Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
File: XJF3tPVOZX44dlbmc6-MDuCmCRc.mft (raw, json)
Hash identifier: IyYwmu+0eP6iTCUXIBpDpRJIRWy84LrKUoT8NYpPWP8=
Subject key identifier: 96:A5:B2:48:1A:E7:2F:72:04:FE:D7:42:40:79:31:5C:30:4D:7F:26
Authority key identifier: 5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
Certificate issuer: /CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Certificate serial: 019849D328CA376129312F4BF2A48C29F59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
Manifest number: 01A8
Signing time: Sun 27 Jul 2025 03:00:31 +0000
Manifest this update: Sun 27 Jul 2025 03:00:31 +0000
Manifest next update: Mon 28 Jul 2025 03:00:31 +0000
Files and hashes: 1: XJF3tPVOZX44dlbmc6-MDuCmCRc.crl (hash: KNNj0SyonvmmrGK2lkej2AEjo04ARbJmk4jAUw9sImE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:28:ca:37:61:29:31:2f:4b:f2:a4:8c:29:f5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Validity
Not Before: Jul 27 03:00:31 2025 GMT
Not After : Jul 28 03:00:31 2025 GMT
Subject: CN=96a5b2481ae72f7204fed7424079315c304d7f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:84:6d:ac:de:55:5c:3c:08:3e:07:f3:5b:
94:1a:df:97:d0:28:c8:69:b2:96:78:98:f1:32:94:
62:e3:d6:6b:92:4f:7d:b9:57:e2:29:18:43:82:86:
d2:94:59:c0:4b:59:a8:5a:fd:0d:f5:b1:a2:8b:b9:
23:48:b6:78:93:70:ca:30:df:96:8c:26:fa:b5:92:
6d:c4:c6:cb:a0:4a:1c:dc:1d:da:f6:67:86:44:74:
80:e8:b0:51:10:06:f1:1c:33:1e:d1:59:31:3c:f4:
b4:4f:7c:63:04:c7:7c:e7:9b:12:ee:51:e0:c3:d7:
6c:4e:f4:07:20:f8:71:b0:b3:9f:89:e3:a5:cc:02:
3c:99:84:83:f3:ac:a1:85:76:d5:05:61:74:1e:79:
4a:60:6a:56:ad:5d:bf:48:b2:4f:e1:d3:80:d7:19:
00:40:7a:95:22:2f:78:28:74:1b:fc:cb:2f:c6:52:
45:91:c2:01:50:5f:dd:73:55:2a:10:df:b2:7c:fe:
6c:b4:d8:2e:49:f8:a3:85:15:ea:5a:e7:95:3a:5c:
2d:b7:01:bc:6a:d9:aa:cf:63:67:72:ec:d0:85:04:
52:2b:57:49:75:dd:50:26:17:26:d2:0d:2c:b8:9d:
f9:4f:c1:d0:7d:84:8e:2a:72:38:7e:a3:3e:c3:a4:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:B2:48:1A:E7:2F:72:04:FE:D7:42:40:79:31:5C:30:4D:7F:26
X509v3 Authority Key Identifier:
keyid:5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c9:e4:e1:5f:c2:0b:62:97:4e:10:b1:8d:45:56:59:8e:a1:
2b:ce:d8:13:e1:87:36:77:fc:f5:5e:47:0b:37:2c:88:97:e6:
cf:61:d4:53:b7:38:e5:35:d7:96:45:5d:ce:95:ab:06:f4:ec:
b3:87:a3:cc:6b:67:89:e6:ef:1e:58:15:91:c2:1a:92:25:dd:
9a:80:06:2e:32:f2:69:38:9e:a4:7f:21:7c:6c:f9:42:08:b4:
47:e4:24:31:f5:9c:97:b2:ca:4a:8c:37:21:fb:6b:b2:44:50:
aa:bf:57:18:e6:be:d2:87:0f:1b:9c:73:80:2a:4b:91:98:75:
5a:f3:9c:df:48:46:c7:17:5a:cf:d0:33:57:5c:5c:47:e1:43:
23:84:f0:c3:8b:ff:4c:06:f7:29:c3:74:a1:54:31:4c:b6:c8:
bb:e5:47:d3:9e:f0:13:44:52:8f:e3:e5:92:3c:94:4a:27:95:
de:d2:69:0e:d8:40:18:96:62:5d:42:54:b1:c9:71:36:68:fa:
57:73:db:98:86:e8:a3:2d:28:7d:86:66:75:c1:8f:3f:87:1e:
f2:19:14:e7:8b:f0:72:fc:03:7d:07:23:a0:15:f6:3d:ba:36:
6f:dd:04:aa:e6:46:45:1e:97:21:c3:f9:da:bd:48:d6:b3:e4:
8d:41:04:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:16 2025 by rpki-client