Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
File: XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft (raw, json)
Hash identifier: 75AgZmTd13byjjRzib8X10Wfm/bm6jSXloIKHwC8hkA=
Subject key identifier: 43:DD:C6:32:F0:87:A2:8D:A9:8F:40:AB:24:9A:34:30:80:B4:98:E4
Authority key identifier: 5D:38:EB:29:59:56:07:ED:4D:8F:4D:9B:F0:6C:BA:42:99:26:86:4A
Certificate issuer: /CN=5d38eb29595607ed4d8f4d9bf06cba429926864a
Certificate serial: 0198485276D3DB42A7EFF0EF90AB8715EC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
Manifest number: 0BD5
Signing time: Sat 26 Jul 2025 20:00:20 +0000
Manifest this update: Sat 26 Jul 2025 20:00:20 +0000
Manifest next update: Sun 27 Jul 2025 20:00:20 +0000
Files and hashes: 1: XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl (hash: iGiQ9sZrR/H4GDsXOFNyrKZ+qx4ijmawhcFv1Qg9NS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:76:d3:db:42:a7:ef:f0:ef:90:ab:87:15:ec:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d38eb29595607ed4d8f4d9bf06cba429926864a
Validity
Not Before: Jul 26 20:00:20 2025 GMT
Not After : Jul 27 20:00:20 2025 GMT
Subject: CN=43ddc632f087a28da98f40ab249a343080b498e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:6e:80:ed:db:4e:a0:a0:31:29:b3:07:91:
57:bf:0d:1d:fe:af:e5:ba:2a:a4:de:73:fe:46:27:
f4:cd:80:cc:3d:9e:18:ef:a1:c7:58:56:51:be:e8:
04:7f:df:8a:25:8e:d0:16:84:11:5d:e6:80:49:2f:
33:f9:29:9f:c4:a0:db:97:a4:06:29:8f:25:99:8d:
31:da:17:0a:6f:2e:5b:a2:19:17:00:04:2c:d2:05:
47:4c:dc:af:d0:c9:6c:ed:c6:4c:d9:3e:31:62:7c:
ef:fe:09:60:96:80:ff:f7:68:a7:3a:c4:ed:57:1a:
92:be:d1:20:6d:8f:75:27:92:f3:a5:8f:cf:58:0c:
46:44:47:44:c6:55:47:72:3b:04:d6:d9:93:01:f8:
22:6d:2a:05:93:d1:45:a3:05:74:8f:46:bf:80:b9:
0b:44:0b:1e:6a:e4:c1:1d:76:a5:a6:d5:2b:f1:1e:
38:4a:aa:95:cc:dc:ff:8f:97:66:ac:84:41:d2:13:
81:9a:cb:fa:a7:b0:16:30:a1:a3:7f:37:08:45:7d:
66:97:46:8b:36:d6:12:e8:0a:c0:4f:34:d5:f8:ba:
ed:f1:11:0b:62:80:86:9f:cd:fc:0b:2c:13:43:24:
eb:45:6c:26:0d:69:ce:9e:22:8f:19:85:6d:43:12:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:C6:32:F0:87:A2:8D:A9:8F:40:AB:24:9A:34:30:80:B4:98:E4
X509v3 Authority Key Identifier:
keyid:5D:38:EB:29:59:56:07:ED:4D:8F:4D:9B:F0:6C:BA:42:99:26:86:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:10:82:14:09:ae:8a:bc:86:80:53:38:fd:4f:a4:cb:ed:1b:
4d:9a:86:be:b0:33:61:ef:05:9f:d8:c7:e2:5f:25:21:09:0d:
b9:af:3a:7b:32:a9:38:84:f9:a3:4c:73:03:dd:a8:9a:f7:2e:
d4:33:26:b5:c3:64:86:6a:8e:67:1a:7d:a1:22:f1:d6:d6:02:
60:eb:cb:0c:be:b9:b6:4d:12:71:f6:76:6d:e9:f6:bb:bb:2b:
72:c4:ff:d0:f7:23:bd:ab:a5:98:50:80:59:a9:b0:ff:44:5b:
3c:bc:d7:d8:83:1f:33:b7:c0:8b:6b:c8:9b:62:6a:80:40:98:
33:b6:2f:c6:e7:dd:d9:0a:50:08:cc:57:d4:d0:98:0b:b6:b5:
8f:ad:e3:03:ae:95:2d:87:ca:90:65:0a:99:3a:82:c3:23:7b:
bb:0b:47:5c:8f:cc:54:9b:01:0f:a8:5f:93:02:3e:d5:96:0a:
72:9f:81:fd:3c:70:6f:68:0f:2c:c3:f9:5e:3c:80:8b:c1:73:
f0:c0:71:24:13:99:d4:61:5e:5e:26:1b:80:a6:da:8a:e3:0c:
c3:8a:93:ff:4f:75:e9:da:d7:9b:94:03:7f:06:f8:a6:b2:8d:
f0:e9:97:d1:0a:d3:b3:0c:cf:1f:b9:8b:3f:c8:5b:da:0e:4f:
b7:c5:d5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:52 2025 by rpki-client