:f5:5f:0e:
a6:6f:6d:c7:84:50:0d:56:f8:3e:5e:97:d5:5c:66:
01:79:c4:6e:b4:f0:03:45:0a:46:f7:56:8d:2c:4a:
4c:e6:fb:0c:0c:05:43:74:1c:20:f7:27:96:d5:37:
46:fe:10:f7:fa:77:e4:f8:2a:85:48:f9:96:b4:d3:
f7:d4:e8:4f:12:8a:dc:ed:52:5a:20:c8:5e:3a:3f:
07:14:d8:47:ef:37:31:5a:03:ea:81:2b:ec:72:07:
38:73:6a:41:ac:78:eb:4f:87:f1:7b:58:1a:cd:f6:
e9:5f:38:35:6f:31:27:b5:87:af:87:d0:a4:63:51:
74:53:53:06:83:96:6b:1b:5b:8d:bc:2b:34:3c:28:
97:af:88:49:bc:01:bc:a3:8c:a7:e9:9d:1e:fb:b2:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D1:8A:70:4F:F2:7C:DE:F5:B7:7E:77:D9:54:B4:72:B3:EF:CE:B0
X509v3 Authority Key Identifier:
keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:69:57:cc:de:37:dd:11:7e:82:ff:ce:75:0a:7e:90:87:23:
55:51:4f:5b:ba:2e:ce:e1:b3:d1:56:2a:be:8b:21:5e:e8:a7:
58:b6:f9:e9:55:2f:0e:aa:06:83:4f:af:d5:d8:e4:a9:4a:b2:
e0:1d:7d:2c:b1:9d:fd:8c:da:26:85:5e:be:aa:37:ca:4a:3d:
9c:de:d2:b5:e0:53:1b:f5:f2:d2:2e:c6:7c:a8:45:06:9b:c2:
fe:c0:a8:e1:c8:b4:ca:ba:bb:14:85:0b:3e:1b:a3:f5:4d:12:
4e:b9:12:14:bc:89:a9:5b:ca:b5:20:c2:e4:18:e9:7c:8a:8d:
d2:9d:38:53:04:c9:42:0c:a4:f9:8c:11:cc:5d:1d:33:e1:17:
93:b7:c0:92:9c:6f:71:71:d9:3e:5f:3e:39:63:14:6f:15:ad:
99:7a:b5:05:8b:c1:e7:34:aa:a7:db:42:18:dd:8c:af:05:ba:
f3:43:40:91:2c:a3:45:cd:84:51:26:37:d1:df:7a:85:55:44:
71:55:6d:30:b3:b7:36:07:29:1b:43:a9:60:97:8f:b9:bf:c2:
a7:44:e7:50:2b:5e:d9:70:aa:0b:d0:02:02:8b:62:3a:cc:15:
e7:0a:ca:a0:70:2e:81:e9:25:12:a8:85:b5:f4:c3:87:9d:d9:
db:0a:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:22 2025 by rpki-client