Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8f015d-a7e4-48d8-8705-1ec37465d3af/1/XSGWjpHC9H8bB8HzX-fSY8VtBJU.mft
File: XSGWjpHC9H8bB8HzX-fSY8VtBJU.mft (raw, json)
Hash identifier: 0jnAgH2+2hBL54UgndxW5sjLVSGI5SZCr5ihWOERg40=
Subject key identifier: 29:74:97:CA:41:E9:14:CB:F2:63:36:22:7B:6C:AF:6D:E0:49:A3:AD
Authority key identifier: 5D:21:96:8E:91:C2:F4:7F:1B:07:C1:F3:5F:E7:D2:63:C5:6D:04:95
Certificate issuer: /CN=5d21968e91c2f47f1b07c1f35fe7d263c56d0495
Certificate serial: 01984A09B450A85A88B43888852F37AF1923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSGWjpHC9H8bB8HzX-fSY8VtBJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8f015d-a7e4-48d8-8705-1ec37465d3af/1/XSGWjpHC9H8bB8HzX-fSY8VtBJU.mft
Manifest number: 0613
Signing time: Sun 27 Jul 2025 04:00:06 +0000
Manifest this update: Sun 27 Jul 2025 04:00:06 +0000
Manifest next update: Mon 28 Jul 2025 04:00:06 +0000
Files and hashes: 1: XSGWjpHC9H8bB8HzX-fSY8VtBJU.crl (hash: nOw1pMeYDXKd+xSniopsSvsFmJ0CE7I2W9zN78BU+mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8f015d-a7e4-48d8-8705-1ec37465d3af/1/XSGWjpHC9H8bB8HzX-fSY8VtBJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8f015d-a7e4-48d8-8705-1ec37465d3af/1/XSGWjpHC9H8bB8HzX-fSY8VtBJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSGWjpHC9H8bB8HzX-fSY8VtBJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:b4:50:a8:5a:88:b4:38:88:85:2f:37:af:19:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d21968e91c2f47f1b07c1f35fe7d263c56d0495
Validity
Not Before: Jul 27 04:00:06 2025 GMT
Not After : Jul 28 04:00:06 2025 GMT
Subject: CN=297497ca41e914cbf26336227b6caf6de049a3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:53:59:0b:82:11:ed:24:66:96:a5:c4:ec:
7c:75:aa:59:d9:16:d9:22:72:e9:29:73:15:7e:ee:
67:70:fc:77:1e:f0:68:3e:ea:a2:94:a4:71:b3:de:
9b:b5:d5:47:af:c8:b9:d1:71:d9:72:66:89:99:9a:
a3:8d:bf:0c:34:87:0e:68:76:f3:5d:91:fc:f9:96:
d0:1c:16:ef:5d:d9:2f:6f:b4:65:8b:5b:2d:39:7d:
6a:e6:b2:9e:37:24:96:e5:1f:aa:39:81:60:a1:32:
37:a1:29:d5:b8:02:a3:68:86:61:84:a8:53:32:a5:
db:7b:c1:1f:5d:ce:e8:4d:f7:d6:fa:a0:e1:98:78:
da:db:3d:0d:19:19:7a:4f:cb:31:5b:38:77:99:ea:
01:92:41:db:6b:92:77:2c:b1:34:cd:06:88:0d:5f:
a9:be:c2:08:84:2e:63:a9:2c:f2:d7:de:3e:e4:1b:
6d:43:ae:84:3a:ce:6d:f2:b7:7d:6e:64:1a:0a:6d:
44:af:96:5a:34:fe:8a:cb:4d:8d:73:f3:52:71:bf:
b3:b3:47:f2:a9:d1:54:f7:a7:89:c1:20:a4:87:a6:
dc:5e:61:2b:e4:af:6b:69:d4:29:49:33:b9:8b:38:
d6:ab:02:47:c3:69:47:eb:69:01:cf:19:38:71:bf:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:74:97:CA:41:E9:14:CB:F2:63:36:22:7B:6C:AF:6D:E0:49:A3:AD
X509v3 Authority Key Identifier:
keyid:5D:21:96:8E:91:C2:F4:7F:1B:07:C1:F3:5F:E7:D2:63:C5:6D:04:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSGWjpHC9H8bB8HzX-fSY8VtBJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8f015d-a7e4-48d8-8705-1ec37465d3af/1/XSGWjpHC9H8bB8HzX-fSY8VtBJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8f015d-a7e4-48d8-8705-1ec37465d3af/1/XSGWjpHC9H8bB8HzX-fSY8VtBJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:af:f4:74:62:5c:05:e6:25:c3:e2:d2:11:0c:b6:39:43:f2:
f8:7a:fa:42:ae:59:f7:76:80:2f:d8:2b:15:42:9d:14:5d:b8:
86:95:7c:f6:7a:d0:fd:cd:35:14:fd:c3:ec:fa:d4:de:c8:5f:
8b:0c:01:9d:29:64:dc:20:9c:70:f8:f5:e4:2b:4e:bd:57:a2:
99:80:e1:e5:ee:93:39:98:e3:74:0e:cb:00:c7:d8:f8:65:86:
1d:00:37:7f:c6:ce:e2:ee:38:c8:67:0e:a0:7e:f3:df:a9:35:
c8:9c:9d:df:bd:36:86:9e:e5:4d:3d:2f:9f:4d:5c:97:9c:5b:
4c:fe:98:b9:e3:75:ff:e1:bb:65:0b:b3:98:2e:b2:ea:23:ac:
24:e3:e4:79:ea:9c:d2:f9:ac:2e:ee:61:b2:5e:54:9f:d4:c0:
33:ea:d9:36:84:34:75:fe:1d:fb:fd:bd:47:4d:c6:fc:e4:49:
75:11:0c:60:d5:18:00:22:ac:47:76:c5:77:f3:b3:d5:2d:7d:
6d:d5:55:10:47:13:50:1e:9a:61:b8:af:76:91:79:45:69:5e:
6e:ed:04:83:db:e6:40:00:85:b0:54:9b:fd:7f:69:cf:03:ec:
9f:8c:9f:39:79:2c:c8:db:97:cc:76:2b:c6:a0:5b:71:a3:81:
81:b7:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:01 2025 by rpki-client