Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
File: XwNIeIMukX__nNPIbA-h5WX4IdM.mft (raw, json)
Hash identifier: KDAu5KidowufHR1N2vplRx+ulhvcQ7U0IGQrHq99FU0=
Subject key identifier: 3F:6C:FF:0A:32:68:D3:25:A9:34:1A:87:F6:8E:B0:59:34:40:41:40
Authority key identifier: 5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3
Certificate issuer: /CN=5f034878832e917fff9cd3c86c0fa1e565f821d3
Certificate serial: 01984AAE7DA6F86597C50959B6DCFC58FC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
Manifest number: 114F
Signing time: Sun 27 Jul 2025 07:00:06 +0000
Manifest this update: Sun 27 Jul 2025 07:00:06 +0000
Manifest next update: Mon 28 Jul 2025 07:00:06 +0000
Files and hashes: 1: XwNIeIMukX__nNPIbA-h5WX4IdM.crl (hash: 1R+jAV/bkbeqi9zTeQf++DgrUaoin76+TRtmASTtQBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:7d:a6:f8:65:97:c5:09:59:b6:dc:fc:58:fc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f034878832e917fff9cd3c86c0fa1e565f821d3
Validity
Not Before: Jul 27 07:00:06 2025 GMT
Not After : Jul 28 07:00:06 2025 GMT
Subject: CN=3f6cff0a3268d325a9341a87f68eb05934404140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:df:89:ef:a7:e0:9e:4f:15:e6:70:10:4e:
45:8a:52:cf:73:5c:f8:5d:a8:2e:01:30:47:b5:b1:
1e:08:89:68:b5:40:66:d5:a1:33:80:66:18:6f:bb:
be:c2:5a:f9:ac:08:99:7c:80:8d:7d:ad:08:93:4a:
cf:13:a6:52:0d:af:7c:db:16:56:c5:24:e5:44:a5:
dc:0c:fd:b0:b9:da:62:18:a8:57:05:ac:e4:a5:4c:
87:37:07:95:bd:97:c3:a8:bf:c7:1d:b6:ea:bc:d1:
02:cf:ea:7c:92:1b:59:84:be:34:9f:23:3a:a3:b7:
2a:14:c4:ee:90:6c:c7:2e:c1:62:b3:09:cc:4e:2f:
71:0a:09:59:63:9e:20:a5:80:a2:27:09:32:08:4a:
73:ea:7b:7a:de:16:e6:17:50:4e:8f:68:84:8d:61:
74:49:dd:54:63:b1:17:00:87:3e:aa:67:06:c1:8a:
18:e3:d5:7a:a1:57:ea:ef:85:3b:87:7e:67:68:37:
6c:f2:2c:f1:4f:fa:9a:7b:5c:91:36:c4:55:11:e0:
0f:d1:37:50:5f:dc:bb:b5:83:0e:99:00:83:1e:64:
50:ad:23:a2:9d:80:ff:f0:61:da:e5:25:08:4d:aa:
48:5f:1a:52:37:fd:dd:2c:21:80:71:ab:b5:26:25:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6C:FF:0A:32:68:D3:25:A9:34:1A:87:F6:8E:B0:59:34:40:41:40
X509v3 Authority Key Identifier:
keyid:5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a3:cd:b9:bb:88:b2:cf:fc:9e:6f:e2:cd:33:a4:e3:b4:38:
9e:ab:a6:dc:30:fe:33:ed:ae:71:13:76:ad:1e:dd:b4:d9:72:
61:b2:98:ef:55:9d:fc:40:a1:55:bf:ea:7e:68:7d:e7:cb:c3:
ce:c6:67:7b:1b:a8:c8:4f:98:4d:41:a4:2d:ef:59:28:be:45:
01:c8:39:c4:aa:ed:cd:61:5c:5e:da:d2:d5:25:d9:3f:ed:47:
bd:60:75:bc:f3:a9:09:e0:a8:16:d6:f6:51:58:af:41:cd:38:
d0:d0:27:6a:e8:3a:55:90:e6:48:48:32:9c:94:02:64:41:21:
b4:d0:ed:d6:21:f6:ab:a3:1e:8d:9c:27:36:e0:52:1f:61:ea:
fd:b7:57:c9:b9:5d:ac:72:56:a6:fc:ff:96:3f:cc:6f:d2:90:
5e:af:93:12:81:39:6b:1f:0f:d8:e5:9e:02:8c:6b:a1:4a:56:
f8:c7:1b:69:e6:ab:ef:c3:6e:06:95:47:02:11:09:92:a7:bd:
83:e6:9c:d1:54:7d:4e:ca:c1:c1:e2:3a:e0:f4:34:5b:c6:d5:
5f:85:97:77:3d:4b:83:51:6c:b3:5e:7f:cf:46:6e:e0:dd:80:
37:fb:db:b3:35:4e:04:7c:54:bf:61:83:28:34:0a:8e:a0:ae:
1e:76:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:55 2025 by rpki-client