Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
File: Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft (raw, json)
Hash identifier: xx47oVeXdLHmuT5aKGnE1Dhyiip5YWlFODmNC3Wyui8=
Subject key identifier: 72:68:2F:58:25:89:BE:31:4C:DD:78:B7:FF:07:9D:90:30:5C:A9:E6
Authority key identifier: 5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
Certificate issuer: /CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Certificate serial: 019849D2C228CDE7B07EC54C2FF3E3750BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
Manifest number: 0C57
Signing time: Sun 27 Jul 2025 03:00:05 +0000
Manifest this update: Sun 27 Jul 2025 03:00:05 +0000
Manifest next update: Mon 28 Jul 2025 03:00:05 +0000
Files and hashes: 1: Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl (hash: 1ovH1TUKKqfTd5GjgSO2y3sMxZpPmdqwN+KEFHsVQ0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c2:28:cd:e7:b0:7e:c5:4c:2f:f3:e3:75:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Validity
Not Before: Jul 27 03:00:05 2025 GMT
Not After : Jul 28 03:00:05 2025 GMT
Subject: CN=72682f582589be314cdd78b7ff079d90305ca9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:c9:b2:28:d7:45:12:bb:fd:6a:15:37:0b:
67:d2:88:ad:eb:17:62:c0:a3:3a:12:de:e5:7c:aa:
2a:47:55:31:ce:e0:88:7e:f6:ab:1d:6c:c0:aa:cc:
93:00:a0:20:ca:7b:90:e6:15:3e:f6:59:75:66:29:
e7:e1:b5:3f:ec:93:42:72:c1:3c:37:d9:fe:21:3e:
0d:f9:64:81:53:6b:da:3f:84:44:74:0d:ce:78:68:
01:0a:a1:6a:3f:71:9e:a8:96:ac:b9:40:16:29:14:
e3:8d:39:4b:f9:74:66:60:91:4d:84:08:eb:97:2f:
7d:8a:bf:66:53:3c:41:ec:8e:b9:82:fa:b7:f1:7a:
7d:88:91:2b:4c:5e:d3:a9:bb:73:6a:66:d2:f4:b0:
b0:ed:ac:7a:19:55:6d:28:21:27:86:34:e4:8b:af:
c7:0d:ac:85:e0:70:9d:b4:0a:69:73:b7:d5:63:b5:
95:c6:4f:03:7c:f7:73:4f:cc:ec:ac:07:bd:18:37:
2c:f7:fe:86:16:18:41:94:9d:c4:67:d3:48:fd:e7:
06:3d:ca:c9:57:8f:7a:c4:30:3c:26:0d:ce:85:10:
62:98:0a:28:44:6c:7f:b6:c4:a4:dc:88:c3:4f:3b:
37:40:cc:f1:ab:0b:9c:74:07:37:12:0f:72:03:ed:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:2F:58:25:89:BE:31:4C:DD:78:B7:FF:07:9D:90:30:5C:A9:E6
X509v3 Authority Key Identifier:
keyid:5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:c9:b8:9e:e8:b3:6b:11:9b:6f:23:f3:22:81:07:fe:b8:
f6:af:50:cd:39:3d:3c:03:6a:01:fc:8f:f5:7e:f1:66:b8:e6:
04:f3:fc:dc:f4:b0:af:20:b6:bf:39:66:65:33:61:1f:78:8d:
0e:ff:28:cf:82:f1:94:c8:8f:94:a1:0b:4a:f3:d8:73:06:13:
a8:e9:5d:00:46:0e:ed:f8:c1:5f:41:f9:cb:19:e2:70:4c:ce:
0f:9c:a9:6d:29:56:0f:9e:19:d0:c4:aa:f3:d6:1c:5f:da:19:
7d:b2:a7:2a:05:5c:6f:3a:39:c4:24:91:e5:19:11:b4:df:66:
6e:e5:f0:66:b9:c1:ff:42:64:85:cc:ab:58:f4:4e:bc:16:25:
e2:85:04:34:26:7e:d8:1a:f7:ae:87:3d:59:76:79:45:d2:e8:
48:79:23:e5:6a:7b:69:4f:cd:06:b7:ff:fb:96:e3:fb:1b:24:
63:e7:c1:65:2b:e3:f7:7b:7e:cf:1d:20:aa:c2:68:45:5e:ed:
f1:79:27:1f:cb:10:53:01:be:35:e0:44:d1:fa:cc:58:23:b4:
44:5e:21:58:02:e8:20:a0:7a:10:04:48:d2:de:7a:51:fd:6f:
45:4f:9e:b4:fd:b3:b9:02:b3:d2:ec:fb:cb:e3:30:ef:43:69:
4a:11:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:33:24 2025 by rpki-client