Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: n70wdF8z+qcJXrZqg09oY+SNNh1uZWmB1B7xpWUMk9c=
Subject key identifier: 08:7D:D0:59:52:44:BE:CC:7F:9E:85:DF:B2:88:5B:DF:A2:61:2E:E3
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 019921B063CC3A39AA373EACC117D927B3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 0886
Signing time: Sun 07 Sep 2025 01:00:31 +0000
Manifest this update: Sun 07 Sep 2025 01:00:31 +0000
Manifest next update: Mon 08 Sep 2025 01:00:31 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: xf/HWAl+g42EouEeHW33PmxqZYYOVSmH1HKSBFejYBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:63:cc:3a:39:aa:37:3e:ac:c1:17:d9:27:b3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Sep 7 01:00:31 2025 GMT
Not After : Sep 8 01:00:31 2025 GMT
Subject: CN=087dd0595244becc7f9e85dfb2885bdfa2612ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:17:dc:85:22:96:0e:49:51:31:ab:78:29:
54:05:ed:6b:2f:34:d8:5e:8f:66:48:a1:ab:6a:ab:
af:7a:9c:bc:03:b4:49:e2:a1:51:63:47:79:05:59:
20:86:70:be:1b:e1:78:7e:86:e1:bd:83:67:b6:98:
60:e3:60:40:cd:63:b1:de:5a:5c:d7:b9:25:1d:17:
a8:c0:38:24:2a:d7:98:6c:a8:c8:19:e9:aa:94:22:
e0:40:fc:f8:9d:e9:b9:b3:64:09:4b:17:e4:41:4c:
c4:7c:fa:d9:70:37:77:c2:68:9f:30:fc:44:ff:ad:
2b:e0:25:76:82:26:d2:67:3a:e5:a0:48:e7:9c:cc:
84:14:a9:41:61:4a:21:97:c2:43:0c:ae:ab:8c:0e:
23:4b:d4:27:34:cc:73:04:0c:b5:6c:59:5b:4d:5c:
ec:ea:ec:b5:09:5c:ca:5b:66:b3:ec:aa:1e:fb:a8:
c5:09:28:b9:e7:90:30:46:54:11:f5:d8:95:50:e9:
39:56:33:b5:80:75:de:b4:c9:86:73:7c:98:8c:d3:
08:ac:58:85:d6:84:62:a0:a0:9c:f6:5b:e7:9f:1b:
c4:28:5b:30:e4:40:e9:99:9c:17:a4:51:5c:d3:54:
d4:79:72:90:c7:6f:be:4f:9f:1f:66:d7:d1:be:08:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7D:D0:59:52:44:BE:CC:7F:9E:85:DF:B2:88:5B:DF:A2:61:2E:E3
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b3:f1:d2:45:56:58:d1:4a:df:0a:c0:0d:5d:fa:91:dc:e5:
aa:ce:70:07:65:63:2c:41:c8:db:bd:02:73:a8:91:b6:27:ca:
51:11:07:73:36:87:12:52:11:07:6b:34:36:3e:71:c8:43:8f:
39:be:49:90:94:22:fd:b8:d2:fe:27:bd:bf:60:32:05:35:73:
7f:64:fe:46:f3:91:35:74:bd:36:a7:96:c3:a0:84:09:94:08:
fd:cf:09:4a:79:63:62:5d:5e:2e:b2:db:c2:91:43:4e:74:db:
49:44:ab:18:1e:7a:b9:0a:aa:a8:a1:d1:56:10:3f:20:2a:07:
e8:38:69:69:20:5e:ff:65:86:1e:26:ff:ed:c1:e4:e9:7d:ea:
c5:88:e6:78:be:9d:1d:55:4b:01:71:80:a8:93:93:09:b1:d3:
c5:4f:81:4f:9e:4b:92:fe:a8:76:c2:62:73:90:3b:50:fe:cf:
bc:77:bd:f4:d7:b5:89:45:84:94:55:29:30:58:0c:3e:c3:56:
a6:b8:a1:39:8b:ea:46:bf:35:5f:dd:a1:f9:03:7b:5f:fe:5a:
6a:02:60:58:91:c0:46:2a:60:b6:56:01:f6:79:27:9c:27:b3:
b8:e5:3e:8e:c1:a7:91:2c:b6:df:43:2e:03:00:57:ff:9d:7f:
ff:11:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:39 2025 by rpki-client