Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: E0ak0H1quUXDOW1ERZ4TOJPW1vXQoDGcV51OeLlf5Y4=
Subject key identifier: 3B:C7:AD:9B:94:6C:FC:6A:3C:78:5F:E7:19:9B:E2:4F:3D:94:DD:55
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 01984AE5BD0AE31A41F817E71FF78BEA3FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 08:00:26 +0000
Manifest this update: Sun 27 Jul 2025 08:00:26 +0000
Manifest next update: Mon 28 Jul 2025 08:00:26 +0000
Files and hashes: 1: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: M7WBV8iODXAsX0mjpEkX+9Wze6sxd2+nUWn22aEY2dc=)
2: hC0t1cqhdoh6iyJ3cpDGc1N-nWg.roa (hash: PxIEeNMR+krZxWibCKKwK2CkVaApOYKXyBnr/5vAmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:bd:0a:e3:1a:41:f8:17:e7:1f:f7:8b:ea:3f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Jul 27 08:00:26 2025 GMT
Not After : Jul 28 08:00:26 2025 GMT
Subject: CN=3bc7ad9b946cfc6a3c785fe7199be24f3d94dd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:17:16:91:5f:c0:e4:1b:42:a1:4e:a1:29:
49:54:de:ad:a7:5e:00:56:9a:6f:1f:d7:ff:a3:ce:
6b:a0:4c:e7:30:7a:81:d6:55:1c:0e:69:ff:42:3b:
9c:d8:f6:10:26:6d:ae:04:3a:48:0c:00:7c:b5:a3:
0a:10:97:5a:7c:2c:43:10:11:f4:a3:c5:51:ff:06:
08:34:a1:a1:b2:bd:c0:84:ea:a2:da:45:96:e8:ee:
8d:f0:34:08:cd:8e:64:97:b5:6a:8c:17:aa:d0:dd:
82:94:ac:53:1a:75:d7:64:40:5d:06:0d:b4:a6:d8:
8a:60:18:30:10:fa:6f:9d:44:e9:c0:cd:9a:1d:50:
5c:64:21:90:82:ef:85:af:01:ff:6e:dd:d3:8f:4a:
de:ae:0f:4d:f9:39:0c:33:12:03:e3:a1:f1:6c:69:
ea:6a:21:8a:71:e4:ed:77:33:a9:be:cc:c4:4a:46:
21:7c:85:91:61:b2:f0:b0:b7:0b:ae:c2:7a:1b:5f:
97:94:7d:62:f6:e4:64:eb:b5:3c:e2:4f:9d:88:df:
f7:2c:49:b3:1f:58:70:2e:4f:f9:81:29:7e:d5:5f:
cc:3b:32:b5:11:e0:c2:57:d1:65:a7:60:4b:0f:76:
ba:7e:72:1f:f2:e6:3c:bb:d8:ef:c9:d4:61:24:ce:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C7:AD:9B:94:6C:FC:6A:3C:78:5F:E7:19:9B:E2:4F:3D:94:DD:55
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2d:c8:80:e0:a2:e4:d5:c3:3a:b2:02:6e:53:74:17:1c:c6:
bc:19:f2:bd:d5:2f:5b:5b:69:51:8b:d9:14:40:61:9b:cb:0c:
04:79:c8:5c:e1:d7:61:6b:13:39:c1:a9:e8:19:02:c1:69:c5:
21:5e:9d:c9:f9:a0:65:eb:1e:54:a4:3b:8a:bd:ce:13:50:bd:
8f:42:b1:f0:a9:89:4a:7e:38:1b:73:2a:78:c8:ef:4b:19:00:
30:5e:d1:f6:71:72:41:0e:c0:c7:46:ce:88:e9:58:d9:e4:60:
61:fd:bb:e1:3e:ab:4f:5b:be:ad:20:03:0b:6a:de:b1:83:b4:
4b:9e:e5:17:dc:78:53:1b:68:45:0d:b2:22:d6:08:f9:b8:f3:
19:30:39:88:af:4b:34:a9:f3:a6:de:c8:b9:f8:c3:fd:1a:3a:
09:42:a1:40:b8:ad:d2:7c:83:4e:2d:00:e3:33:07:22:00:80:
ef:26:66:24:03:cc:4f:53:4e:74:9e:73:46:88:bc:11:03:9c:
73:03:a0:ac:89:d8:8d:52:40:92:58:07:8e:92:cd:88:a4:f1:
4f:55:35:72:05:01:51:59:ed:46:4a:d5:eb:98:1a:33:ea:7b:
cf:2f:6a:7f:dd:8e:ba:5c:75:25:08:f7:9e:c0:23:c6:f2:53:
e6:c6:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:39:05 2025 by rpki-client