Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: EK9DnHgbxF5bxwm/NQya5RxY5jGEk1ck4JBKJ1zkHtA=
Subject key identifier: ED:A7:C6:C9:9B:D0:AD:80:70:E2:D3:6F:85:AF:43:71:8F:98:75:8E
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 0199221EBBD59FD1649D1A9053A7E8549B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 0E9B
Signing time: Sun 07 Sep 2025 03:01:03 +0000
Manifest this update: Sun 07 Sep 2025 03:01:03 +0000
Manifest next update: Mon 08 Sep 2025 03:01:03 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: dB1eVoZYp/Ke0IrJQEA89qo7EQoxqKNckPc8cPTV5VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:bb:d5:9f:d1:64:9d:1a:90:53:a7:e8:54:9b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: Sep 7 03:01:03 2025 GMT
Not After : Sep 8 03:01:03 2025 GMT
Subject: CN=eda7c6c99bd0ad8070e2d36f85af43718f98758e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:21:e6:2e:21:43:d2:b3:1d:dd:f3:73:a8:
a6:13:73:1c:84:8b:a8:66:78:83:d1:1e:f1:83:75:
58:8a:4d:5f:7c:d7:2b:bb:db:0c:82:1c:34:52:8f:
78:ba:01:24:8d:20:33:0a:fd:b5:4d:58:e6:44:10:
4d:35:8c:3f:49:1c:95:39:3f:28:b4:1a:be:03:d3:
63:c1:b8:29:85:a8:0f:0c:e9:f2:fc:49:5e:e0:1e:
53:b2:d9:31:85:90:7c:7f:0b:e7:85:4d:a6:8b:d5:
f1:20:17:eb:85:bf:34:74:8f:bc:71:68:f6:c3:32:
4c:0a:cb:d1:cd:a2:94:f9:0c:5e:7d:f5:00:e3:4b:
67:5d:59:7d:93:37:c9:72:43:c1:35:86:01:38:2e:
4b:76:60:84:19:b1:cb:4a:37:b9:e0:b5:72:54:bc:
8e:0d:68:f4:a8:87:e5:50:c8:d6:51:27:fd:45:99:
fa:f6:f7:98:67:25:59:cb:5c:af:4a:44:9f:43:86:
76:a8:ab:11:06:05:8c:80:00:e6:c0:69:e8:fc:96:
39:55:d7:d9:62:e4:4a:36:43:9a:e8:4d:d6:f9:17:
7f:9c:47:4d:01:10:80:b8:16:3c:c2:c3:78:7f:7b:
28:4a:fb:26:04:5b:bf:4b:c6:43:2c:26:97:85:f6:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A7:C6:C9:9B:D0:AD:80:70:E2:D3:6F:85:AF:43:71:8F:98:75:8E
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d3:fa:82:02:f3:e6:04:f8:87:70:70:74:64:05:de:18:3f:
c7:12:54:48:3e:e2:90:5e:b3:c5:29:40:fa:d6:10:9f:a6:36:
fd:e4:51:45:cb:47:b7:e5:d9:f0:e7:10:96:8d:ed:7d:95:91:
4a:da:a7:e9:12:32:6e:f0:53:51:15:20:71:a9:b5:f8:20:4c:
ac:a0:24:94:82:51:28:71:08:a5:f7:ad:a0:bf:9a:a9:98:81:
f0:a6:7d:c0:5d:81:97:63:7b:fa:90:b8:8f:be:cd:b8:90:9e:
d0:72:28:13:d6:33:7e:76:af:11:0d:d8:73:a1:c0:05:c3:74:
9b:7b:11:8d:bb:1c:f2:46:86:aa:eb:27:5c:e4:f8:36:12:70:
f8:a3:ff:20:2a:60:8a:bd:48:d2:25:29:dd:5b:04:db:73:ec:
3f:ed:25:e3:2c:cf:55:57:3a:8b:8d:56:3b:ff:d3:ca:b7:ee:
b6:30:e5:3d:f8:3d:e4:90:99:8d:00:fe:8a:f8:7f:cd:a3:df:
f5:b9:7c:80:cb:a5:2a:14:cb:10:57:86:d0:31:26:83:25:c3:
3f:6f:f4:97:10:39:18:3d:ac:66:3b:4e:cc:1e:68:66:87:27:
86:01:2e:99:79:dd:58:04:0d:6d:37:d9:bf:12:91:93:b8:ab:
76:3d:73:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:19 2025 by rpki-client