Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: Q4RGz3eoIyi+/hAomN9F8E8DgXFsM2y0L4DBinE0xms=
Subject key identifier: 9D:0F:59:69:79:15:AA:AB:00:BD:05:B0:06:4F:43:BB:3A:A3:13:AC
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 01984BC197E55FC57B4938CB607B14E62206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 0551
Signing time: Sun 27 Jul 2025 12:00:35 +0000
Manifest this update: Sun 27 Jul 2025 12:00:35 +0000
Manifest next update: Mon 28 Jul 2025 12:00:35 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: Aaz/CxpVdifcb2DBuniX3rbtSTtKlIMGZzSJyxUxTvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:97:e5:5f:c5:7b:49:38:cb:60:7b:14:e6:22:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: Jul 27 12:00:35 2025 GMT
Not After : Jul 28 12:00:35 2025 GMT
Subject: CN=9d0f59697915aaab00bd05b0064f43bb3aa313ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:c7:cd:31:83:ee:84:ec:0b:68:d1:5a:1d:
79:37:e1:e2:bd:85:9f:b9:3b:84:e5:61:0a:41:9b:
34:cf:f2:52:ed:e4:8d:49:43:d5:b8:0b:c6:f8:ed:
fa:82:d3:ac:f2:a0:64:a7:64:49:22:52:e3:31:09:
92:12:2a:ba:e6:c1:6b:a7:6e:34:bb:28:27:b6:4e:
9f:1d:8c:ce:e3:e5:b2:53:57:a4:db:a3:38:f7:d3:
4c:fd:e8:47:70:68:05:92:99:db:11:fc:b5:08:73:
05:0a:84:9c:7e:5c:92:fc:04:03:ba:51:31:00:6d:
f8:b6:5e:85:a3:53:e4:a7:d9:5a:bd:2b:9b:e6:b6:
44:76:cf:af:16:15:ea:a3:b5:2d:b5:ea:1d:d5:63:
54:53:03:ae:bd:df:0b:92:43:8c:1b:56:69:98:71:
0a:de:ca:07:2a:48:01:3f:e9:04:2e:5c:01:b1:99:
97:ac:b7:50:ff:e3:ce:84:44:af:f7:cb:66:80:74:
af:52:69:2d:55:10:b1:79:75:fc:18:60:00:6f:d2:
1a:4b:20:3d:c8:88:cf:61:47:a0:7e:42:ae:d5:5e:
71:85:b3:97:65:bc:43:37:69:25:6b:f8:3d:dc:f7:
00:85:b4:1f:af:02:62:d3:43:2f:59:93:90:d5:b1:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0F:59:69:79:15:AA:AB:00:BD:05:B0:06:4F:43:BB:3A:A3:13:AC
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c4:74:e5:7e:d4:a8:db:3f:6e:24:9d:47:8d:6a:f6:58:60:
1b:f3:60:33:71:89:89:04:54:52:f7:1d:84:66:8e:79:23:13:
15:e1:f8:39:39:ba:e5:b1:59:97:d1:50:c9:78:1f:83:b0:11:
67:2c:be:76:50:ca:39:61:90:56:fe:80:37:5c:ce:04:79:22:
06:05:64:23:67:62:61:82:e5:1b:de:d0:e7:be:5e:f4:8d:06:
34:95:51:40:f3:db:3b:86:25:80:ec:2f:4c:4d:ff:16:49:a5:
4a:44:b1:2c:dc:70:66:1b:78:6a:18:7c:4c:ae:f5:28:dc:bf:
5b:a8:cd:6c:3a:ff:f9:a7:6a:8d:2d:62:1e:3d:89:7f:e9:bf:
21:87:3c:1b:5d:75:31:5b:87:da:c9:dc:fd:64:70:af:bb:7c:
7b:7e:ff:97:cd:a5:6f:fb:c5:71:77:5b:67:ae:a6:c5:62:fe:
74:23:a8:ef:24:73:38:d0:28:7d:f2:e0:85:55:c4:fa:df:f2:
7d:e9:13:89:9c:85:4a:04:41:40:d5:c7:38:cc:f1:ff:8d:db:
5a:10:d2:f3:99:ab:2b:5d:00:35:d3:df:54:2c:ed:16:26:29:
8a:c7:ab:d4:3d:ae:0c:4c:fc:11:34:09:5a:2d:a3:9e:ee:15:
42:03:38:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:54:03 2025 by rpki-client