Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
File: XbdXv1dG8moHySCHAbDVS2m8M2Q.mft (raw, json)
Hash identifier: gA6VnHSKMGWOP4ODSX5mm86Dqkdlt9uGXIB2FvqjOmM=
Subject key identifier: 19:94:BD:83:43:91:41:2B:CB:37:6B:84:3D:62:E2:FD:7E:C6:D6:46
Authority key identifier: 5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
Certificate issuer: /CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Certificate serial: 019847E4D68232A9379E464E86AE32CC50AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
Manifest number: 04CC
Signing time: Sat 26 Jul 2025 18:00:36 +0000
Manifest this update: Sat 26 Jul 2025 18:00:36 +0000
Manifest next update: Sun 27 Jul 2025 18:00:36 +0000
Files and hashes: 1: XbdXv1dG8moHySCHAbDVS2m8M2Q.crl (hash: bZaOeQr3OsqKXy/y2ZjjqL6BYXC3WNSonyE0lxgyrws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:d6:82:32:a9:37:9e:46:4e:86:ae:32:cc:50:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Validity
Not Before: Jul 26 18:00:36 2025 GMT
Not After : Jul 27 18:00:36 2025 GMT
Subject: CN=1994bd834391412bcb376b843d62e2fd7ec6d646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:7a:3f:d4:dc:72:fe:63:38:26:a1:e9:e4:
2d:5d:b4:78:36:28:8d:1c:62:24:f2:c2:fc:9a:52:
a4:a9:f4:0e:8c:06:3f:0a:fd:e3:fc:73:aa:29:10:
60:8a:71:e6:22:83:c8:07:a4:25:fe:12:f7:af:65:
ec:c3:f7:b3:d5:ec:e0:ca:f3:ea:ab:48:17:df:2a:
df:73:d0:6d:dd:6d:d9:48:16:a1:af:ba:b2:78:5c:
86:fc:a7:fb:8d:bf:bb:83:db:65:0b:0b:09:34:f0:
d1:52:28:96:b2:89:d2:3a:fc:1b:d9:af:f8:1f:a2:
35:e1:71:b8:b9:bd:c8:ff:42:06:45:6b:a0:30:5d:
08:6a:37:c6:36:61:27:4c:0c:b7:22:f2:73:5e:99:
41:df:62:bb:5e:0f:3c:08:98:13:f0:2c:0c:ba:d5:
10:76:bd:04:3c:30:8e:c2:e6:60:04:68:de:78:5c:
02:7e:db:29:2c:b4:e6:7e:53:a2:50:4d:8c:55:94:
63:b7:69:77:8b:35:46:87:4c:74:b5:f8:fb:97:46:
2f:ac:b9:b6:74:ae:a0:01:42:56:af:41:d2:35:95:
12:6a:1b:1a:0b:6f:21:ac:90:93:5b:ce:18:fa:f7:
79:93:95:88:83:b0:4c:db:a9:20:ba:68:ba:b1:57:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:94:BD:83:43:91:41:2B:CB:37:6B:84:3D:62:E2:FD:7E:C6:D6:46
X509v3 Authority Key Identifier:
keyid:5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a8:e2:d1:4c:f2:77:52:bd:ae:42:e7:10:14:75:c5:0b:f2:
15:93:d3:eb:39:5d:2d:fe:65:c3:ec:51:cc:fd:f9:c0:c0:82:
9e:1c:e3:c4:7a:81:18:80:8d:aa:84:4b:2c:ca:86:92:4c:57:
7b:10:63:92:41:f8:d4:8b:2c:12:83:34:18:92:bf:71:9a:94:
87:17:e1:49:16:dc:8d:52:b9:dd:3b:fc:00:98:f3:66:2f:9c:
34:78:fb:c0:be:2d:c5:03:79:4b:87:ab:ca:93:ac:ad:ee:36:
4e:3d:4b:68:b3:8b:89:d4:b9:09:39:86:18:9e:2f:0c:13:20:
a7:38:33:3d:b3:1d:bd:b8:be:be:64:44:bc:90:cd:ed:fa:89:
f5:57:11:05:9b:ad:6a:a3:4a:10:9c:ca:6b:80:90:96:1c:77:
4d:a4:3a:3f:61:81:97:18:28:44:e8:9d:66:08:eb:db:15:f2:
38:af:23:9c:fd:93:42:bd:d4:f0:02:02:1d:a4:93:6b:75:5e:
18:52:87:a7:89:60:d5:89:98:30:df:14:76:e7:98:4b:42:de:
be:82:64:69:d5:51:b5:73:4a:76:22:c4:a7:96:23:c7:bc:e4:
5a:12:f0:81:d5:73:ef:ca:d1:c9:17:fe:b9:b5:b8:ce:87:90:
a7:b1:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:47:24 2025 by rpki-client