Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
File: xsfkNpOlMtPW70EYbXDXpsVfut4.mft (raw, json)
Hash identifier: NHywSfj1b5lw1lJf6wAgfSK6q4nhzDNRVTbllb2kMPY=
Subject key identifier: 7F:92:4B:01:80:0D:04:09:B4:9A:92:18:3F:D7:73:81:14:44:0B:1E
Authority key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Certificate issuer: /CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Certificate serial: 0199228CFF938462A0085C31C71ACB301EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
Manifest number: 11FF
Signing time: Sun 07 Sep 2025 05:01:29 +0000
Manifest this update: Sun 07 Sep 2025 05:01:29 +0000
Manifest next update: Mon 08 Sep 2025 05:01:29 +0000
Files and hashes: 1: xsfkNpOlMtPW70EYbXDXpsVfut4.crl (hash: 6ytmcNGr1bO16BhGifpkLPEgMSK3ym47nBLM+XIhLwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ff:93:84:62:a0:08:5c:31:c7:1a:cb:30:1e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Validity
Not Before: Sep 7 05:01:29 2025 GMT
Not After : Sep 8 05:01:29 2025 GMT
Subject: CN=7f924b01800d0409b49a92183fd7738114440b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:79:71:a9:7d:6f:99:90:89:6f:10:3b:9c:
52:f8:52:e4:f8:6c:7c:67:41:88:69:17:c7:12:63:
c9:3d:88:16:0e:f9:7e:65:62:2a:da:4e:f8:fd:ae:
7f:57:01:5c:34:1f:f2:10:38:96:7b:60:95:53:9b:
22:51:b9:21:78:cb:ef:f5:9b:13:ac:e5:aa:6c:f8:
a8:36:0e:76:06:3e:f1:5c:10:b8:92:37:8e:5d:1b:
b6:a8:68:38:e0:00:a8:be:09:99:3a:25:7e:b7:ad:
76:ba:e5:0a:3c:9c:76:5b:1b:66:7e:09:b2:b1:d4:
08:2a:32:d7:8f:c1:d0:d6:31:0f:15:b3:78:5b:bb:
1c:8c:39:99:e2:fc:34:24:98:8e:a2:b6:50:ab:c3:
d7:fa:92:49:1e:f4:ca:f7:08:f3:47:bd:a4:27:01:
08:5f:8b:c7:93:da:e6:ab:6d:aa:db:25:41:23:53:
60:31:ef:25:ac:92:f4:69:c6:72:3f:e8:a4:cf:c1:
fb:ca:4c:21:57:45:6b:a1:72:ed:26:5f:c7:f0:17:
69:ca:72:6b:1a:3d:f5:04:f4:be:9e:e7:54:ad:70:
a1:dc:f6:b5:0c:d6:18:df:02:ae:8e:79:9e:17:a3:
69:15:72:49:b6:e0:6f:22:a6:79:8f:49:1d:3b:11:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:4B:01:80:0D:04:09:B4:9A:92:18:3F:D7:73:81:14:44:0B:1E
X509v3 Authority Key Identifier:
keyid:C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e4:c9:5e:cd:9d:ba:cf:c8:e0:23:76:97:44:9e:75:32:b0:
53:fe:bb:ae:72:42:a6:1d:95:30:2d:13:fc:64:51:c7:67:b6:
65:73:a3:22:e0:bd:e2:0f:7b:4c:af:e3:3e:bb:95:d7:33:2a:
d3:36:e5:fd:bd:f4:b4:62:32:40:30:a2:8a:79:66:43:aa:1d:
87:9c:bf:f1:59:70:d9:7d:14:4b:e0:7b:50:cb:d5:0c:d2:55:
f6:ae:87:c1:78:00:e8:f7:87:fc:5f:62:67:45:1c:d1:46:c9:
9e:59:4e:92:01:c5:55:20:69:4c:75:3d:e3:44:00:11:06:ff:
7e:9f:e3:aa:aa:15:f1:3b:fb:d2:c6:2f:7f:27:89:a7:82:80:
68:c0:7b:b7:1a:18:b5:e7:7c:52:39:b1:20:9e:7e:e4:0d:ff:
fb:41:83:5d:e5:ce:7f:98:20:86:5a:89:d8:e2:8d:24:2e:78:
7a:db:b1:50:9e:65:18:b1:7f:77:10:4b:06:05:01:09:58:cf:
21:bb:b5:0b:9f:91:6c:7c:8c:e3:b0:83:53:14:79:c4:48:23:
98:45:ac:71:33:a0:3f:8c:60:07:12:73:a7:a7:b6:c9:6c:5c:
b4:c1:fe:27:f3:ed:c4:d8:a3:9d:26:cf:4e:e5:3a:16:a1:a3:
ab:a6:92:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:12 2025 by rpki-client