Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File: xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier: Vm+ituB9sD9SbdTELxkzkZfaJDOSevTf0DMcYSzyzIk=
Subject key identifier: 87:3F:DB:3C:2C:B9:D1:04:08:E7:5D:95:7B:1E:7B:CF:93:45:C8:36
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer: /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial: 01992255272B080C31D11F98816CF4C6FD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number: 0D7D
Signing time: Sun 07 Sep 2025 04:00:29 +0000
Manifest this update: Sun 07 Sep 2025 04:00:29 +0000
Manifest next update: Mon 08 Sep 2025 04:00:29 +0000
Files and hashes: 1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: Kpmx69BwFRYKEmZWJqiQDPli1Ki1nhL/tb7H2z/yAiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:27:2b:08:0c:31:d1:1f:98:81:6c:f4:c6:fd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Validity
Not Before: Sep 7 04:00:29 2025 GMT
Not After : Sep 8 04:00:29 2025 GMT
Subject: CN=873fdb3c2cb9d10408e75d957b1e7bcf9345c836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:d5:63:8d:ab:26:2a:81:db:fb:b3:7c:d8:
70:e4:14:c9:b7:b3:b0:1d:6c:ea:ce:0c:6d:b4:85:
21:63:c1:0b:bd:25:24:ce:af:3e:86:8d:b5:a1:fb:
23:e5:88:95:66:d5:d3:a2:db:be:7c:17:3a:1f:97:
8f:e9:e5:f1:f6:e6:29:49:7a:49:c5:59:73:84:7e:
b2:5d:7a:91:e9:2f:57:2f:78:0c:94:b4:b7:92:f0:
d6:1a:69:8a:1d:b6:81:cf:e5:cb:d3:63:49:51:32:
9c:c3:c2:19:da:49:30:a2:e0:5a:dd:ca:bc:89:59:
5c:a8:67:dc:33:7b:a5:70:52:80:8c:5b:0e:f3:2f:
81:2f:87:26:fc:cf:b3:1e:fb:7c:58:d2:50:7b:46:
a4:1c:f1:1d:12:48:7f:96:ec:94:ea:f6:9d:2c:22:
1e:c7:b9:2c:e8:35:b5:6d:57:19:45:c1:7b:45:68:
4f:fa:52:1a:e0:1e:67:7f:61:98:92:f9:86:20:35:
58:af:2b:81:1c:f2:56:55:5b:89:54:a6:44:b5:9e:
ea:ac:24:3c:37:83:06:a4:27:b4:4a:cc:60:13:79:
0c:41:67:90:c5:83:d6:c0:95:f3:f2:00:51:d8:9a:
60:4a:c1:40:08:63:d2:64:f9:ea:de:c6:4b:60:05:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3F:DB:3C:2C:B9:D1:04:08:E7:5D:95:7B:1E:7B:CF:93:45:C8:36
X509v3 Authority Key Identifier:
keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8b:06:3f:7e:a4:cf:f2:0b:a6:30:2f:c5:02:bd:50:ec:ae:
b7:c6:6b:4d:f0:20:41:bb:43:ab:af:4e:f6:1b:0f:16:74:b2:
69:73:6c:35:ff:20:39:06:62:82:5c:f5:d9:a7:73:03:59:c9:
ac:21:b7:be:ec:88:14:02:e4:84:d0:b4:b4:88:2c:fc:f4:9e:
3f:be:be:30:73:65:82:60:db:01:dd:93:87:1d:1c:1b:be:a2:
88:b5:10:af:15:d6:97:6a:ed:ef:3f:1c:2d:64:6b:d2:63:20:
d3:ae:78:58:ed:95:8f:e7:12:dd:29:37:f5:69:62:59:89:c1:
ba:57:6e:73:d1:c1:58:1c:f9:ff:e8:12:32:9f:6c:c0:24:ae:
ac:6e:b3:af:93:4d:6e:36:11:93:0d:cd:00:1b:6c:95:d9:3b:
5a:72:f5:02:b1:74:bd:a5:af:c0:1e:d0:b5:40:5c:f4:94:bf:
8b:65:eb:ef:b4:47:a1:5c:b5:d3:04:26:ae:2a:4e:e6:4c:f3:
d8:46:78:2e:57:44:e1:d9:1a:f5:7b:cb:72:ec:d5:54:fa:38:
f5:43:37:03:e9:38:8f:90:96:3c:56:12:1f:a6:fc:8d:de:e2:
ea:ec:4d:d0:b2:a4:bd:03:8c:ba:a7:7f:fe:22:30:f3:6c:72:
62:64:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:20 2025 by rpki-client