Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
File: xorAnHI17TE4Ph_ThzkY3RgzNCo.mft (raw, json)
Hash identifier: /akumnSlLKvDgC3+11++vkp+7plTakr7/AfaYYdP73U=
Subject key identifier: DE:F2:51:55:48:72:9E:A6:FC:45:6F:3E:CB:7C:26:11:20:13:AF:3F
Authority key identifier: C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Certificate issuer: /CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Certificate serial: 019922C367CA9DB8DB2DC4EAE24245837688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
Manifest number: 0641
Signing time: Sun 07 Sep 2025 06:00:55 +0000
Manifest this update: Sun 07 Sep 2025 06:00:55 +0000
Manifest next update: Mon 08 Sep 2025 06:00:55 +0000
Files and hashes: 1: xorAnHI17TE4Ph_ThzkY3RgzNCo.crl (hash: ZGv1BO9HG4fdA3JZ4uwBdQxQlnE11BxhpH3tidIKZ6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:67:ca:9d:b8:db:2d:c4:ea:e2:42:45:83:76:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Validity
Not Before: Sep 7 06:00:55 2025 GMT
Not After : Sep 8 06:00:55 2025 GMT
Subject: CN=def2515548729ea6fc456f3ecb7c26112013af3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:52:9b:41:73:fc:de:9c:d8:cf:a8:2f:9c:
dc:40:be:5a:1e:05:04:55:0a:8a:74:e5:35:61:f5:
51:c1:31:d6:ad:8e:96:00:11:97:ec:86:f4:0f:4f:
7c:2c:e6:75:79:d9:02:f4:5e:50:f7:a6:36:9d:e9:
70:ae:4f:84:d3:da:ea:11:50:a5:d2:4f:1e:6f:76:
a8:59:16:5e:bd:51:64:27:9f:d0:a7:be:98:d4:af:
1f:24:a9:db:a7:47:51:78:89:fd:16:13:52:32:6c:
2d:62:1d:95:f1:f4:29:20:5b:8a:1a:29:14:42:f8:
0f:53:2f:ce:f6:64:47:a3:94:66:a8:07:9b:3c:e7:
e7:72:97:f0:5d:df:e0:bc:22:11:78:48:3c:91:d8:
0b:29:72:0b:ee:54:17:2e:c1:fb:32:42:ae:84:fd:
6d:df:cd:85:b3:72:57:58:ca:fa:1e:7d:3c:1c:ff:
9c:52:e9:83:5a:d3:33:5d:7e:55:44:8c:64:88:0e:
2c:c9:8e:9a:5f:ad:cc:f1:c6:8a:5f:24:96:eb:1d:
ae:b9:c4:a1:f8:99:f9:55:e9:74:d3:73:02:fe:ec:
6a:f7:8d:fb:ab:54:44:38:75:cb:33:80:bc:65:d0:
04:fa:8e:7d:e9:90:9b:d6:81:69:a9:8f:f2:9b:57:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:51:55:48:72:9E:A6:FC:45:6F:3E:CB:7C:26:11:20:13:AF:3F
X509v3 Authority Key Identifier:
keyid:C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:1c:0d:31:97:89:84:9a:1a:05:9e:d0:7c:59:a7:27:83:32:
3c:94:02:db:5e:fe:55:e1:4d:5b:0e:03:4a:ce:f5:03:91:5b:
ee:66:96:5b:a1:fa:70:b0:0e:1a:8b:d7:e2:6c:77:67:8d:0a:
6c:d0:db:8d:60:60:6b:81:07:f5:a2:9e:54:d3:d9:b5:26:1e:
79:25:4f:64:35:ba:17:fe:e8:83:f9:78:b6:29:6a:ca:ef:85:
9d:5d:9d:62:d3:b8:a6:d7:17:97:8d:b9:95:b6:91:ba:2d:f5:
3b:01:39:b6:23:a6:1d:c9:f8:5c:e8:12:06:cb:e5:a3:8d:2a:
78:79:04:6b:8a:a9:b0:ed:a8:63:f8:3a:63:3f:f2:58:19:0d:
fc:59:e6:03:bf:be:0e:18:66:76:88:02:75:f3:7f:c7:6c:7b:
39:62:59:91:9f:36:d3:87:b1:ae:69:b9:a9:16:fc:9e:6f:29:
65:bb:4f:b6:e7:ce:94:a6:a0:e1:6f:4a:7d:4c:af:1d:5c:1f:
cf:16:57:d3:0d:bd:a2:b8:4e:41:9d:30:3b:d6:99:c9:fe:34:
7d:d5:1c:ea:7b:da:7b:13:f0:3b:ef:03:41:6d:9b:6c:56:2d:
e6:d7:08:9b:84:02:be:d4:37:6c:dd:21:12:7e:6b:28:0c:85:
99:01:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:59:16 2025 by rpki-client