Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.mft
File: XtZ3K5AhLldySfc1bCGO0QaLZ3Y.mft (raw, json)
Hash identifier: You8ezpEbggoPYg8sl/VnxEhuhEGASYgYkU1deyWe1A=
Subject key identifier: D3:EE:66:5C:C5:CB:85:7E:B7:9F:5D:C7:99:BD:1F:A3:4F:4B:4D:33
Authority key identifier: 5E:D6:77:2B:90:21:2E:57:72:49:F7:35:6C:21:8E:D1:06:8B:67:76
Certificate issuer: /CN=5ed6772b90212e577249f7356c218ed1068b6776
Certificate serial: 01984966A323958096F4C9600F9DFDE9E04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:01:59 +0000
Manifest this update: Sun 27 Jul 2025 01:01:59 +0000
Manifest next update: Mon 28 Jul 2025 01:01:59 +0000
Files and hashes: 1: XtZ3K5AhLldySfc1bCGO0QaLZ3Y.crl (hash: UPRtvA/ENOJ3clhXvImKc8LMz0BAjyuBHzMBigYzW98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:a3:23:95:80:96:f4:c9:60:0f:9d:fd:e9:e0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed6772b90212e577249f7356c218ed1068b6776
Validity
Not Before: Jul 27 01:01:59 2025 GMT
Not After : Jul 28 01:01:59 2025 GMT
Subject: CN=d3ee665cc5cb857eb79f5dc799bd1fa34f4b4d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:52:17:89:6e:4e:90:9f:f6:6e:63:c4:45:
b4:c3:f1:f9:ad:06:af:05:33:c6:fa:f6:03:2c:95:
28:07:34:c9:5e:f9:b6:36:af:0a:ea:47:cd:a4:91:
ef:29:15:4a:e6:36:6e:e4:d6:3c:97:1b:78:7e:f3:
fa:eb:7f:4c:eb:90:25:fe:5f:ab:e9:0a:4a:84:03:
5e:80:0b:04:1f:51:eb:4b:a6:93:7c:12:9f:bf:5d:
20:07:11:f5:9b:f9:8d:1c:be:1d:90:99:f2:da:37:
d6:b3:9b:df:fc:98:c7:67:94:cf:cc:e7:4e:58:59:
68:8b:c9:19:e8:b4:8e:dd:ea:40:3b:d6:7b:66:26:
b8:b7:6b:4d:23:28:aa:fa:91:95:37:ab:b2:31:36:
77:94:b8:4d:8c:35:01:37:3b:13:81:7d:88:80:fe:
19:c9:ca:b3:bf:d2:48:82:03:05:50:63:ee:1a:bf:
5e:18:b7:ba:57:11:40:fb:a3:b2:7f:49:6d:20:75:
a5:6a:c2:eb:2c:5f:1c:f6:b2:60:d4:a2:ec:cd:61:
bb:ff:4f:cd:68:bc:2c:a9:28:45:48:06:b0:0c:4c:
66:c1:e6:03:57:36:6f:83:a4:fe:b5:7b:a5:d7:5f:
fe:a4:be:30:b0:b8:42:62:14:8a:37:b3:10:5e:ee:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EE:66:5C:C5:CB:85:7E:B7:9F:5D:C7:99:BD:1F:A3:4F:4B:4D:33
X509v3 Authority Key Identifier:
keyid:5E:D6:77:2B:90:21:2E:57:72:49:F7:35:6C:21:8E:D1:06:8B:67:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f5ee76-eeae-436c-8843-862106853860/1/XtZ3K5AhLldySfc1bCGO0QaLZ3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8c:48:87:62:1e:ce:b2:3f:fe:17:a2:11:b6:a1:a4:0f:b2:
8c:00:66:02:87:18:5c:6e:4e:88:e6:27:e7:d2:08:d0:dd:93:
4b:ca:74:83:4f:bc:0c:66:a2:1e:47:07:74:bd:ec:04:b9:39:
d2:90:af:e6:e8:e1:3c:70:8e:a3:b2:e5:2e:f7:b1:47:80:9e:
a9:03:d7:35:e3:d6:e6:2b:c2:f6:fc:90:38:61:c3:de:57:a2:
a9:b6:de:66:42:22:9f:13:f6:fb:5e:7f:6b:a3:d9:ad:16:50:
95:c0:db:9a:22:4d:47:51:66:44:db:98:b6:d2:d1:d7:78:1f:
e3:5e:c9:b3:ca:a0:b5:4a:2f:2e:46:d8:67:cb:f5:c2:9b:08:
43:16:9e:dc:fe:e6:31:6c:70:f3:5b:74:6f:5c:d0:df:5c:28:
fa:88:46:13:fc:38:54:13:14:40:f7:35:10:e4:11:86:1a:df:
af:c4:5c:2f:70:57:b1:8c:dc:2d:ae:e6:7e:01:03:5e:fe:1a:
70:62:6f:6b:9f:1b:bc:12:bf:40:3f:9a:d0:f3:14:5e:f7:81:
4e:b9:5c:9e:61:1c:f5:7f:7a:2e:b4:1e:53:33:39:ce:96:7e:
c0:43:52:f5:0a:26:fa:fb:2f:59:f7:3f:05:89:ec:26:32:59:
e9:96:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:22 2025 by rpki-client