Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: vfEx0FOFL0jl5vjwUdQyIcxm5KFs4plnIAVsk2YGsN0=
Subject key identifier: 61:00:3C:1B:F4:1B:04:8E:B1:52:E9:19:C4:F9:9C:68:2A:AC:57:5B
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 01984709236090F6A0789C2894EE43208875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 1061
Signing time: Sat 26 Jul 2025 14:00:37 +0000
Manifest this update: Sat 26 Jul 2025 14:00:37 +0000
Manifest next update: Sun 27 Jul 2025 14:00:37 +0000
Files and hashes: 1: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: 7grlupJDmPTGQ17t9Lpba3t/1pcgEQbyJuw4uELrhrM=)
2: a15ql9whSmA7v8PDlzobAKStIYU.roa (hash: i4JQTq1d7soOmwMqfdiIR8FwyHTrIMo+VQIkB92oIzE=)
3: qT5tUrp0ieWxjsIH98IvAEwbuX8.roa (hash: fpGji62FSVsBApBvHfHEB5ApQmyXJQRF9R2Di5FougI=)
4: tars8J2v-8N6JtB2suJ6nsAGhgI.roa (hash: VKSpLn3FB2L/sDLR9l5iJR3MIMweqN1CpStbR7qOoA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:23:60:90:f6:a0:78:9c:28:94:ee:43:20:88:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Jul 26 14:00:37 2025 GMT
Not After : Jul 27 14:00:37 2025 GMT
Subject: CN=61003c1bf41b048eb152e919c4f99c682aac575b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:53:e9:62:6a:e6:a9:7a:d4:ef:a9:a8:59:
37:ed:b3:8d:bc:5f:1e:e5:f1:bc:36:51:fa:c9:b8:
8d:92:eb:08:a6:f2:62:8e:aa:21:3b:53:88:60:30:
77:7d:f4:10:9c:5e:8a:58:89:c8:24:8a:54:2c:fb:
0a:be:dc:62:4f:f3:a6:1a:e8:13:ca:c9:9f:07:c9:
3f:46:ae:09:18:ed:c4:48:d2:f9:b4:89:3e:e1:fc:
03:55:91:02:05:7b:b5:3a:61:3b:c7:74:aa:5b:fe:
e2:d8:2b:b9:35:c7:d2:87:de:d6:1d:04:e4:d9:ca:
17:ea:e7:86:a3:e1:52:d2:d8:33:9a:a5:83:3d:ce:
3c:66:6d:e5:38:d8:0b:15:0b:c3:bc:3a:f8:42:02:
1e:a6:d9:14:00:27:0f:fc:61:da:50:70:09:d0:60:
45:cf:f7:b4:f1:35:e5:d8:4e:3d:b3:db:c3:83:f6:
89:df:e4:c3:de:3e:56:e9:b9:d2:ba:b0:9e:36:11:
8e:90:d0:3e:ef:7c:1e:8e:ae:90:98:ec:8e:bc:ac:
5f:29:72:a9:8c:9e:e7:08:dd:68:d6:e1:7e:f8:9f:
fe:a9:24:34:2d:86:b3:e9:e3:de:38:cd:b8:eb:92:
47:11:b5:a8:f3:f3:e8:48:45:23:a4:66:36:bf:92:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:00:3C:1B:F4:1B:04:8E:B1:52:E9:19:C4:F9:9C:68:2A:AC:57:5B
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0d:0c:7e:34:1a:e5:80:01:87:05:d6:fe:66:5b:92:99:38:
1a:8a:07:e2:b7:7f:c1:77:6b:4b:4e:15:e9:74:54:4e:d0:df:
43:ab:04:99:8c:d2:30:e9:fd:3f:ed:37:fc:94:db:02:a6:c6:
47:89:6a:e0:39:c3:c2:c7:fb:ab:e1:48:ca:2e:58:29:c1:c9:
4c:e7:36:e5:74:4b:55:5b:50:b2:95:a8:a9:5d:88:df:79:e3:
c3:f6:70:40:b8:bd:51:5e:4d:69:82:b4:1c:e3:cf:a4:b7:90:
60:26:15:c9:20:fe:47:95:57:94:cd:55:08:c5:fa:ef:df:44:
25:38:ca:a9:96:e0:92:ca:fb:c9:39:2c:12:16:f6:09:48:f9:
b4:bd:1e:6a:dd:61:e1:7c:7c:6d:36:9e:6d:c9:fe:6e:88:06:
6f:40:83:af:91:cb:1f:de:db:cb:3b:78:af:f0:5e:cf:74:19:
83:f2:9b:ab:e1:a5:cf:da:39:08:bd:71:a3:47:ae:9d:25:65:
e4:fa:55:ec:24:9b:66:f9:c1:a7:b8:3a:d0:23:cf:e9:af:c8:
f9:18:c0:32:b5:1f:ce:b9:04:0e:f1:20:78:71:2d:41:de:58:
76:a9:71:17:53:5c:dc:f9:a0:29:02:8f:41:e3:2a:d4:59:8b:
41:58:21:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:47:38 2025 by rpki-client