Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
File: XHOCiOHdRuIcmgORGXJEtHjQqyY.mft (raw, json)
Hash identifier: kQPc1InFuJzCne+5OAMTPIqWZo9AJm5UgcSsb5hSi+Y=
Subject key identifier: 79:E1:D7:77:4E:55:AE:39:8D:84:21:B3:4E:39:24:33:3A:BE:D9:85
Authority key identifier: 5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
Certificate issuer: /CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Certificate serial: 01984966A576B12B3292FB21E7D7106270B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:02:00 +0000
Manifest this update: Sun 27 Jul 2025 01:02:00 +0000
Manifest next update: Mon 28 Jul 2025 01:02:00 +0000
Files and hashes: 1: XHOCiOHdRuIcmgORGXJEtHjQqyY.crl (hash: CU4F9zNSCiVXn25vZTcdXF4oijrHxLEQ+ZxtxwgJscU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:a5:76:b1:2b:32:92:fb:21:e7:d7:10:62:70:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Validity
Not Before: Jul 27 01:02:00 2025 GMT
Not After : Jul 28 01:02:00 2025 GMT
Subject: CN=79e1d7774e55ae398d8421b34e3924333abed985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:d5:eb:14:a2:92:2a:be:36:53:22:cb:43:
29:01:40:c5:d9:c6:45:ab:90:d5:5d:4b:ef:d3:3f:
ca:c1:46:95:ef:99:96:77:c2:8d:99:7c:02:d3:fa:
d4:5d:24:d4:89:3f:95:9f:40:ad:bd:ba:cb:01:7e:
8c:b0:22:8e:83:0d:9d:6e:1d:6e:b3:46:e7:02:6c:
64:bc:2e:b4:3c:a0:24:80:e7:ec:77:e5:e8:c0:aa:
b0:37:38:ed:ae:13:bb:37:a2:fe:8b:0e:39:c4:a6:
0e:4a:40:6b:4a:0a:48:66:df:f0:13:99:2f:8d:75:
13:f7:22:65:b7:ab:96:07:38:f0:78:68:c8:ce:aa:
b4:0f:5b:94:33:7e:12:cb:4e:38:2b:f3:ec:2e:a2:
db:52:35:b5:e1:2b:d5:cf:20:97:ce:19:f0:41:55:
ad:54:7c:98:f1:fc:36:1f:e5:46:c5:a6:02:3f:cf:
da:0d:f4:10:77:f7:09:05:86:62:14:55:53:f7:47:
3a:fc:aa:d1:22:23:bf:c1:cb:7a:14:5d:18:a2:e3:
c2:40:50:64:5e:16:8e:d1:5f:f3:71:6b:a4:df:57:
32:63:9e:06:c9:4d:7b:53:b5:ac:09:24:05:32:d7:
93:c3:2d:0f:c2:f8:81:76:d1:d8:c3:7f:62:4c:5c:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:D7:77:4E:55:AE:39:8D:84:21:B3:4E:39:24:33:3A:BE:D9:85
X509v3 Authority Key Identifier:
keyid:5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5b:17:60:3a:22:d0:2d:62:f2:39:80:69:cf:5b:3b:b2:97:
44:a9:3f:8a:68:76:3f:17:18:3d:e0:74:b1:14:9f:1a:e8:dd:
2e:08:79:df:5d:8d:e1:d3:3f:54:f0:18:85:44:ce:d9:94:47:
76:b4:e9:67:73:57:57:d6:16:34:d3:82:15:6e:08:45:28:7f:
d1:03:94:63:28:36:a7:1b:96:4b:31:ab:ac:0a:7e:c8:1d:a0:
d6:bf:17:a3:0d:2d:d2:aa:50:eb:93:9f:09:a0:e9:a9:0f:d9:
3d:61:73:aa:6a:b2:f3:8e:a0:eb:d0:e2:b4:cc:f4:ae:08:ce:
62:a6:64:15:a3:f8:52:30:46:72:db:e0:de:34:b8:91:1c:63:
1b:3d:f0:f4:4a:90:ec:75:9f:69:5b:aa:8b:89:7f:45:37:99:
02:c3:1e:e8:0d:e3:4a:f2:99:b4:03:b2:d6:ba:8c:1f:20:af:
5e:7f:71:ad:01:e0:0f:15:da:c0:82:4c:3b:dd:f5:04:09:a7:
6d:ab:2e:38:c2:93:20:24:19:9e:fd:d3:c1:c7:ba:e0:63:74:
bc:d0:f6:0e:b2:14:43:a5:49:49:11:69:0f:f7:59:af:3e:b4:
37:85:2d:c0:b5:ab:6d:45:b0:b7:fd:29:98:ef:41:d1:b7:04:
89:6f:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:04 2025 by rpki-client