Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json)
Hash identifier: ve9MAv20e6+vWa57cZjONyR/3J6dujmt/DmWnhQvhkk=
Subject key identifier: 8F:32:96:A6:55:41:54:2C:EA:D4:3E:BB:42:C3:17:AD:E4:59:A6:86
Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Certificate serial: 0199240CF2C66B67CF00E1C81F47BC76E586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
Manifest number: 09D1
Signing time: Sun 07 Sep 2025 12:00:52 +0000
Manifest this update: Sun 07 Sep 2025 12:00:52 +0000
Manifest next update: Mon 08 Sep 2025 12:00:52 +0000
Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: lN0bGKBF3qHXow3zqBT76o51nJH7ZXW8zbKQynyQi5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:f2:c6:6b:67:cf:00:e1:c8:1f:47:bc:76:e5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Validity
Not Before: Sep 7 12:00:52 2025 GMT
Not After : Sep 8 12:00:52 2025 GMT
Subject: CN=8f3296a65541542cead43ebb42c317ade459a686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:05:51:bb:f5:9d:8a:93:eb:a1:cf:aa:34:
89:ba:7d:ca:72:e1:e9:f0:64:b5:32:51:3f:d6:4c:
85:e6:e6:67:6b:4e:ab:e1:ea:fd:9b:6d:6a:a4:de:
77:14:13:f3:77:68:ea:6d:17:b8:21:62:64:d8:1b:
fc:d2:8f:94:b1:de:b4:e1:c1:18:51:47:d5:7d:86:
2e:1a:46:b9:3a:a0:f4:3f:c7:4a:14:a3:0a:41:9a:
5b:65:ba:c0:4e:7b:99:ea:f3:c5:15:7e:58:c4:f4:
41:15:82:10:a4:9c:97:b7:17:32:29:91:26:49:f9:
ae:be:80:30:92:b1:66:fd:9b:7b:e7:2d:78:18:76:
40:74:b8:d2:b1:3c:de:86:e0:79:45:d1:be:85:98:
83:cb:00:4f:6b:c8:4e:e8:53:68:be:0b:86:d6:3f:
5b:07:44:75:94:37:f9:6b:37:e0:cf:19:1e:dd:09:
d0:11:2b:70:06:e7:96:cd:1f:5c:20:c2:1a:84:37:
81:9c:1e:03:53:b8:e9:08:00:5f:e1:5b:68:0d:78:
ea:a7:f5:d9:8c:25:15:a1:69:4f:c2:27:54:27:ec:
69:f5:a7:20:7b:6a:32:52:43:90:a6:4b:4e:0a:fa:
10:91:bc:47:fb:f0:41:fd:89:c2:c5:c6:1b:2d:d3:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:32:96:A6:55:41:54:2C:EA:D4:3E:BB:42:C3:17:AD:E4:59:A6:86
X509v3 Authority Key Identifier:
keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:05:66:48:cd:06:af:94:13:90:70:3a:57:0d:a8:33:52:1a:
ea:97:9c:46:92:51:bd:38:59:c0:a8:03:df:c4:15:85:3a:ab:
b0:6d:d8:6e:e4:ab:78:89:b7:8f:aa:bc:ff:2a:ff:8f:06:6a:
54:a3:77:84:7d:6c:61:70:5f:7c:9e:af:e6:4e:6b:7c:81:37:
d4:18:bb:a4:64:4a:38:49:3d:45:0f:67:a8:57:66:0b:7c:2b:
ae:cd:55:c2:5a:9b:6b:1e:62:9c:34:8c:c3:78:e7:f7:df:a5:
5e:75:d9:fd:ee:d7:c9:98:06:97:f0:4b:32:92:d9:7d:8b:61:
01:ab:c2:3d:e1:e6:09:94:70:7b:ce:df:cb:bf:36:b2:95:b7:
60:b7:28:f9:62:41:93:4d:fc:b7:58:ec:27:4d:fe:cd:8b:7f:
be:78:35:53:a9:9a:83:a5:64:14:4e:fb:6f:dd:37:49:4d:d5:
4e:55:ed:cd:2e:e1:c2:f7:1a:8c:04:a3:31:04:57:5f:b4:ed:
04:6a:77:bf:d0:6d:4b:b4:9d:c1:14:58:78:1f:9e:4e:6f:9a:
b2:6c:6f:fc:4c:a8:80:17:d1:7f:ea:f9:86:e0:fc:65:32:4e:
e1:fc:aa:0c:a8:f0:a5:55:1e:8f:f0:d1:04:6c:2a:0e:97:d7:
67:08:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:48 2025 by rpki-client