Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: Nax3vWgwQj7IkuEx5WowFy7xUw2vlvvLNVwb4gHnqdg=
Subject key identifier: B3:43:06:29:A9:58:55:4F:4D:76:C9:9D:42:AB:5B:DB:48:29:DF:0C
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 019922551CAD10BC08808358AEBAB4995192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0A83
Signing time: Sun 07 Sep 2025 04:00:27 +0000
Manifest this update: Sun 07 Sep 2025 04:00:27 +0000
Manifest next update: Mon 08 Sep 2025 04:00:27 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: q2JuCGDCOSii1p4tIVumv6i9udW16kyClCvVe8OLN4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:1c:ad:10:bc:08:80:83:58:ae:ba:b4:99:51:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Sep 7 04:00:27 2025 GMT
Not After : Sep 8 04:00:27 2025 GMT
Subject: CN=b3430629a958554f4d76c99d42ab5bdb4829df0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:7f:1b:72:f7:96:38:98:29:f0:90:d7:df:
b3:c3:0a:b1:7f:4e:1d:f7:74:61:81:ad:bd:3e:57:
75:6f:43:a7:a2:50:5a:95:56:cb:72:8d:30:ed:87:
32:1e:0e:6e:d0:da:ea:7b:f7:91:1a:d5:76:63:78:
b5:9f:28:bd:40:96:dc:c7:26:e8:b1:e4:8c:06:77:
1f:14:b6:24:38:b0:72:96:bf:5f:17:a9:08:bf:e6:
9e:1d:84:8a:4e:22:2f:26:c7:78:2a:4c:ab:9e:79:
38:b4:82:16:7f:0d:05:04:67:7f:bb:15:b5:98:4f:
49:a8:35:02:fa:c3:d3:e1:66:e6:93:cb:11:c6:07:
d2:62:2e:d1:35:86:8b:52:88:c0:3a:96:2f:36:7a:
7a:90:77:8f:75:7b:87:02:a6:c3:6c:e2:d3:c4:62:
15:25:e9:6f:22:21:d7:b0:c4:9c:f4:d4:30:59:e5:
93:0c:a3:7b:df:78:dd:5c:5b:94:7c:0b:c8:7a:bc:
74:19:49:ad:e0:c6:74:fc:5c:c6:ac:e1:b6:a8:78:
d0:28:a2:ad:cf:b9:df:a0:3f:fb:e9:83:22:97:d2:
4a:05:5a:26:da:ff:ff:63:af:91:bf:22:83:5f:f7:
f5:68:aa:28:95:6d:a5:68:df:41:21:ce:54:bb:91:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:43:06:29:A9:58:55:4F:4D:76:C9:9D:42:AB:5B:DB:48:29:DF:0C
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b2:bd:9c:7d:d0:ba:23:92:49:75:2e:0a:58:29:ce:33:89:
5a:52:14:f6:dc:dd:cf:bb:37:e5:f3:8e:8f:5e:40:78:ad:74:
30:1a:73:83:41:48:02:e4:71:b8:aa:30:d8:9f:18:2a:ac:a5:
a7:d9:94:6e:ef:45:c3:6e:40:9d:96:fb:12:92:94:6f:71:13:
37:a2:ce:08:69:d5:b3:a2:49:1d:fc:c1:f2:15:4e:a5:77:a7:
69:24:67:8f:c2:a0:3c:c2:bb:4a:ef:d0:b7:30:61:75:b5:24:
ff:f9:e3:fb:aa:fc:13:9e:ab:5e:ed:0b:60:54:7e:df:ab:f3:
96:a3:a1:52:68:13:c3:e1:d9:45:51:09:59:f0:a9:d5:d5:e0:
f9:79:64:32:a3:d8:59:58:16:77:88:88:8e:62:b2:c6:00:70:
6a:e1:ec:6d:2d:7f:25:6c:05:1a:1f:10:8c:71:44:9d:46:56:
84:a9:f5:a6:1f:06:3e:76:6c:d7:fe:c8:1b:fb:85:93:bb:4d:
e2:dd:fe:69:ed:54:a2:dc:b9:40:69:f4:36:f0:2a:8e:07:f9:
43:9a:34:59:57:12:5e:83:87:fd:46:6f:11:22:10:f4:28:cc:
79:5f:83:92:8a:3a:22:cd:f9:fb:e8:f3:37:73:fb:19:02:c9:
d7:e0:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:54 2025 by rpki-client