Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier: UZkVnydhlCiiVoYub/5z/Tj7wvl2CbCyiCH15YiYxXQ=
Subject key identifier: 27:09:85:43:4F:F9:5A:F5:AE:C3:D9:30:1E:BC:66:4E:65:E4:0E:F3
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial: 019921B07DDAC398F5AB2E1184EE7D2E4FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number: 1600
Signing time: Sun 07 Sep 2025 01:00:38 +0000
Manifest this update: Sun 07 Sep 2025 01:00:38 +0000
Manifest next update: Mon 08 Sep 2025 01:00:38 +0000
Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: 3MYPpH8bvAffZyXMGOdxXqYKqBAd/68nchQKZ2TorPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:7d:da:c3:98:f5:ab:2e:11:84:ee:7d:2e:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Validity
Not Before: Sep 7 01:00:38 2025 GMT
Not After : Sep 8 01:00:38 2025 GMT
Subject: CN=270985434ff95af5aec3d9301ebc664e65e40ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:cb:24:58:bb:27:e9:bc:ec:b4:65:d6:22:30:
10:14:b6:db:05:69:fa:67:df:81:e9:81:2a:27:35:
7f:62:a4:d3:b2:05:97:f0:3a:9f:4f:ba:12:56:e1:
62:cf:72:05:8c:40:ab:99:94:b3:4a:8f:3c:cd:9b:
60:b9:e5:95:57:74:c1:20:e6:79:5f:79:08:0e:b8:
d5:50:e3:31:ff:1a:d0:08:ad:3c:54:85:aa:db:0b:
f4:00:c7:28:fd:26:a0:fd:9f:84:ed:d8:3c:23:72:
5f:04:dd:4d:92:f4:e5:a5:26:86:75:16:c9:c4:fd:
48:82:b3:2e:8e:25:87:20:05:9e:23:b4:ed:5d:4b:
96:03:40:57:44:f7:42:7d:6f:12:ce:b9:17:f1:21:
b9:4d:85:d8:79:c6:96:42:12:7b:0f:69:13:65:e6:
51:5e:99:ce:8b:27:26:04:18:de:0c:e7:55:db:35:
27:a9:1c:4c:af:7a:4a:c2:d6:d0:66:9d:d4:55:c7:
9f:35:5c:f6:30:bb:63:44:c4:01:8e:f0:0e:75:97:
10:2d:95:28:ad:96:64:8d:94:0d:9e:ed:d4:44:1f:
d1:8a:86:70:a8:aa:b5:61:cb:1e:ff:35:bf:58:14:
f5:da:df:ac:6b:dc:3a:ce:38:d6:4a:03:da:30:74:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:09:85:43:4F:F9:5A:F5:AE:C3:D9:30:1E:BC:66:4E:65:E4:0E:F3
X509v3 Authority Key Identifier:
keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:33:e6:af:38:ba:48:b4:26:9a:34:b2:a2:32:b7:1d:aa:28:
ea:35:ab:ba:1e:ca:bb:14:76:a0:e7:d2:1d:e5:8a:bb:9c:3d:
b3:0c:7f:14:1f:4f:90:ce:3b:8c:ee:73:c4:80:79:04:b5:b9:
9f:79:f6:27:71:4d:68:ee:11:10:06:50:d4:14:fb:ec:c5:81:
98:25:fe:3f:a9:76:1f:7d:6d:3e:5f:7d:bf:41:1c:41:9a:09:
71:0e:cf:e6:b7:f3:4f:0e:76:1f:65:82:8b:0f:89:fe:fe:c0:
0e:da:91:5d:40:e9:4c:91:c0:c8:dd:46:d0:4c:a4:21:f7:89:
0e:53:4b:a4:e4:03:ed:db:58:99:b7:9d:a4:ba:58:54:8b:4b:
d2:1b:47:b7:cb:b2:e7:c4:1d:ff:48:cc:85:b0:ef:cd:04:fa:
7e:29:37:f8:c3:90:a0:3f:47:21:83:fc:dd:03:58:66:86:f5:
fa:fb:f4:5d:12:51:de:c6:48:7f:7c:3a:80:93:b6:c5:9a:a9:
2a:8c:29:87:20:f0:fd:91:38:8e:22:a2:d6:41:e6:cf:ac:74:
55:28:0e:2e:db:a6:5f:95:87:f7:5b:29:6e:28:5a:a1:72:55:
18:33:54:70:3a:35:0b:a1:e7:be:a3:22:ae:e9:a0:7d:ac:33:
16:b9:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:25 2025 by rpki-client