Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier: 1GcrZpjL5nld/s/KZi5b/gBtw75Od22ddkYqaQ2t9k0=
Subject key identifier: DB:C1:02:F9:75:BD:E9:A1:D1:4B:54:D5:D1:BC:D4:AC:6A:41:BD:44
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial: 01992443A1869D80E89255C87AF853C13E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number: 0882
Signing time: Sun 07 Sep 2025 13:00:35 +0000
Manifest this update: Sun 07 Sep 2025 13:00:35 +0000
Manifest next update: Mon 08 Sep 2025 13:00:35 +0000
Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: M719d1yfjxAFYqzVKd3SuGctnseAD6h+0vseKw/VNiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:a1:86:9d:80:e8:92:55:c8:7a:f8:53:c1:3e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Validity
Not Before: Sep 7 13:00:35 2025 GMT
Not After : Sep 8 13:00:35 2025 GMT
Subject: CN=dbc102f975bde9a1d14b54d5d1bcd4ac6a41bd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:ce:e8:db:34:86:46:20:08:38:95:9a:cd:
19:71:cd:2b:fe:ff:1f:aa:08:40:33:cc:d9:dc:9a:
b1:5f:68:32:c1:13:fc:04:ff:98:a6:ba:11:db:dc:
c6:b7:b4:83:a2:b8:1d:1e:01:47:27:a9:77:df:64:
34:c3:0a:8e:51:65:4d:77:6d:da:36:33:81:c1:c9:
d3:b9:3b:42:7d:39:ab:c7:c4:54:78:8c:b6:56:57:
ea:a3:d4:08:46:8a:65:5a:2c:f3:60:eb:5d:57:b6:
40:3d:6f:2b:e0:60:a1:84:53:cb:e9:62:7a:f9:42:
7c:3a:e2:8f:ab:16:f2:d5:10:91:d7:95:e5:58:a2:
34:ca:2c:66:64:40:fa:66:4e:73:05:64:37:8c:6e:
e6:c9:d3:8c:47:d2:45:18:7f:92:67:a8:f0:7d:59:
5a:4c:36:69:5d:ea:07:b8:22:f5:23:66:a1:db:4c:
9b:00:d9:0e:49:5a:2e:35:44:0e:78:34:f2:94:de:
e9:6d:2e:b2:16:c4:2b:c5:b2:8d:b1:f6:06:04:4e:
61:2f:0e:0e:20:43:24:73:d9:b2:fe:fa:fa:d9:c0:
c1:0e:ee:6b:4e:39:bb:c0:2b:49:35:bc:ef:7c:d8:
34:cf:74:58:71:a3:1c:0c:4e:80:f7:64:9b:7d:06:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C1:02:F9:75:BD:E9:A1:D1:4B:54:D5:D1:BC:D4:AC:6A:41:BD:44
X509v3 Authority Key Identifier:
keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:de:d3:aa:c7:42:e1:d4:c0:dd:2e:42:76:29:ff:b1:ae:
68:b7:ef:7a:1a:f2:ba:00:b0:6c:23:e2:63:25:43:88:06:3c:
f3:2a:98:ce:e0:e2:88:94:2d:54:c4:a1:41:3e:8f:7b:76:8c:
4d:fb:5a:9f:10:13:a2:2b:d9:d0:86:86:09:bf:6b:3d:1b:26:
2e:49:f9:6a:af:0d:60:e5:dc:30:b4:9a:82:ee:03:44:f4:14:
07:d3:b3:b7:32:ac:fd:3b:16:e0:be:c5:c8:e1:ff:81:a5:e8:
d1:da:cd:51:92:41:50:81:8d:78:c3:aa:d7:7c:f8:64:58:de:
92:9a:8f:43:dc:a2:e5:85:0f:55:95:b7:ce:82:f3:55:14:78:
7c:b9:9d:e8:c5:ae:5e:62:f2:dc:d7:a9:14:37:3f:11:78:36:
f1:6d:71:05:d3:3f:c2:5b:b2:75:0a:97:34:70:8e:6b:2f:dd:
6c:aa:76:58:b5:62:bd:11:95:9d:a8:a9:f0:5b:cc:bf:dd:cb:
22:c1:d7:c8:78:3e:e4:5e:51:26:f8:3b:4f:51:42:d8:09:9d:
90:d6:d8:9b:f5:53:ca:18:33:11:08:81:d8:e4:11:96:b3:79:
6f:a8:60:eb:3d:d9:0f:8d:12:66:4f:09:02:8a:d5:89:a8:04:
31:68:16:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:02 2025 by rpki-client