Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: f05kVgVnNDtm9nf6KnoNae+aQacEGdc109GXwKLBhDc=
Subject key identifier: 4E:23:F6:D0:62:C5:5E:9C:6A:6E:A7:7F:D4:DD:06:B6:A2:9B:DB:21
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 01984C66051F80DA68FF4B58886B6DBCE183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 15:00:11 +0000
Manifest this update: Sun 27 Jul 2025 15:00:11 +0000
Manifest next update: Mon 28 Jul 2025 15:00:11 +0000
Files and hashes: 1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: KIWa105nme98gn3Pn3c0tod1Dc3Zlmg9XGyWOykWIIw=)
2: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (hash: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:05:1f:80:da:68:ff:4b:58:88:6b:6d:bc:e1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Jul 27 15:00:11 2025 GMT
Not After : Jul 28 15:00:11 2025 GMT
Subject: CN=4e23f6d062c55e9c6a6ea77fd4dd06b6a29bdb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:00:db:d1:3d:f5:cd:f8:4c:32:c8:8d:c5:
c1:d6:43:20:8b:1e:0a:f0:5c:54:25:41:4d:36:23:
96:be:17:99:00:76:1b:f2:a5:7d:78:b8:59:29:18:
00:8e:20:10:ec:fe:5b:fc:b6:62:a1:40:6e:0e:31:
77:b1:da:59:a9:61:03:f4:be:16:67:eb:cc:38:3f:
fa:94:7f:00:40:c5:3f:15:8a:ea:eb:d2:e8:eb:21:
63:02:f0:f3:ab:6b:a9:1d:fa:5b:cf:50:86:ee:de:
2f:fc:27:bd:7d:25:67:49:f4:93:68:05:a1:bc:1d:
90:d2:a9:6b:eb:c7:dd:40:4c:5b:f7:d0:dd:1c:d4:
c2:bb:3f:12:7f:23:c9:39:f6:cd:ee:dc:6c:d1:76:
fc:de:b0:e4:be:45:e0:ff:72:41:e4:db:53:4a:e8:
a1:1f:c7:a6:a5:c0:35:7d:17:76:fa:89:b4:5f:98:
1d:69:11:b0:56:0c:10:f5:8c:aa:cf:00:8e:85:8e:
97:d4:02:f2:4f:f6:8b:17:f6:bf:c9:7f:08:9c:ae:
14:bf:c9:ea:27:f0:8f:a5:7b:58:d3:d7:dc:ef:c5:
79:75:70:71:b7:82:8b:af:2d:db:73:e8:a2:d9:83:
6f:93:5f:fa:a7:80:8a:3d:d3:92:69:b7:0c:b5:2b:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:23:F6:D0:62:C5:5E:9C:6A:6E:A7:7F:D4:DD:06:B6:A2:9B:DB:21
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bb:74:21:ed:5e:2b:d2:2b:83:23:45:af:4d:aa:0a:da:89:
73:51:60:6f:e6:91:9e:a0:8b:fb:8d:fe:26:0d:ca:82:23:bf:
a5:a5:f1:bc:0d:4b:97:fa:82:f3:0e:55:4a:34:8d:82:bc:c8:
2c:1a:03:c7:b6:d2:d7:8f:ad:be:25:26:0b:60:b9:d5:95:33:
cb:ef:1d:3c:a1:31:f7:db:88:8e:ad:3f:13:75:d1:af:b1:fa:
d7:3c:d7:ac:7b:c3:ac:1c:71:5b:3e:2e:03:c5:d3:f2:53:15:
80:ce:5c:5c:a6:bb:93:86:20:62:eb:69:83:9c:df:ee:6c:f9:
19:7d:41:8f:e7:c1:f7:4b:05:10:78:fa:38:df:d5:0e:0a:c6:
eb:31:f7:d6:70:69:ad:b4:c4:3b:39:5c:84:45:ec:bf:42:48:
1c:40:17:68:64:a8:a6:aa:fe:83:45:31:d0:c1:cc:c7:b9:6b:
40:6b:59:ad:15:cf:8b:2d:8b:a4:0e:16:16:e9:d6:b6:cc:f3:
24:db:66:ac:0f:83:16:e3:56:ad:7d:0b:97:ea:bd:d2:1d:21:
d8:e9:83:dc:41:fd:51:00:df:d5:77:e3:03:a8:43:82:73:46:
58:a7:a2:45:39:c2:d0:0a:fa:4b:fa:63:2d:8a:7c:2e:6b:af:
40:80:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:56:36 2025 by rpki-client