Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
File: X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft (raw, json)
Hash identifier: KAm2y+dfEZvBC6gwX7x59uXxPDPhJws72xCwLXNpJU8=
Subject key identifier: 86:3E:61:DB:8F:CA:08:CB:F5:A0:64:48:98:A6:30:25:5D:15:73:E5
Authority key identifier: 5F:40:62:82:EC:14:FA:0B:C7:D6:51:1E:FC:BC:6A:E9:F1:E0:5B:3D
Certificate issuer: /CN=5f406282ec14fa0bc7d6511efcbc6ae9f1e05b3d
Certificate serial: 0199228D08A269CAAA06E95A5A4C0E078E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
Manifest number: 011F
Signing time: Sun 07 Sep 2025 05:01:32 +0000
Manifest this update: Sun 07 Sep 2025 05:01:32 +0000
Manifest next update: Mon 08 Sep 2025 05:01:32 +0000
Files and hashes: 1: X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl (hash: GdmPoYL0RQExCyzG0jEnSe7e1OdTSU0lfLnoHQ9Btvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:08:a2:69:ca:aa:06:e9:5a:5a:4c:0e:07:8e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f406282ec14fa0bc7d6511efcbc6ae9f1e05b3d
Validity
Not Before: Sep 7 05:01:32 2025 GMT
Not After : Sep 8 05:01:32 2025 GMT
Subject: CN=863e61db8fca08cbf5a0644898a630255d1573e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:66:eb:81:a4:4b:7d:9b:c5:1c:66:b7:0a:
af:70:9c:7b:4c:18:67:57:ed:01:49:88:70:c9:53:
98:a6:f6:fc:b6:5c:dc:9c:10:85:97:5e:0e:72:58:
ce:f0:fb:e9:07:c9:39:2c:04:7e:82:6e:41:bb:4a:
96:04:08:2c:50:37:75:b7:1f:52:32:d5:3a:8d:70:
5d:ac:24:46:48:b2:3b:01:de:09:be:59:39:5f:ea:
9b:ef:db:81:47:d5:9f:8f:9e:0c:fc:ca:6c:1c:81:
b4:e1:f5:72:6b:f8:4e:9c:b7:38:64:69:1b:ff:4b:
42:6b:e5:ea:66:2a:d2:1b:52:c2:95:90:59:67:f4:
60:6d:ae:6e:01:e4:07:0b:34:5c:ff:bb:65:97:5f:
4c:04:5a:32:9e:a7:3e:2a:3b:64:44:aa:59:21:3f:
40:2c:eb:36:6d:f7:48:b4:3b:1e:fa:3b:bd:a4:e7:
b4:35:d9:d4:75:be:fc:ce:f8:a6:2d:ae:a8:f5:a2:
af:0a:a8:b3:43:c0:6c:8d:2d:7e:6c:d0:ed:5b:52:
38:23:f0:bf:79:7d:0c:39:48:51:d0:cd:47:0c:27:
25:6b:c9:ce:f2:8a:a0:2b:4b:fe:b4:51:f3:0b:71:
50:5e:cc:9b:39:1d:6a:66:34:25:dd:2d:ec:ee:89:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3E:61:DB:8F:CA:08:CB:F5:A0:64:48:98:A6:30:25:5D:15:73:E5
X509v3 Authority Key Identifier:
keyid:5F:40:62:82:EC:14:FA:0B:C7:D6:51:1E:FC:BC:6A:E9:F1:E0:5B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:11:60:08:55:73:7b:e9:ea:62:af:61:83:e2:96:bf:5f:fb:
c8:59:cf:2f:40:33:3b:57:d6:b5:44:e3:64:f7:c4:a9:61:76:
47:0f:73:f9:72:b7:45:17:7e:07:96:20:0d:cc:f0:ba:75:a2:
5c:80:9f:d4:4d:35:b4:cc:40:e3:83:a0:bd:7c:d6:70:73:1c:
ca:34:ee:6b:ab:fa:c4:c8:8e:40:55:9b:ae:78:57:9c:c8:c0:
a1:07:9d:aa:cd:36:64:26:e6:7d:6a:9f:e7:8f:8c:66:9b:0d:
6b:7c:a7:41:3f:47:db:70:c0:47:f1:d4:a2:70:95:3d:7d:e2:
c3:aa:59:44:cd:ff:c3:fd:d4:c5:90:ed:04:9b:8b:f8:cc:5a:
86:d4:ce:89:67:5e:43:75:e3:06:d5:b4:3b:c0:ac:c9:e2:77:
0a:18:b1:15:34:22:04:f1:c2:24:ce:20:82:75:49:69:ef:b4:
85:b3:b4:12:3a:04:cb:17:d5:a1:8c:16:fd:65:18:eb:bd:30:
e8:78:59:59:35:18:41:ed:e3:65:84:9e:01:da:01:30:68:0c:
95:9b:3d:29:0a:c8:17:3a:0e:39:fa:8e:ad:41:56:5b:c8:52:
2a:80:5a:87:ac:2c:b2:c6:6b:ce:3e:25:44:4e:a5:7a:1c:f3:
e5:f2:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:38 2025 by rpki-client