Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json)
Hash identifier: gmmDGBwkBbysPo5JmR9/LX0i4ffEsw45G53GlpQT708=
Subject key identifier: 1E:EF:B0:DC:0B:E0:E4:49:64:96:D4:AB:24:71:48:11:40:99:54:E0
Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac
Certificate serial: 019844ACCD0C036D591771759C3C6CFBF178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
Manifest number: 0441
Signing time: Sat 26 Jul 2025 03:00:31 +0000
Manifest this update: Sat 26 Jul 2025 03:00:31 +0000
Manifest next update: Sun 27 Jul 2025 03:00:31 +0000
Files and hashes: 1: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: N4i+Ckj9PFLr97Mcnf7RxARePWiGaDbVzgwvQ27V6Xg=)
2: c_JE84x-V2cV3KZFySyzgUu68wY.roa (hash: mJ5axd73qhrQA8e697fkmyMkcOmN3YmgqnGx7qbzQIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:cd:0c:03:6d:59:17:71:75:9c:3c:6c:fb:f1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac
Validity
Not Before: Jul 26 03:00:31 2025 GMT
Not After : Jul 27 03:00:31 2025 GMT
Subject: CN=1eefb0dc0be0e4496496d4ab24714811409954e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:1e:03:75:87:d2:a5:51:18:91:e1:b7:20:
93:3b:f7:e6:ee:4b:d1:33:3f:79:17:be:05:bd:61:
58:7c:ca:ca:69:95:bf:17:2d:45:07:a0:02:68:00:
82:93:14:28:b1:44:43:da:a5:f2:dc:ce:15:19:82:
d2:ce:d6:bf:f0:4a:4d:cc:b8:8f:ce:44:e6:73:0b:
a4:51:bb:d5:d2:7d:51:49:79:5b:0e:cc:fb:7e:a4:
33:0f:2d:9a:d1:72:7e:77:ba:fa:c3:a0:15:cb:82:
e2:35:ae:ba:92:7d:6a:e2:77:cd:f0:e7:db:f6:a4:
c3:f2:2a:75:1d:3c:41:2a:fa:06:f7:2e:2a:c1:48:
be:84:7c:a3:97:99:1b:80:a9:c0:4f:e0:af:e8:cf:
47:74:7d:97:91:2b:22:3a:40:07:ad:51:bc:05:53:
dc:44:86:68:a6:ce:53:5e:a7:16:6a:fd:76:67:75:
a0:d3:1a:1b:40:d7:e7:66:7e:d2:42:e3:27:e2:43:
ca:85:14:21:77:1f:35:dd:38:c6:5a:e9:e8:3e:6c:
c7:c8:fe:7b:b1:4f:01:27:4e:35:c7:c9:cb:9a:60:
0a:5f:c6:7b:a4:58:da:1d:1a:30:c3:f7:3b:28:ba:
31:83:a2:61:f9:60:c9:91:05:61:bb:9b:6e:32:3d:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EF:B0:DC:0B:E0:E4:49:64:96:D4:AB:24:71:48:11:40:99:54:E0
X509v3 Authority Key Identifier:
keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c6:72:6e:1d:60:a9:6d:61:4f:2c:b8:f5:14:3b:ed:cb:81:
6f:91:fc:1d:dd:ed:e9:e8:4f:a8:07:67:30:3b:af:b6:ee:2d:
28:44:6c:88:2b:09:8a:63:cf:29:8c:f7:24:2e:ed:99:85:b8:
db:a4:09:28:71:39:60:6f:d8:52:4d:0c:d0:e3:1d:12:1f:4b:
af:90:44:ee:86:d5:f5:d4:a0:00:8c:0f:99:ff:19:05:67:9e:
38:64:fa:8f:d5:03:24:16:d6:18:0c:d4:b9:ff:d0:30:20:bd:
fa:e4:57:7e:81:af:07:6d:f7:f1:ae:41:da:cc:e9:cc:58:aa:
bc:09:6b:a9:88:ce:46:93:75:b2:76:36:01:69:af:7f:a3:6b:
6f:ae:0f:b7:5a:f8:8b:08:76:2b:0a:c6:15:94:10:c9:65:62:
ad:4f:55:7c:af:0a:16:df:89:b7:32:18:18:18:25:c1:46:f4:
64:8c:9e:45:58:67:d6:c0:54:77:a2:43:7e:95:52:96:a9:c3:
7e:9e:7f:fe:d7:04:76:66:0a:e1:43:99:af:b1:ba:62:f1:a5:
a4:ab:17:11:90:21:68:d3:90:86:95:3a:1b:24:46:c5:fe:dd:
f4:75:a1:79:ea:59:bd:09:50:68:20:0a:9c:25:f5:08:7d:0e:
90:96:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:08:16 2025 by rpki-client