Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: 7pZ+dTJBGMICQ3ZP25kEU16GYZKZ2m8UFhKeLFVyKGQ=
Subject key identifier: 3F:92:E2:32:84:32:F7:F3:2C:EE:FB:08:34:A9:BE:30:6A:32:1C:B5
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 0199221EF3E0DCF899F0B1C0CC5C04A386C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 1136
Signing time: Sun 07 Sep 2025 03:01:17 +0000
Manifest this update: Sun 07 Sep 2025 03:01:17 +0000
Manifest next update: Mon 08 Sep 2025 03:01:17 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: ZmpSeuc5Fgra45v9bFy+6DIyx3BC85ZkYR4DAgGuyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f3:e0:dc:f8:99:f0:b1:c0:cc:5c:04:a3:86:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Sep 7 03:01:17 2025 GMT
Not After : Sep 8 03:01:17 2025 GMT
Subject: CN=3f92e2328432f7f32ceefb0834a9be306a321cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:6d:d4:df:77:02:a6:a8:51:dc:23:67:25:
4f:7a:f9:b6:34:fa:fc:34:9a:ba:ac:ac:4d:93:aa:
e9:93:63:37:68:2d:65:97:55:42:f0:b8:5e:bf:be:
ad:79:a7:ac:f6:16:df:4e:31:9a:13:68:fe:b6:d2:
da:e3:d3:29:a3:ba:77:94:7a:b9:fd:96:0a:ac:fa:
be:72:bb:2b:60:b0:85:3a:85:a5:0c:77:d4:32:af:
b8:33:81:4d:16:e7:04:fd:cd:60:72:df:78:52:6d:
a3:8b:82:b3:8c:b1:d3:ca:ff:28:6e:19:6c:8d:12:
2c:fc:21:31:fe:2f:fa:cb:39:37:21:31:de:3b:92:
a6:7f:cc:ce:82:53:7d:c9:8e:6d:a3:a3:08:96:b8:
4a:17:09:a0:b3:30:68:70:1d:f6:5b:fd:97:4a:8d:
08:01:95:c5:a3:c2:78:60:88:e9:d5:ef:6c:9e:7c:
2f:41:4d:b0:e2:61:86:19:f4:f6:ea:e0:37:98:8a:
cf:4f:b1:88:34:3d:6c:e9:4e:82:61:80:30:13:f5:
7b:f7:dd:bb:32:d1:7a:13:96:88:95:f2:3e:83:5b:
f1:3d:ef:74:d4:8e:93:a6:78:80:d0:ee:80:bd:d0:
18:8d:6e:ce:5b:8e:79:9d:be:7d:2c:1e:58:3d:d9:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:E2:32:84:32:F7:F3:2C:EE:FB:08:34:A9:BE:30:6A:32:1C:B5
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6b:92:34:a1:13:37:07:ac:98:a7:23:32:02:4f:63:4f:e1:
1d:0b:52:15:65:6a:5b:42:26:3a:18:ae:b0:14:c2:c9:89:b0:
dd:61:78:66:58:a4:89:85:89:ed:b3:f1:09:9c:62:d6:ff:12:
5f:fe:2e:66:15:6a:c1:e8:99:65:4a:b0:ba:55:14:2d:ff:78:
3a:e7:4d:ae:05:3f:a9:8d:c3:ea:97:b5:7f:ad:d8:d8:67:b8:
b1:2b:25:54:e2:b9:1c:15:f6:86:61:dc:06:cf:64:8f:66:e4:
35:39:02:2b:a2:62:97:ec:15:07:2b:33:66:39:07:10:03:e0:
91:bd:bf:0f:25:b3:da:38:fe:05:14:0e:9f:47:58:c6:f3:02:
9f:33:5b:2a:73:22:42:7c:14:48:9f:82:f7:f7:8d:7b:82:e7:
47:f9:59:e4:14:ba:4c:28:33:f4:09:99:4d:c1:ee:fc:7f:4d:
f0:aa:bb:96:a4:2b:94:7d:ad:ee:68:b7:50:28:5c:33:7e:fb:
a2:fe:08:b4:cc:d9:e3:7f:80:c2:fb:1f:13:df:df:7d:cb:28:
70:65:90:55:d5:0a:ac:2c:d1:e6:85:6b:72:fa:68:9a:ea:16:
1e:8e:60:06:7a:20:f6:8c:84:34:19:f7:77:d3:79:ba:b6:a8:
26:06:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:47 2025 by rpki-client