Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
File: XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json)
Hash identifier: SbhmLCNRTzHXqUVJzAJ/w0bLJkgh7leOqje8kXVoPqQ=
Subject key identifier: 07:A5:B6:5E:E6:5E:4D:02:EC:F2:F1:8B:12:CF:A9:DB:48:D2:39:8B
Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
Certificate issuer: /CN=5db79275659dd961c742bf21d8dca184a4430d85
Certificate serial: 01984589CE48EE74A6340612C9EF3082D469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
Manifest number: 0C7B
Signing time: Sat 26 Jul 2025 07:01:55 +0000
Manifest this update: Sat 26 Jul 2025 07:01:55 +0000
Manifest next update: Sun 27 Jul 2025 07:01:55 +0000
Files and hashes: 1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: HBdsQ3ZzILEPVkwMfHm1qN5wWpVhNSANZGhl/Lt+gAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:ce:48:ee:74:a6:34:06:12:c9:ef:30:82:d4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85
Validity
Not Before: Jul 26 07:01:55 2025 GMT
Not After : Jul 27 07:01:55 2025 GMT
Subject: CN=07a5b65ee65e4d02ecf2f18b12cfa9db48d2398b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6f:c9:6a:14:4d:1d:f0:6f:21:fb:a8:85:ab:
f3:91:db:b1:f6:f2:cb:9e:11:d8:d8:83:2e:f5:b1:
9c:17:f3:a5:d6:88:ec:b5:95:0e:ba:a4:54:8e:3d:
b6:d6:20:ca:4f:ab:fa:df:02:d8:25:0c:62:dc:a7:
27:ec:41:35:a0:e2:27:15:0d:d7:d8:46:1a:60:fe:
38:7a:d4:3a:bf:79:0c:2f:f4:af:d3:56:ae:d0:62:
64:04:64:f3:e9:41:e3:e7:93:2a:15:df:72:cd:52:
45:ec:a5:4f:53:19:8b:41:a9:f3:13:f7:60:f5:cc:
f5:39:50:f4:17:0c:c5:5b:fe:80:5c:98:41:ae:89:
bd:50:9d:d1:51:5d:c3:18:fd:98:22:bd:3a:92:3c:
38:15:c5:90:78:9d:ee:b3:31:74:d6:dc:43:81:0f:
01:dc:0d:ed:90:9e:52:d5:bd:58:0d:0f:aa:c9:ca:
02:41:bd:b8:67:60:45:de:d0:65:2c:3e:8b:00:b3:
10:a4:17:31:5d:04:ca:63:cd:c7:fc:2e:99:9a:8f:
3f:cc:96:fc:b6:94:0d:34:1d:57:73:f7:ef:5c:34:
75:31:3e:3d:5b:80:42:d5:8b:f6:c7:4b:90:49:4f:
a0:28:85:3b:7d:48:0e:13:de:0c:af:32:93:39:6b:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A5:B6:5E:E6:5E:4D:02:EC:F2:F1:8B:12:CF:A9:DB:48:D2:39:8B
X509v3 Authority Key Identifier:
keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:19:45:80:ec:78:d5:af:4c:6f:b4:4b:85:89:5b:5b:26:48:
d3:46:b3:5b:33:ee:c1:30:17:2b:4b:73:7e:83:56:31:a9:33:
66:03:f0:c7:55:d6:d2:f4:db:58:58:3e:d8:c3:79:ab:fe:f6:
b7:0e:d1:2e:87:a6:c1:2f:91:65:5d:9e:69:99:9b:08:5b:81:
51:a9:f8:b5:5f:d1:66:1d:0e:77:27:91:11:af:a4:da:20:ae:
91:73:b2:35:1d:51:81:e6:23:03:18:69:25:93:ab:d0:01:fe:
fa:19:3c:6a:40:be:23:0b:ae:1e:51:bc:33:96:1f:44:48:3c:
57:db:b4:63:9e:9d:61:72:56:18:a6:13:6d:25:6f:ae:30:2f:
6d:e0:69:66:65:0b:85:6f:2b:e4:fd:6e:c5:a7:75:b2:36:5e:
e6:0e:4c:73:30:50:52:08:a0:02:77:20:c9:72:5b:5c:96:0d:
58:42:19:8a:2b:ce:7d:f7:f7:84:7b:9e:17:36:a9:3c:8d:77:
10:1d:5f:a3:35:ee:12:a4:e6:87:17:20:19:be:0a:3b:3a:89:
e9:a5:61:67:19:6a:f5:2a:f3:0b:52:64:4a:e8:e6:16:3f:4d:
13:cc:b6:76:a0:5b:53:c3:32:50:66:40:c4:50:05:be:8d:96:
e7:00:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:06 2025 by rpki-client