Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
File: X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft (raw, json)
Hash identifier: v2HguyUxlPaueQfgNql8zGhcxAr0ZQkgxwf8EcE3+Bs=
Subject key identifier: 2B:11:5C:0C:EF:FF:7E:94:85:87:5C:6C:90:1D:57:3A:CC:B3:6E:72
Authority key identifier: 5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
Certificate issuer: /CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Certificate serial: 0198496645484C5A6AE0F0A1E9B62869B3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
Manifest number: 15FC
Signing time: Sun 27 Jul 2025 01:01:35 +0000
Manifest this update: Sun 27 Jul 2025 01:01:35 +0000
Manifest next update: Mon 28 Jul 2025 01:01:35 +0000
Files and hashes: 1: X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl (hash: URg4vF5cDiiXBV/RVvR0KGpvHXT7qiVWyZr+9TWAZH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:45:48:4c:5a:6a:e0:f0:a1:e9:b6:28:69:b3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Validity
Not Before: Jul 27 01:01:35 2025 GMT
Not After : Jul 28 01:01:35 2025 GMT
Subject: CN=2b115c0cefff7e9485875c6c901d573accb36e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:41:c1:46:47:d0:7f:30:80:84:88:1f:c8:
9e:d7:b3:2d:b8:8f:a3:47:12:d3:36:2f:a4:c9:33:
2c:dd:b2:74:64:ba:de:b8:a2:f6:7c:99:4f:c5:2e:
f7:f9:8e:a2:6c:92:5a:71:b8:ef:a9:a9:68:6c:2e:
c9:4e:69:c0:da:41:17:78:b2:9a:25:09:f4:7b:a5:
9f:04:4a:5d:55:b6:cd:76:ab:d6:02:a5:fe:99:a9:
3f:f8:3f:6c:a7:82:f8:ab:15:b6:96:bc:79:36:35:
d9:55:ae:1e:05:43:34:b1:c4:54:9d:51:b1:b7:13:
dd:fa:8a:5c:43:ca:2e:bc:8e:ea:a4:b2:8c:69:0a:
a9:9b:2e:a3:c7:26:8e:19:fa:d3:76:10:75:ef:01:
d7:ac:11:b7:52:45:44:6a:4d:5b:82:89:5b:a4:44:
90:2b:1c:e1:76:30:11:d3:fb:53:77:8e:21:8e:e0:
9c:93:20:ae:2a:1a:01:86:db:63:1d:28:01:93:86:
f4:7b:bc:88:0b:58:4b:d8:d8:e6:3c:55:1a:f2:3f:
42:ff:a3:d0:b4:e5:61:00:2b:b4:86:4b:7a:67:c1:
1f:ee:7e:f1:e0:18:d4:07:44:a5:e3:47:8e:c1:09:
20:76:df:c8:c1:84:31:5c:9e:ee:39:a0:67:e0:9e:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:5C:0C:EF:FF:7E:94:85:87:5C:6C:90:1D:57:3A:CC:B3:6E:72
X509v3 Authority Key Identifier:
keyid:5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:11:cf:aa:1e:37:86:46:63:d4:28:91:3b:7f:5c:85:ae:3c:
19:67:1f:35:d7:f2:5b:6d:e7:8f:a8:1c:1a:11:72:0e:3b:94:
86:ee:4d:b5:8f:1d:cc:3f:0a:a6:7b:11:98:29:81:ae:09:cb:
3a:36:be:a7:29:27:e7:92:89:52:9e:fb:59:63:c4:4e:d0:36:
a7:e2:52:30:27:bd:43:10:53:f6:f9:72:10:f1:0b:f9:69:90:
ee:95:db:a3:b7:0f:1a:5d:20:98:9a:33:b0:a4:20:a7:e5:c8:
a9:88:1e:a8:53:4d:6c:81:eb:9f:d8:ef:43:50:49:c0:88:da:
fa:fd:13:6d:a3:bd:81:d1:75:6f:d6:21:91:bc:71:b5:aa:67:
9e:90:e9:fa:ec:fc:c4:ed:70:52:d2:f5:12:f7:6d:bc:89:e1:
c9:eb:fb:35:a2:42:26:f6:f4:07:ba:58:3c:02:d3:6d:8c:41:
2c:7f:dc:0c:f6:00:4f:07:6b:b4:e2:be:91:1b:fc:94:53:13:
dc:cd:7d:c0:76:3b:8f:0e:c3:e4:fd:33:98:b0:7c:1f:c4:91:
26:10:2d:0c:72:48:c6:06:db:fa:58:4d:30:6b:67:4f:2e:68:
ae:35:db:20:d7:6d:52:d7:93:cb:e2:25:94:6b:65:a3:96:68:
55:36:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:09 2025 by rpki-client