Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
File: sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft (raw, json)
Hash identifier: Ao0t/zbqUoo2CqbJDrFvXF178MnrfbaC5b8ztYwhXzY=
Subject key identifier: 2E:A3:14:F0:C8:FB:14:0A:A6:53:F6:52:90:A0:3C:9A:D6:56:01:3E
Authority key identifier: B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
Certificate issuer: /CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Certificate serial: 01984776BABAC54BB5D7A82EC9B87A2B557E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
Manifest number: 0354
Signing time: Sat 26 Jul 2025 16:00:20 +0000
Manifest this update: Sat 26 Jul 2025 16:00:20 +0000
Manifest next update: Sun 27 Jul 2025 16:00:20 +0000
Files and hashes: 1: sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl (hash: 4UQZDQDk1AcKC9CQPTvUP8fwc8J4su+lzeC+YX8sVZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:ba:ba:c5:4b:b5:d7:a8:2e:c9:b8:7a:2b:55:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172b5bdc754d5f644e4081dbc03b2b40a89f16d
Validity
Not Before: Jul 26 16:00:20 2025 GMT
Not After : Jul 27 16:00:20 2025 GMT
Subject: CN=2ea314f0c8fb140aa653f65290a03c9ad656013e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:8b:61:08:6c:2a:c5:66:19:b3:8f:66:ac:
d8:c6:39:3a:c4:da:38:a4:3a:37:88:af:f0:83:ac:
93:ae:40:10:91:47:53:8f:4d:c6:76:2c:cf:83:ea:
0f:25:40:cd:28:59:18:60:5c:4d:5a:59:9a:4c:2c:
46:79:fd:6a:63:de:a7:7e:54:8b:1f:49:fc:e4:dd:
c0:8d:4a:9e:6c:8b:35:25:dd:9c:ca:7f:b2:fe:9b:
4c:51:e1:89:8a:38:ec:a4:28:61:ae:84:08:d5:96:
c8:5d:ff:02:91:63:92:75:06:2a:32:de:5d:ec:4d:
e4:e8:1f:14:bf:fe:f3:61:54:f7:79:9b:9d:52:78:
0f:03:0d:c0:da:4c:79:7c:e7:30:4a:c2:dc:b7:1c:
fb:fb:1c:cd:1e:9d:bc:28:2c:e8:87:bd:f9:d8:27:
c0:30:8e:70:97:83:58:b8:94:97:d7:cd:c1:e0:a9:
cf:2a:12:fc:f3:f8:d7:38:e7:1e:e5:c7:79:bd:e4:
cc:b7:23:25:5d:13:62:ba:cb:72:19:c0:58:bd:28:
c2:d2:6a:3a:b7:9e:c5:81:b1:0d:48:d8:39:4e:38:
91:b5:4e:36:e8:4a:f4:f8:bc:64:60:2d:87:a7:19:
1b:b8:58:58:10:de:e6:98:9c:c1:88:5e:35:b9:f3:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A3:14:F0:C8:FB:14:0A:A6:53:F6:52:90:A0:3C:9A:D6:56:01:3E
X509v3 Authority Key Identifier:
keyid:B1:72:B5:BD:C7:54:D5:F6:44:E4:08:1D:BC:03:B2:B4:0A:89:F1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXK1vcdU1fZE5AgdvAOytAqJ8W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/500bb7-e554-4b1c-9f43-ea52ae08de9c/1/sXK1vcdU1fZE5AgdvAOytAqJ8W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:70:5d:88:e2:02:2c:b2:c1:0d:e1:59:62:de:34:5c:79:63:
43:d6:08:a2:b9:5a:78:bc:1c:8f:56:a8:93:0e:6f:3a:bb:5c:
8e:f0:fd:0a:68:9e:18:71:cf:44:d1:ad:d4:89:f7:00:eb:db:
50:f6:c0:5e:f1:65:0d:16:54:b4:ad:ec:02:03:0d:09:bc:49:
2f:40:af:d4:41:fa:84:13:21:50:34:f1:27:69:da:0d:1a:b7:
6c:25:4b:d4:19:f6:c0:3e:89:b5:df:7b:f4:3e:54:e3:25:f9:
3d:c1:89:7a:4a:8f:01:84:fb:d3:38:7c:b5:fc:6b:07:43:73:
98:dd:71:4d:0c:37:64:60:87:a7:05:74:18:ea:29:8c:e8:8d:
10:f1:52:be:5f:1d:b5:a6:fd:fc:54:5b:75:f9:df:7f:a9:7d:
2f:be:c4:fd:b8:48:a2:e3:6c:f3:b9:e0:33:d7:52:84:65:44:
2a:d5:92:73:5f:76:44:d4:d3:93:c5:53:d2:d6:be:42:e1:36:
90:2d:fc:ea:7d:6b:d4:5f:ba:7b:5e:b5:6a:b5:22:a7:b4:65:
89:d8:c6:b4:6e:18:79:3b:82:1e:19:9d:2e:3f:9e:5c:b2:e4:
6a:7f:dc:0e:9e:95:92:8d:e3:3b:c6:2e:6d:f0:59:a2:d9:81:
0c:09:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:32:18 2025 by rpki-client