Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
File: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft (raw, json)
Hash identifier: llhgStuG0avbc89zb7nQphX34m/fpRpGgm8MKnO0nBU=
Subject key identifier: 70:3F:C5:84:00:12:34:13:24:AB:11:E6:27:16:09:5A:34:CA:F0:AE
Authority key identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
Certificate issuer: /CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Certificate serial: 0199240D1581BCDB6F7A431A1516759DBFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
Manifest number: 06BE
Signing time: Sun 07 Sep 2025 12:01:00 +0000
Manifest this update: Sun 07 Sep 2025 12:01:00 +0000
Manifest next update: Mon 08 Sep 2025 12:01:00 +0000
Files and hashes: 1: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl (hash: /E22bDI+fH0XmXKZOO8TgkyPYRNPs5EuInebVUs9apc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:15:81:bc:db:6f:7a:43:1a:15:16:75:9d:bf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Validity
Not Before: Sep 7 12:01:00 2025 GMT
Not After : Sep 8 12:01:00 2025 GMT
Subject: CN=703fc5840012341324ab11e62716095a34caf0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:9d:44:41:b8:9b:36:f0:bb:0c:bb:c3:16:
4a:2f:6a:2c:bc:b0:1f:61:3b:df:ca:a5:b1:a2:ce:
cb:70:10:3f:05:ea:47:ef:ef:01:56:2e:f0:63:c8:
f2:78:1a:cf:a2:c0:a0:5b:8f:40:09:d9:67:e1:f2:
98:02:32:39:48:4f:ac:e5:bc:d2:07:1d:b8:a7:fc:
7a:28:53:90:a9:69:d6:53:46:f6:23:0a:dd:bf:da:
13:8d:87:b5:a7:55:94:68:d1:5a:b4:55:bc:bd:dc:
11:a3:2d:f7:51:78:08:50:f0:b2:71:7c:7a:2a:ed:
86:ce:e8:21:2d:35:81:d6:8f:53:75:8f:7d:79:7e:
03:d7:1d:53:ed:eb:04:3d:43:cd:52:88:82:68:cb:
d3:4f:f5:28:83:c0:75:9d:52:21:f3:55:a4:8a:61:
78:4f:f1:01:38:38:2c:e7:e8:bb:da:5d:ba:5f:b4:
97:78:9a:b4:44:2e:5a:6f:d3:ea:15:59:d0:91:a4:
e0:b9:ab:0f:22:89:db:e6:56:40:d6:74:b4:bf:24:
1a:1a:4d:49:d9:c6:87:99:98:ad:7d:ac:bf:36:13:
13:1f:3b:bc:39:a5:78:3a:b0:df:d5:e2:dc:ae:93:
43:24:c5:7a:1a:45:c0:56:3c:aa:f8:fa:58:9b:55:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3F:C5:84:00:12:34:13:24:AB:11:E6:27:16:09:5A:34:CA:F0:AE
X509v3 Authority Key Identifier:
keyid:5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e4:d8:5a:00:2e:92:bf:28:40:0a:e0:13:2f:bd:cf:b2:c8:
a1:d2:82:f9:e0:02:af:e2:16:4a:21:46:e7:42:c7:96:93:4e:
30:da:d4:e9:22:09:d0:a7:35:3e:fd:bc:60:e6:0d:c1:a1:c6:
58:08:0c:bc:da:c9:96:17:4d:ca:f0:97:5d:d7:9b:28:8b:b3:
97:ce:fd:a4:d6:39:f8:b5:ce:2d:cc:99:46:bc:f4:54:97:d7:
15:85:66:bc:19:e3:d6:b3:c6:e2:b6:a3:cf:04:fb:11:1b:06:
a2:27:41:71:c6:47:37:4d:b5:e7:67:9c:f5:ca:0e:d0:b3:fd:
87:f2:8a:f3:f7:cf:31:59:05:5d:8d:54:7d:63:d6:7b:e4:a4:
07:3f:ae:c4:ec:66:2d:32:db:8f:a6:e7:a4:67:49:4a:d0:ea:
ef:14:a9:e1:c3:11:82:e6:62:cb:1f:b8:3b:77:26:2b:c2:88:
de:f6:e1:91:88:4a:2e:17:a8:25:6d:54:e9:c5:29:ce:88:bb:
2e:ca:2a:8d:fc:e0:9c:a8:d6:a7:f9:87:52:32:ab:32:e7:df:
f2:51:13:92:5c:a7:90:2e:04:41:16:c7:08:54:8c:06:a9:94:
45:c1:cf:07:24:e0:32:03:16:b7:a3:48:19:37:fa:cd:9c:ef:
46:f3:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:25 2025 by rpki-client