Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: VHkJQ/pCf+c7CXjV1RG+3kjNpYoFu3eYL8ak/ZljVmw=
Subject key identifier: DD:E4:E4:FD:18:C2:94:3B:A9:35:A5:18:E7:E5:72:D5:64:3B:3D:6A
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 0199179ACC67C731DA335F939E35ADC1A03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 4C
Signing time: Fri 05 Sep 2025 02:00:44 +0000
Manifest this update: Fri 05 Sep 2025 02:00:44 +0000
Manifest next update: Sat 06 Sep 2025 02:00:44 +0000
Files and hashes: 1: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: TpKHA1BLbNi2QTUN9wCEkKQXjj3E0EBUM60siA5x/P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:cc:67:c7:31:da:33:5f:93:9e:35:ad:c1:a0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Sep 5 02:00:44 2025 GMT
Not After : Sep 6 02:00:44 2025 GMT
Subject: CN=dde4e4fd18c2943ba935a518e7e572d5643b3d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:3f:cc:8c:e7:83:bf:02:97:92:53:55:99:
94:3c:e7:79:82:5f:8c:8c:06:a2:e9:58:40:65:ce:
71:c9:d8:2b:8b:3d:14:7b:cc:54:f6:a2:96:95:5d:
99:15:8c:86:32:9d:d1:c8:7a:9e:1f:cf:88:68:87:
a7:94:87:83:d0:65:fd:28:d2:e8:d4:13:29:61:8c:
36:1f:1c:c1:3c:ec:21:aa:8f:93:46:03:1d:65:f6:
ac:8d:0d:67:a5:6a:dc:cd:5f:44:b8:0f:70:cf:fa:
4a:bc:ae:1f:d3:2c:7f:a8:4f:2d:9f:26:35:ef:46:
67:06:03:81:2c:2e:51:5e:09:c1:89:19:7c:c2:94:
43:40:1f:79:46:19:12:75:44:81:c9:a3:0d:ff:68:
06:d0:a1:b2:22:0b:c6:9b:c2:66:31:d0:7b:8b:13:
47:cc:6c:f4:1a:8e:87:b8:fb:c8:0d:9c:4b:e6:8d:
79:df:fa:eb:8a:71:ea:fe:6e:ca:01:ae:b9:1d:54:
32:ac:af:8c:a5:fa:43:41:5f:d2:d9:a4:cb:05:05:
63:41:b4:64:bd:f3:19:e9:be:28:b7:fc:64:f3:6a:
09:4a:4a:2d:5e:de:9f:f2:8a:f9:88:ca:47:ac:37:
ee:86:64:9b:26:d9:e6:b7:78:9b:45:b4:a9:72:46:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E4:E4:FD:18:C2:94:3B:A9:35:A5:18:E7:E5:72:D5:64:3B:3D:6A
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:18:59:bb:c3:c9:78:ad:dc:2e:91:16:9d:c1:7b:76:13:aa:
60:5a:ca:84:47:2a:9d:a5:02:4a:1d:78:2e:6b:73:c1:25:ce:
2f:72:76:29:21:86:a1:c9:3b:8d:7c:71:3e:53:3c:84:79:d6:
01:1a:71:cc:80:27:7d:7f:6b:34:d2:58:4c:a0:72:8e:85:43:
f3:3c:4f:8b:89:7f:cc:7f:3a:4a:bf:6a:f9:fc:69:7f:a6:57:
1b:ba:c1:42:3c:1e:45:12:46:49:3d:79:32:da:06:db:bb:55:
54:4e:c3:c9:4f:3b:a4:18:75:db:c7:ce:c0:d6:ad:1f:7c:71:
16:a7:1b:43:22:17:ec:9e:44:f5:d7:a9:67:98:26:4d:ff:ce:
84:5a:3a:cc:e4:41:9d:a5:cf:0a:c3:3b:fe:71:dd:88:4b:d3:
18:87:aa:ea:35:93:86:66:61:71:1a:32:8a:61:29:08:25:64:
22:0f:c1:7f:61:c7:f3:16:72:f7:45:49:0f:1f:63:92:6c:fd:
91:99:36:61:9f:4d:df:db:4e:c1:9e:d2:bb:4d:3d:89:0f:79:
50:b7:d3:57:c4:23:c7:a2:14:50:f0:2e:38:e6:06:26:02:2f:
0a:05:5e:d5:ab:c5:53:a2:55:ba:07:b1:0d:d7:80:e2:ab:44:
fc:aa:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:45 2025 by rpki-client