Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
File: XHbv8miEvwBiB9cis7AaRNK1YZk.mft (raw, json)
Hash identifier: CIWe3lSt8nEqshrTssjqTp29+2eA84engecAALnZudk=
Subject key identifier: 2F:3F:6C:D5:07:D8:8C:4A:A7:7A:A1:CC:EE:15:8B:43:27:AF:8B:84
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 01984776C9A7AFD15937BA0782B7EC1B8D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
Manifest number: 0E37
Signing time: Sat 26 Jul 2025 16:00:23 +0000
Manifest this update: Sat 26 Jul 2025 16:00:23 +0000
Manifest next update: Sun 27 Jul 2025 16:00:23 +0000
Files and hashes: 1: XHbv8miEvwBiB9cis7AaRNK1YZk.crl (hash: DJSY0dLPdosj7kQsAFdPvgnKho4aPczhnpPJ8YEFbqs=)
2: aeqC4EE0KUZ0Hdgey5muRSCYEvc.roa (hash: aH7XcxnHv3qEq7LQXqlBVrjotePFAy5nc/77ZI52Ock=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:c9:a7:af:d1:59:37:ba:07:82:b7:ec:1b:8d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: Jul 26 16:00:23 2025 GMT
Not After : Jul 27 16:00:23 2025 GMT
Subject: CN=2f3f6cd507d88c4aa77aa1ccee158b4327af8b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:01:4f:8d:23:b6:09:8f:db:c2:7e:b1:eb:
9d:54:bc:53:f9:9e:b1:cb:53:2c:ce:e0:af:5e:84:
e8:a2:c3:08:35:ed:ee:dc:11:a5:2b:51:c2:1f:fa:
3c:0f:5e:dd:73:98:96:d9:f6:0b:f4:0d:23:32:62:
f7:03:08:d2:f2:1c:60:c7:30:96:99:7e:c9:9c:5a:
0f:0e:e2:82:ff:10:64:04:72:23:2e:29:8e:41:d4:
b4:fe:df:a4:a2:2f:30:da:e8:86:95:91:22:5a:fb:
43:71:28:97:8f:52:2f:35:e2:af:19:5f:89:32:d0:
aa:22:68:c5:e2:7c:d2:65:c2:d7:4f:96:32:f7:32:
2d:de:fb:62:27:dc:9b:ea:93:5f:b0:02:02:fe:a3:
e5:89:81:eb:3f:8d:ec:3d:aa:42:29:3e:e1:76:fa:
cc:30:a9:2f:70:55:d2:ab:e0:04:1d:31:57:7c:44:
22:17:92:a7:18:87:a1:39:c8:b5:8a:37:ee:03:f8:
67:34:99:18:e3:24:57:dd:41:c3:ad:45:39:b4:6b:
fb:7e:28:62:1c:b2:68:aa:be:b4:31:ac:37:87:2b:
05:59:4b:92:37:f5:df:a7:e1:aa:cf:38:2f:96:a1:
52:60:7e:f3:ba:79:60:81:5a:2e:d6:f4:2a:dd:89:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3F:6C:D5:07:D8:8C:4A:A7:7A:A1:CC:EE:15:8B:43:27:AF:8B:84
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:88:66:5a:99:47:ef:ed:6b:a8:a0:d5:43:14:fd:c1:42:17:
36:98:61:8c:d7:d9:3c:86:c6:96:6a:52:4d:06:5a:e5:fa:4b:
72:b3:39:8d:ff:19:e9:5c:55:b3:25:3e:a0:72:d1:2a:6f:11:
45:0d:f1:54:cc:25:8f:45:b6:c7:86:3c:4c:9d:56:7c:3d:88:
a1:87:34:87:c0:a2:d2:0d:52:b0:d2:6e:22:18:38:e7:55:c1:
08:3b:04:15:7a:7d:77:f9:4a:f2:25:30:90:ee:eb:6e:f4:ef:
13:2d:0c:54:d1:e2:4c:cd:9f:26:fe:74:14:3e:66:69:56:a2:
a9:0e:4d:04:16:c0:1d:8e:96:fb:7c:10:f3:89:40:92:24:6f:
2d:bd:3a:16:be:e7:3c:2d:ed:d3:7b:d9:be:dc:b4:23:d5:81:
86:b8:b2:cc:7b:e3:44:82:5e:19:67:b0:48:af:06:ce:58:47:
0f:66:3d:d3:71:bd:12:f8:5a:8e:18:52:30:c7:4d:d2:3d:03:
1d:77:e9:a6:bf:b9:5a:71:4c:2b:3d:82:cf:ea:01:ef:e1:c3:
1d:44:79:3d:a2:4e:92:9c:ca:2d:fa:a5:83:bb:24:69:28:2b:
91:24:b1:fe:d7:e2:53:55:d9:c5:58:62:76:68:0b:ba:d4:ad:
d9:8b:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:55:16 2025 by rpki-client