Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
File: Xl5k_r-lZnT03hZCn13eSdnOk2g.mft (raw, json)
Hash identifier: 9Et2TsFF/sEMyhnfYwuYtob1izGtplOJC1RRkWUgdp4=
Subject key identifier: 81:46:3F:B0:C1:F3:32:02:58:21:EC:18:B7:F7:6F:E5:B3:2A:09:F6
Authority key identifier: 5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
Certificate issuer: /CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Certificate serial: 019848C05D9DFAAF78D3D3EECFC324CD9406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
Manifest number: 1292
Signing time: Sat 26 Jul 2025 22:00:23 +0000
Manifest this update: Sat 26 Jul 2025 22:00:23 +0000
Manifest next update: Sun 27 Jul 2025 22:00:23 +0000
Files and hashes: 1: Xl5k_r-lZnT03hZCn13eSdnOk2g.crl (hash: j66mSIJTSZK7hDlt2fF1aXC22Z6X97i1FpajMSCEqbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:5d:9d:fa:af:78:d3:d3:ee:cf:c3:24:cd:94:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Validity
Not Before: Jul 26 22:00:23 2025 GMT
Not After : Jul 27 22:00:23 2025 GMT
Subject: CN=81463fb0c1f332025821ec18b7f76fe5b32a09f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:0d:38:00:54:98:4e:5a:27:e1:6b:bc:22:
ae:79:4b:21:26:e9:4a:72:91:58:9a:9e:eb:ba:ca:
3b:77:03:4d:2c:51:a1:35:f6:7c:4d:a5:f7:78:df:
ee:2b:a4:46:2a:45:a2:c4:a1:27:24:c9:e7:30:78:
92:90:e6:7d:60:8b:a5:fd:2c:0a:a8:69:ce:ec:0f:
65:41:84:93:c5:26:ba:80:8a:29:b7:70:57:78:e1:
2f:24:c6:48:d2:ef:53:95:80:b8:30:3a:41:55:22:
1e:ed:33:1c:b6:67:f0:22:9a:80:00:0c:bb:ed:98:
6b:45:5f:08:08:06:7e:76:be:14:61:89:08:e1:66:
c4:5a:79:8e:87:ad:03:7f:df:bb:c0:5c:4d:49:33:
3d:95:8a:00:c7:44:60:e1:ed:12:ac:db:b3:eb:fa:
b1:b2:b5:e0:9c:07:4f:16:ff:8d:cf:d1:1a:07:53:
38:54:37:42:fc:91:a5:f8:8f:94:4e:a1:68:32:4c:
86:29:73:29:bd:12:55:6a:80:de:20:08:9a:a2:3b:
87:6f:6b:a6:97:dd:90:87:b5:73:2a:d1:cb:10:bd:
24:5b:c5:1d:7c:42:ce:99:25:bc:1d:cd:18:61:00:
e9:87:48:46:05:3b:fe:49:c7:a6:0a:07:8b:f8:ab:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:46:3F:B0:C1:F3:32:02:58:21:EC:18:B7:F7:6F:E5:B3:2A:09:F6
X509v3 Authority Key Identifier:
keyid:5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d6:95:f8:76:51:12:be:9b:e6:f0:9a:e6:76:d6:f1:af:49:
c1:58:e6:18:86:3a:e1:e9:f9:80:cf:4b:50:37:a9:97:d6:94:
1d:d6:2c:6b:b6:ec:bb:12:96:95:ea:78:cf:b4:e6:c7:82:64:
ff:65:5b:d4:f2:af:db:d9:a4:21:d1:3c:1d:a5:2d:3c:88:f6:
42:78:82:01:65:a0:19:27:94:33:37:e4:00:2d:8e:68:6d:fe:
ca:5f:83:59:c8:f2:f2:e5:65:bd:67:f7:16:ae:b5:76:8a:36:
af:52:15:4b:fd:17:e1:dc:e9:fd:cd:04:7d:20:5b:f2:d6:b1:
84:66:53:32:47:f9:83:7c:43:5e:26:1b:c1:d1:fe:9a:be:6d:
f0:09:5e:2e:df:66:9e:72:cf:97:c5:d8:54:c9:4c:49:5d:97:
e8:01:ff:fd:62:0d:b1:a2:fe:cd:59:27:e9:4e:91:85:36:de:
23:cc:6e:f0:cd:1e:81:2b:94:ad:a6:9c:15:f7:8c:56:73:53:
09:96:9a:b0:d1:21:d1:67:c3:b5:64:b3:9b:56:5f:fb:4a:30:
06:e1:d9:8f:95:0b:89:f2:86:b8:be:5d:4a:b5:db:7b:9a:d1:
89:c3:51:80:eb:31:a4:82:63:85:7b:73:73:19:29:5d:dc:9c:
72:55:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:11:13 2025 by rpki-client