Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier: z0hGUXqqydBUYPFFE0FpudpwXTrUVkdTg8xdwXvquAs=
Subject key identifier: DD:F1:D2:1A:F1:CB:8A:17:23:4F:82:C7:4A:86:10:DF:A4:21:CB:73
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial: 019922C33DB0B9CA4D6C6766F3797020522B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number: 023A
Signing time: Sun 07 Sep 2025 06:00:44 +0000
Manifest this update: Sun 07 Sep 2025 06:00:44 +0000
Manifest next update: Mon 08 Sep 2025 06:00:44 +0000
Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: omo4kFPnSPl1gm4Iv3WCvPHXAHtQ92OG0nFS7jI3RXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:3d:b0:b9:ca:4d:6c:67:66:f3:79:70:20:52:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Validity
Not Before: Sep 7 06:00:44 2025 GMT
Not After : Sep 8 06:00:44 2025 GMT
Subject: CN=ddf1d21af1cb8a17234f82c74a8610dfa421cb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:62:3d:53:7a:2c:8e:b7:be:ab:33:a7:f5:
14:d9:72:66:04:13:cd:a1:3a:eb:a3:cd:97:bd:1e:
b6:6c:e5:cc:83:63:aa:59:a8:b8:ac:5a:29:cf:be:
c6:7e:73:5a:62:29:3e:12:70:e2:db:56:21:d7:ce:
91:36:1f:95:7c:11:c6:74:7a:74:c1:c7:32:98:dd:
66:be:91:2f:f2:5a:0a:af:6b:cf:ac:de:0f:33:a6:
bb:51:bf:bf:f0:f6:42:00:e9:ef:cd:11:ac:90:e8:
d3:f9:d8:22:b1:2e:74:df:b9:98:02:e6:34:23:ef:
9d:d0:2f:5b:f1:75:2c:99:8a:3f:14:28:66:56:ab:
22:5c:08:90:74:4a:f4:23:c5:90:55:6c:1e:df:82:
ad:73:10:5d:1c:01:31:6b:73:38:26:e2:6a:1e:d0:
c0:98:39:4d:9e:da:98:7d:ec:6d:0a:6e:c9:5a:92:
b1:34:01:b6:5c:e1:9b:a8:9a:60:ee:88:d4:3b:73:
0f:31:52:f9:cc:62:35:7b:5b:ed:e5:d4:e6:18:8c:
2a:6c:a8:5e:00:83:e7:ba:cf:8c:5f:98:f3:76:68:
0e:5d:28:eb:c9:9c:24:29:cd:9a:8d:5a:a8:1c:10:
5d:2f:b3:ef:bc:a2:2f:f6:f2:a7:71:7e:04:e9:88:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F1:D2:1A:F1:CB:8A:17:23:4F:82:C7:4A:86:10:DF:A4:21:CB:73
X509v3 Authority Key Identifier:
keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d3:01:f0:69:52:51:39:05:0a:c6:c0:7c:6a:b7:5b:05:84:
99:83:f8:bf:ef:ef:c2:60:72:99:eb:f7:12:82:95:72:97:9d:
b7:e1:62:db:79:75:46:62:36:88:0c:c7:d5:00:8d:db:de:cd:
80:70:ac:02:3e:dc:9e:aa:36:13:ef:e1:b8:91:0f:d5:1f:a2:
cc:90:86:0c:28:36:05:2d:e5:71:ba:54:78:40:eb:c7:b0:32:
8e:36:60:e2:4c:27:9a:13:2d:29:40:7f:70:7c:6f:af:42:c8:
9a:fa:6b:06:bf:0f:c6:58:c5:3f:2d:c1:33:9b:6e:59:2b:79:
a1:83:5a:ba:f2:c8:e2:86:fd:e1:66:13:41:f1:a9:a6:4d:ed:
31:f2:6c:ad:34:10:48:c9:30:5b:4b:e9:aa:e0:d6:a0:fb:d1:
93:b8:28:41:0e:52:82:54:9d:6a:25:39:9b:a3:2a:4f:e9:3a:
44:df:49:e4:dc:01:fd:ff:49:37:84:8d:a0:d8:b5:f1:ed:6c:
6d:85:d0:eb:5f:df:22:f5:59:63:4b:95:de:01:d1:09:8a:c9:
43:5a:82:34:4c:ba:55:e8:58:44:07:88:7f:d2:2e:98:d3:18:
e6:7d:7a:14:54:5a:92:f2:1f:8c:f6:a2:45:fe:1f:41:41:9b:
85:f1:44:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:39 2025 by rpki-client