Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: Tig5hhWUohId1VlvNl1oK5RFmSJq6HXb20P6i9f90fw=
Subject key identifier: 21:E8:31:1D:96:8B:A9:7F:D6:EC:47:47:13:2B:F5:75:4C:BD:7E:55
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 019848893A781701346C9E4C2539F81716A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 0A26
Signing time: Sat 26 Jul 2025 21:00:09 +0000
Manifest this update: Sat 26 Jul 2025 21:00:09 +0000
Manifest next update: Sun 27 Jul 2025 21:00:09 +0000
Files and hashes: 1: GeKBRab06m2Sa_WEDlm2vrbqt80.roa (hash: rshNYrEYAk6Ccd9rs6FmkxFoBRIeaz8vJy7lI8MW13k=)
2: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: yhkU5ysEFIiL3kpYcLE1RySD8FVEf3BIpHbWM+rtX80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:3a:78:17:01:34:6c:9e:4c:25:39:f8:17:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Jul 26 21:00:09 2025 GMT
Not After : Jul 27 21:00:09 2025 GMT
Subject: CN=21e8311d968ba97fd6ec4747132bf5754cbd7e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7c:df:88:e2:71:a4:0d:2e:ca:42:fb:27:a6:
af:97:b9:ca:8f:66:20:63:c0:ac:be:c9:9b:d0:75:
51:81:a3:a6:3a:60:40:93:5f:89:e3:1a:ea:9c:78:
34:e9:c8:b5:f2:6e:6f:17:d9:04:29:3e:53:d7:13:
38:66:f0:d5:0a:bf:28:7f:23:17:ae:14:23:c2:5d:
6c:ab:8e:21:20:8a:ad:19:d0:f4:04:7d:9f:49:d6:
99:61:f0:98:20:1c:ca:4e:fd:e1:23:27:cb:fd:d3:
be:f3:0b:0b:16:66:0f:1f:ab:a3:3b:d9:cb:78:d4:
b0:07:7b:47:af:24:54:be:98:38:52:f2:98:88:b4:
1b:32:ce:16:84:4b:a0:e2:8d:be:d4:87:24:37:02:
7a:4f:5f:74:4f:77:d9:07:cd:1e:d9:e9:4f:50:c5:
ff:c5:d3:5b:95:b4:73:6d:c6:9c:c0:16:c6:5d:ad:
f1:39:97:a2:e0:05:ea:d6:16:a2:b2:dc:33:51:78:
83:4c:16:19:12:df:c0:14:43:c1:31:05:06:64:46:
d0:8f:4f:0d:0e:19:3d:04:38:e1:e4:f5:7d:3e:83:
58:a7:e3:cd:1e:8e:23:66:9d:46:9d:0d:99:8f:3e:
ec:75:8e:df:bd:de:7f:08:73:d7:d2:37:b4:a4:5d:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:31:1D:96:8B:A9:7F:D6:EC:47:47:13:2B:F5:75:4C:BD:7E:55
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6f:b8:e4:e0:55:b6:18:31:f4:22:0d:d5:5c:b1:ef:87:e2:
70:c0:2e:97:58:ed:41:bd:5e:d6:e2:63:eb:9a:52:21:6d:ef:
27:3e:39:b9:ed:1a:54:ed:f8:6e:0e:7b:5e:4a:b5:13:56:27:
f5:3c:b5:d8:43:a8:02:ef:ee:5f:95:07:ba:07:5b:79:0d:1c:
ff:fb:0c:ee:52:33:99:4f:61:23:9b:fa:b0:22:00:53:56:d3:
54:3a:70:f8:72:50:7a:cf:f0:f6:2e:fc:c5:87:b7:b0:7c:ee:
82:e4:af:b1:78:6f:99:02:78:ee:ed:32:96:3e:cf:27:7b:cf:
ba:69:48:1a:80:e1:2a:b6:1f:20:df:3f:b3:e9:f8:42:a3:15:
84:e9:36:a0:40:00:33:64:33:89:39:b3:75:6a:fc:ae:88:3b:
18:dd:7b:bb:f8:42:b5:1c:bf:5c:40:97:3a:d8:66:6f:ba:5f:
35:63:3b:11:7e:81:e4:e4:be:94:12:33:93:04:59:cf:e3:24:
71:96:19:14:9b:7f:0a:f5:29:78:5f:9a:6e:6f:88:9a:d8:63:
14:28:5a:4a:76:d4:b9:2f:8f:e5:bb:e8:10:e7:48:70:07:01:
19:45:0d:68:06:bf:86:d9:ca:d7:19:7b:a4:2d:80:0e:7a:0e:
9e:8d:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:02:08 2025 by rpki-client