Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: I7jUJbkjjPGQM7RdpRgPEgpEXr+hT14V/dwuNvdkNMU=
Subject key identifier: A6:BF:04:E4:2D:7E:AD:D7:BA:F2:9D:18:5E:4A:30:8A:93:C9:E3:AD
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 0199239EFD8710F70F60BABB6A04469E595E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:00:46 +0000
Manifest this update: Sun 07 Sep 2025 10:00:46 +0000
Manifest next update: Mon 08 Sep 2025 10:00:46 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: msfcP2xdpMbYAE57J13mZYHasW39GyQpTGzpKW48Ezo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:fd:87:10:f7:0f:60:ba:bb:6a:04:46:9e:59:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Sep 7 10:00:46 2025 GMT
Not After : Sep 8 10:00:46 2025 GMT
Subject: CN=a6bf04e42d7eadd7baf29d185e4a308a93c9e3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:f2:45:3a:4c:1c:69:d0:dc:d3:c2:04:e2:
9c:ed:07:71:85:4e:61:f5:56:f5:3e:4c:fa:ce:c0:
d4:fb:4f:0a:d7:d1:c6:3b:30:f4:6e:13:b9:54:c5:
4a:b0:5d:d7:7a:18:35:54:aa:f3:4d:1e:80:3e:fa:
10:9b:e4:c9:21:9d:ac:41:6c:8d:a8:7e:85:cb:2b:
a6:6b:45:a0:e2:3b:e0:c0:61:b7:43:61:88:87:98:
0a:d5:fe:e8:71:a1:73:fe:dd:59:76:9d:09:7b:02:
c4:03:8d:1c:22:5b:06:b4:48:2b:cd:fa:a3:98:57:
63:87:4f:b9:fe:71:08:71:a9:d0:d0:83:9c:c3:ca:
94:99:0f:1b:41:cc:78:57:bc:29:a2:6b:a4:17:96:
d7:d2:5d:84:79:43:f2:70:82:ec:e6:48:9a:59:fa:
39:ba:9b:6b:f2:89:cb:fc:6c:79:df:0a:b0:77:c2:
10:58:f9:ac:c3:1f:cf:66:c0:9c:98:f7:ef:e2:85:
e2:64:66:59:7b:6f:5a:9d:e5:4b:13:15:ff:a9:a4:
2d:49:4c:3d:de:00:02:49:41:c2:9b:13:13:62:02:
42:e7:54:23:75:2e:8f:ba:a2:18:de:e4:92:bf:bf:
d3:dc:9f:de:92:b5:a6:ea:b9:09:9d:8e:e7:7b:cf:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:04:E4:2D:7E:AD:D7:BA:F2:9D:18:5E:4A:30:8A:93:C9:E3:AD
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5a:b3:d6:14:d7:9d:01:09:fd:33:96:fc:47:51:b0:bf:d5:
36:1c:4a:8f:98:5d:f3:80:d0:75:46:22:c7:6d:96:d8:8d:93:
78:2e:e6:0c:64:7f:3c:95:26:1a:03:cb:8b:12:ce:9b:f4:89:
6b:7a:12:90:03:53:71:5c:8a:16:a9:d6:58:cf:38:40:24:f4:
33:ba:c1:99:aa:25:25:ff:dd:ec:91:f4:8f:1d:c7:a1:3d:5c:
4b:e6:33:e3:d9:96:14:91:81:36:fb:ab:57:49:d9:e4:0b:3d:
83:4c:1c:cb:36:1e:50:d7:62:e7:0a:1e:09:f5:bf:47:ca:ff:
68:bf:51:5b:f0:2b:d6:ea:2d:53:d7:c7:14:ee:f7:01:7f:56:
18:b0:d3:2b:7f:08:ca:61:ef:45:6f:03:b8:b4:c0:bf:0a:b2:
e4:64:70:ad:e7:4a:18:14:a3:d9:6c:1b:80:eb:7f:8d:19:77:
c5:6d:5e:e4:07:af:0c:51:ff:b9:d0:fb:3b:d9:16:29:2e:d2:
1c:59:ba:28:b8:12:d9:23:2f:c2:b6:3a:96:0b:f6:47:c5:b8:
71:17:9f:60:20:a6:4c:f3:bd:a0:ec:51:92:ab:4a:9d:73:75:
ad:87:18:78:d9:ed:60:90:f6:30:35:3d:7f:65:e9:a3:62:34:
48:c9:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:40 2025 by rpki-client