Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier: zy7PNHnO5DIroZod4Ic6cQv/S3MG8UwOEuXpjxYhb9U=
Subject key identifier: 25:06:04:A9:16:22:8E:7B:52:4F:7E:2D:F2:C4:66:D1:85:5B:13:9C
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial: 01984A40F2FCB8199A005AF9178FE6438935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number: 0BB3
Signing time: Sun 27 Jul 2025 05:00:27 +0000
Manifest this update: Sun 27 Jul 2025 05:00:27 +0000
Manifest next update: Mon 28 Jul 2025 05:00:27 +0000
Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: wsV7qo9XrPTns1z7mwgUMIHtOmbn5hlxXZibMiL5Vtg=)
2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f2:fc:b8:19:9a:00:5a:f9:17:8f:e6:43:89:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Validity
Not Before: Jul 27 05:00:27 2025 GMT
Not After : Jul 28 05:00:27 2025 GMT
Subject: CN=250604a916228e7b524f7e2df2c466d1855b139c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:22:1b:89:a4:06:fc:1e:d7:d1:95:a3:7f:
90:99:a3:ef:c4:f8:9e:e8:05:96:62:67:bc:fc:cc:
6f:f7:96:08:e0:46:cf:f8:27:d1:7c:98:51:7b:51:
48:f9:c7:83:36:1b:12:7f:93:aa:fe:f5:be:55:04:
3d:21:f6:0b:f0:e0:25:33:51:ab:1a:2f:a8:a7:84:
5f:07:ee:c8:7a:24:87:82:bd:5a:3b:3b:5f:35:57:
d7:fa:59:0a:b2:13:33:67:12:3f:28:99:c0:d2:49:
f4:65:75:67:ae:af:39:72:95:c8:47:5f:41:95:62:
ca:5b:87:b2:de:51:62:8f:77:9e:29:3c:9c:aa:8c:
93:6d:28:ee:3f:a2:38:ec:b6:aa:1d:ba:21:42:27:
72:aa:eb:fd:89:15:44:f8:b2:4b:51:b1:63:96:83:
c4:5f:be:a5:33:10:b5:97:fa:f5:b5:39:e3:25:d7:
53:c6:85:51:d6:4c:4e:ac:fc:9f:89:41:b4:8a:50:
96:0b:5a:0b:90:c7:af:56:f2:d9:82:99:37:a9:ba:
11:7a:0c:84:27:ed:4b:69:c0:f0:a3:4c:f8:b0:6c:
0e:01:59:30:8f:92:98:53:29:db:33:93:1c:20:f5:
2d:49:d9:ec:b1:9e:39:35:0b:55:b9:07:23:43:43:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:06:04:A9:16:22:8E:7B:52:4F:7E:2D:F2:C4:66:D1:85:5B:13:9C
X509v3 Authority Key Identifier:
keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:48:94:a4:8e:b7:4c:9f:4a:8c:65:48:27:c7:02:23:e1:37:
18:1b:51:43:49:c4:a6:f1:f3:14:55:39:d6:9f:4f:1b:b9:8e:
cf:93:53:02:ab:19:eb:bd:2e:9a:99:45:77:9d:30:aa:14:4f:
c8:5a:0c:08:5f:20:10:cc:4b:6f:12:f9:07:53:a0:14:68:8f:
6f:c5:aa:71:dd:9d:6a:0c:06:97:85:6f:ca:20:60:bc:be:9a:
e1:5a:09:0a:e2:9a:4a:5a:67:a7:1f:7b:1d:86:23:42:60:9a:
51:34:16:0f:48:38:4f:f9:24:0f:8e:18:4c:61:45:ce:b3:9d:
ae:f6:b8:51:83:65:2d:1b:00:44:5b:1c:8f:cf:ba:23:5e:97:
1b:87:0c:26:86:23:f6:ae:e5:41:e1:84:7d:23:10:9a:6e:80:
15:59:97:2b:d8:ff:5b:0d:ae:76:de:5f:a2:7d:d2:ea:7d:7c:
7d:ff:dd:2f:1d:55:2e:ec:08:ce:1c:9b:76:e8:1d:8d:b0:a2:
b9:79:27:e6:a1:e7:80:b5:7d:fb:25:22:62:e3:c5:df:78:35:
c1:4a:fb:ff:66:21:f4:83:55:63:4f:46:3f:fc:33:0b:b8:fa:
d7:89:f5:35:d5:ce:37:6a:a9:e6:0c:06:0f:5b:2a:c5:8d:f3:
ab:3a:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:24:23 2025 by rpki-client