Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier: PGoyXEeVQUhGMYPdwd/9bWm/oNhvXWw9sRflrVdYsYs=
Subject key identifier: 08:4A:93:1B:EB:A0:63:5B:79:B0:89:0C:3E:3E:83:72:45:1C:FF:50
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial: 0199239F5031FEFAC62EC73E9316308A3D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number: 0900
Signing time: Sun 07 Sep 2025 10:01:07 +0000
Manifest this update: Sun 07 Sep 2025 10:01:07 +0000
Manifest next update: Mon 08 Sep 2025 10:01:07 +0000
Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: iNia5K9kXZLH0giM3lyk0z1SkcICCN//d2aMExmEoT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:50:31:fe:fa:c6:2e:c7:3e:93:16:30:8a:3d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Validity
Not Before: Sep 7 10:01:07 2025 GMT
Not After : Sep 8 10:01:07 2025 GMT
Subject: CN=084a931beba0635b79b0890c3e3e8372451cff50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:0a:d3:07:e6:c3:76:e9:3d:e0:4b:f1:e9:
f3:70:be:0c:fa:a3:06:4f:38:f6:62:ea:3d:77:b3:
70:78:58:4d:f9:39:31:b1:9a:36:8e:1e:c5:60:f0:
3f:a8:3e:a6:57:20:dd:3b:e6:8c:55:b5:00:5d:29:
12:a3:bc:f9:1f:74:2d:b2:96:00:fb:d9:81:3e:ae:
ed:7f:3c:33:7f:a3:1a:77:81:e4:76:bb:d3:e8:1f:
48:42:6b:f6:5c:bf:d7:47:26:2d:66:a2:69:32:08:
0e:58:8a:74:9b:50:44:32:5c:3b:5f:43:1d:4d:66:
12:4b:15:54:9d:6d:34:4e:8e:b2:30:42:2b:35:31:
97:9e:b1:b5:0d:a8:70:3e:35:87:db:07:0e:b9:7e:
01:aa:18:8b:10:70:3c:a6:33:b4:19:6b:33:b1:32:
66:54:b8:8e:d0:1a:ea:c2:60:79:7a:48:60:af:b1:
78:a8:1e:c4:fa:41:11:34:83:d4:ec:e1:a2:ed:53:
17:6b:42:e7:f6:b8:71:f1:ab:f9:3c:b3:13:72:3c:
54:67:5b:96:29:86:8a:de:c6:12:07:4c:bd:bb:b7:
d9:5b:ee:13:79:ac:4d:66:fd:8a:34:e9:fd:71:8b:
5a:0e:81:42:94:53:96:7b:8d:e0:1a:9b:5e:f8:26:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:93:1B:EB:A0:63:5B:79:B0:89:0C:3E:3E:83:72:45:1C:FF:50
X509v3 Authority Key Identifier:
keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3c:7b:5f:be:ed:94:85:86:a0:40:d8:10:93:e7:43:29:77:
e9:50:cc:16:ea:52:4d:19:5f:9a:58:f8:c9:a8:93:9c:cd:85:
22:e6:50:68:2c:1a:0d:92:f0:fa:55:68:c7:eb:f2:c7:c0:c3:
c0:ae:84:f2:7c:25:4d:ff:2f:de:dd:29:90:c2:19:f3:31:89:
bc:39:13:b1:bd:37:f5:16:9a:cd:d3:ec:78:6b:6f:97:dc:97:
d0:90:b3:66:6d:02:39:d2:d9:90:91:78:a5:cf:04:e5:19:6e:
ad:b2:3f:ac:be:0d:0c:30:5c:3f:01:07:9d:85:aa:0b:07:a3:
2f:9c:00:c0:6b:0d:c8:66:70:bd:4c:bc:96:5d:49:cd:bd:07:
80:49:c3:81:a5:46:0e:8b:c5:40:ff:f5:2c:82:13:08:bc:85:
b3:33:e5:b5:36:9f:bb:79:7d:61:bf:04:85:83:a3:2a:4e:c3:
10:1b:28:e6:fa:da:51:98:80:e3:b7:4b:08:77:d7:25:c0:e5:
3a:90:33:71:79:dd:1e:0c:12:67:d3:c3:7b:38:ed:1a:21:28:
02:4e:d9:13:2f:1c:d1:37:de:3f:0c:00:6e:06:2c:61:f5:48:
10:b4:0c:c2:8f:f8:b6:43:49:0f:48:6b:de:44:86:17:18:e4:
a3:c1:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:38 2025 by rpki-client