Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft
File: XeHEMjIqoQWMPm_lf2N0qSlgacE.mft (raw, json)
Hash identifier: Ce6tZJyYNt8tFjSJT172UketR6sRsdu2RR1UcvpcNFw=
Subject key identifier: 7B:10:A6:36:92:AB:28:18:2F:B4:4C:49:CB:FD:6C:81:B1:CA:A1:D2
Authority key identifier: 5D:E1:C4:32:32:2A:A1:05:8C:3E:6F:E5:7F:63:74:A9:29:60:69:C1
Certificate issuer: /CN=5de1c432322aa1058c3e6fe57f6374a9296069c1
Certificate serial: 019848C02CA0DF5AFF2F94D0CB0B09E2ED07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeHEMjIqoQWMPm_lf2N0qSlgacE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft
Manifest number: 0AE3
Signing time: Sat 26 Jul 2025 22:00:10 +0000
Manifest this update: Sat 26 Jul 2025 22:00:10 +0000
Manifest next update: Sun 27 Jul 2025 22:00:10 +0000
Files and hashes: 1: XeHEMjIqoQWMPm_lf2N0qSlgacE.crl (hash: JeXqYeXE94YmEsH//1ECmWQSHGlvrVF+wVgabW0XkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeHEMjIqoQWMPm_lf2N0qSlgacE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:2c:a0:df:5a:ff:2f:94:d0:cb:0b:09:e2:ed:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de1c432322aa1058c3e6fe57f6374a9296069c1
Validity
Not Before: Jul 26 22:00:10 2025 GMT
Not After : Jul 27 22:00:10 2025 GMT
Subject: CN=7b10a63692ab28182fb44c49cbfd6c81b1caa1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:44:e9:80:6e:72:56:a0:0e:14:e5:30:4a:
3b:f7:62:a9:c3:5d:72:54:ad:2a:ef:65:31:35:a1:
3d:c6:e9:32:be:1d:7e:0a:e4:43:26:4a:72:ec:70:
fb:cf:27:97:44:76:08:a8:bd:c0:e7:10:59:ed:44:
a5:cb:78:02:db:0e:c3:96:1f:9f:38:57:fb:4a:c8:
9d:83:d7:3e:80:3f:c0:2d:95:26:be:d9:1f:a5:e6:
05:d2:28:4a:b7:ca:0e:b9:6c:ab:0f:7f:36:26:ee:
b6:d0:53:93:52:90:b0:4d:06:82:6a:d9:ae:cc:e1:
c4:36:8e:0e:06:2d:b1:c2:f5:ee:7d:f3:2f:de:1e:
8c:a6:59:02:bc:02:72:e2:e1:58:0f:77:43:ad:a9:
f8:e7:32:56:e5:ac:d8:8e:24:9c:20:21:2b:a9:0b:
78:da:93:15:6d:1d:a0:71:38:4b:91:86:2f:28:db:
d7:d8:13:7d:21:80:3c:b8:02:3c:5a:f2:d1:d9:f7:
92:7c:e4:f8:cb:82:aa:1c:53:60:51:e8:7c:15:8c:
d2:83:bd:f4:a7:3e:c6:5d:8a:c6:12:5e:4f:10:bd:
2f:a2:9a:97:70:70:fa:cb:77:27:d5:9f:a3:73:de:
c3:e0:f5:4d:19:ac:15:13:00:c6:93:e5:fb:5a:6d:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:10:A6:36:92:AB:28:18:2F:B4:4C:49:CB:FD:6C:81:B1:CA:A1:D2
X509v3 Authority Key Identifier:
keyid:5D:E1:C4:32:32:2A:A1:05:8C:3E:6F:E5:7F:63:74:A9:29:60:69:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeHEMjIqoQWMPm_lf2N0qSlgacE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33796e-7d5f-475c-b569-d78bb6f5b8f5/1/XeHEMjIqoQWMPm_lf2N0qSlgacE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5d:29:d8:42:dc:7f:53:1d:5b:42:3b:ec:6c:0b:05:14:84:
8d:75:8d:45:85:17:8d:2f:43:14:51:2f:5a:39:63:7f:b7:6d:
40:fa:5f:f9:33:73:f4:c1:00:24:b4:c8:bc:dc:fc:aa:df:d4:
52:9c:4f:49:fc:c4:68:4b:c3:15:66:1b:da:7f:86:bb:24:da:
38:8c:16:f7:ca:d0:b7:81:a0:61:8f:82:47:89:7e:8f:93:6f:
f4:2c:4b:a0:dc:1c:67:cc:38:0f:33:e6:1b:b3:7a:54:c4:aa:
67:d1:46:99:b2:f8:8b:8a:cf:03:6c:e2:9b:10:a8:ee:b3:f9:
01:dd:07:e3:ef:d9:1f:03:cd:cc:1c:7c:f5:9d:02:26:d4:28:
7b:5d:20:3f:5c:9d:1c:83:c3:8f:5e:8d:c1:4e:35:92:86:c3:
57:33:42:54:ea:01:a4:fc:af:0e:ea:ea:eb:f1:01:7c:29:09:
3c:4f:c6:96:9d:33:b1:73:c9:7d:07:fb:56:c9:68:85:45:60:
4f:4d:38:24:54:a3:85:3a:bf:be:ea:43:3c:86:8f:46:f2:11:
ff:8e:75:e9:36:3b:da:46:dd:5b:b2:d4:52:98:9d:be:23:fb:
60:b9:13:60:5a:b0:9f:0d:c7:27:91:00:31:c9:91:b9:68:d7:
22:6e:4b:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwCyg31r/L5TQywsJ4u0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZTFjNDMyMzIyYWExMDU4YzNlNmZlNTdmNjM3NGE5Mjk2
MDY5YzEwHhcNMjUwNzI2MjIwMDEwWhcNMjUwNzI3MjIwMDEwWjAzMTEwLwYDVQQD
Eyg3YjEwYTYzNjkyYWIyODE4MmZiNDRjNDljYmZkNmM4MWIxY2FhMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G5E6YBuclagDhTlMEo792Kpw11y
VK0q72UxNaE9xukyvh1+CuRDJkpy7HD7zyeXRHYIqL3A5xBZ7USly3gC2w7Dlh+f
OFf7Ssidg9c+gD/ALZUmvtkfpeYF0ihKt8oOuWyrD382Ju620FOTUpCwTQaCatmu
zOHENo4OBi2xwvXuffMv3h6MplkCvAJy4uFYD3dDran45zJW5azYjiScICErqQt4
2pMVbR2gcThLkYYvKNvX2BN9IYA8uAI8WvLR2feSfOT4y4KqHFNgUeh8FYzSg730
pz7GXYrGEl5PEL0vopqXcHD6y3cn1Z+jc97D4PVNGawVEwDGk+X7Wm00kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsQpjaSqygYL7RMScv9bIGxyqHSMB8GA1UdIwQY
MBaAFF3hxDIyKqEFjD5v5X9jdKkpYGnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGVIRU1qSXFvUVdNUG1fbGYyTjBxU2xnYWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zMzc5NmUtN2Q1Zi00NzVjLWI1Njkt
ZDc4YmI2ZjViOGY1LzEvWGVIRU1qSXFvUVdNUG1fbGYyTjBxU2xnYWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zMzc5NmUtN2Q1Zi00NzVjLWI1NjktZDc4YmI2ZjViOGY1
LzEvWGVIRU1qSXFvUVdNUG1fbGYyTjBxU2xnYWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVl0p2ELc
f1MdW0I77GwLBRSEjXWNRYUXjS9DFFEvWjljf7dtQPpf+TNz9MEAJLTIvNz8qt/U
UpxPSfzEaEvDFWYb2n+GuyTaOIwW98rQt4GgYY+CR4l+j5Nv9CxLoNwcZ8w4DzPm
G7N6VMSqZ9FGmbL4i4rPA2zimxCo7rP5Ad0H4+/ZHwPNzBx89Z0CJtQoe10gP1yd
HIPDj16NwU41kobDVzNCVOoBpPyvDurq6/EBfCkJPE/Glp0zsXPJfQf7VslohUVg
T004JFSjhTq/vupDPIaPRvIR/4516TY72kbdW7LUUpidviP7YLkTYFqwnw3HJ5EA
McmRuWjXIm5LHw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:32 2025 by rpki-client