Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
File: XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft (raw, json)
Hash identifier: Sp9OQfApwVAiqQBlB9dIUdlBtio6wchw/4W/6kbU5m4=
Subject key identifier: 78:0F:FA:F9:83:EC:88:7C:02:37:56:04:7F:7B:41:04:05:5A:0F:38
Authority key identifier: 5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
Certificate issuer: /CN=5e55afde34211bcee6a7fd992488a24927b46947
Certificate serial: 0198469B595B1CEA5394A7AD64B05A4B336C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
Manifest number: 0249
Signing time: Sat 26 Jul 2025 12:00:42 +0000
Manifest this update: Sat 26 Jul 2025 12:00:42 +0000
Manifest next update: Sun 27 Jul 2025 12:00:42 +0000
Files and hashes: 1: XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl (hash: vC6xAuSyGa5MsYa5xNYMQJ46eqnEltVMO0udUJvQN5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:59:5b:1c:ea:53:94:a7:ad:64:b0:5a:4b:33:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e55afde34211bcee6a7fd992488a24927b46947
Validity
Not Before: Jul 26 12:00:42 2025 GMT
Not After : Jul 27 12:00:42 2025 GMT
Subject: CN=780ffaf983ec887c023756047f7b4104055a0f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:45:2c:22:85:46:2f:d6:cf:44:bc:db:56:
c8:58:99:0b:0f:98:6d:bb:bd:b8:8d:fd:3e:2d:14:
18:44:af:73:23:23:1f:a3:81:fa:a1:05:1e:ce:ee:
4b:5d:1d:60:7a:b6:81:71:72:c0:a5:80:0e:5a:db:
46:35:01:d2:2c:38:bd:e7:83:a8:88:ad:88:95:86:
02:17:57:61:28:11:88:e4:3e:cf:08:bb:93:d9:b9:
6d:c7:81:05:49:ff:21:73:07:c8:af:16:03:e3:20:
e1:b9:56:a8:85:84:12:01:47:91:44:95:14:f4:62:
84:e7:83:0a:00:7b:69:84:71:69:c6:a5:dc:cc:9b:
03:01:76:de:db:84:98:b9:ba:55:b7:58:09:cd:92:
57:8b:17:d9:f6:ed:86:99:3c:31:13:b7:c9:5e:e2:
67:f0:87:65:8e:82:da:99:e9:22:95:93:dd:81:08:
16:b4:12:be:0a:0f:1c:e8:6f:b1:01:cc:cc:ad:ad:
e8:f8:32:6e:0c:d2:0a:69:b7:19:68:78:72:75:97:
65:25:e4:ba:9e:b4:76:e1:bf:bb:a6:e8:65:5c:ca:
5d:e4:da:39:e8:d3:bc:8d:9a:4f:94:ae:05:54:63:
d7:7b:13:4f:c2:61:e5:2a:97:3c:70:a9:23:3d:a9:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0F:FA:F9:83:EC:88:7C:02:37:56:04:7F:7B:41:04:05:5A:0F:38
X509v3 Authority Key Identifier:
keyid:5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:08:60:6c:bc:dc:3e:4c:06:26:e1:de:b9:7d:26:e2:e6:f5:
20:1e:75:6e:df:96:f8:1a:71:65:2a:4a:bd:1a:cb:fb:06:e5:
38:50:02:44:f5:38:32:49:6f:80:9d:6c:6f:fe:96:33:c6:46:
c9:cb:58:f5:c6:f1:36:6b:f7:fb:e7:e7:c4:84:63:33:78:f3:
23:b1:15:ac:40:57:03:e6:28:82:f7:60:9a:88:2e:aa:b8:d8:
ef:fd:aa:8e:4b:ba:01:44:c7:c8:37:da:0c:dc:bb:8e:ec:f7:
5f:b9:6c:35:96:f5:ad:b8:ed:af:7b:bc:1f:ef:56:51:2d:1e:
5d:cd:77:ff:d2:2d:e0:2f:1a:b7:d3:a9:6d:dc:28:86:ec:8c:
6d:2a:1a:ab:1c:89:95:ff:19:c2:ba:ae:2e:54:21:bb:0f:8f:
00:0d:41:3a:e7:0c:81:14:34:2d:6e:db:8a:ff:37:74:75:25:
f6:83:0c:4a:ff:d1:61:4d:66:5a:74:c2:c0:60:7b:e0:43:7d:
35:4d:41:06:15:c7:46:d4:11:4c:25:f8:d8:ce:19:bb:89:d2:
f7:44:53:3a:fb:e2:c4:67:7a:95:2b:4b:54:f7:bc:a1:ae:39:
fe:fe:cf:fa:63:dc:6f:0d:76:65:45:7d:8c:f4:90:c2:c3:bd:
9b:71:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:03:39 2025 by rpki-client