Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: zzFYmeyzP4oUatVYi88BJh88vj6ZALGQ3ufusXpLbvc=
Subject key identifier: 57:37:78:A6:D9:FF:0D:65:A7:CF:C1:91:BC:25:FD:3A:91:14:62:BB
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 019921B0BF8B7F43FAFF8A2EBC0EA4A20A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0C7B
Signing time: Sun 07 Sep 2025 01:00:55 +0000
Manifest this update: Sun 07 Sep 2025 01:00:55 +0000
Manifest next update: Mon 08 Sep 2025 01:00:55 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: jgXjJ/f519d5EcjT0k/8OgML8ntXDTGo4qTfg2IAJnc=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:bf:8b:7f:43:fa:ff:8a:2e:bc:0e:a4:a2:0a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Sep 7 01:00:55 2025 GMT
Not After : Sep 8 01:00:55 2025 GMT
Subject: CN=573778a6d9ff0d65a7cfc191bc25fd3a911462bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:51:82:17:38:70:20:06:c9:70:a9:36:a0:
44:7b:ba:ac:9e:99:fa:79:df:22:d5:0e:fa:4b:15:
f0:6c:ec:cb:f9:71:e7:7d:24:35:7a:2d:a6:c4:db:
2d:0e:9e:fe:9f:4f:fe:a4:78:58:7f:2c:aa:ea:d5:
bb:80:e4:5c:90:4b:7e:da:3c:ab:04:7e:58:8a:f0:
e8:e0:f0:fc:31:d5:94:d0:d9:89:67:f9:cd:40:ce:
09:3b:89:71:94:93:24:05:4d:bd:d2:0c:29:3d:bd:
b2:54:ea:cc:fd:ec:5c:94:65:a7:ef:b5:7f:c8:26:
93:9b:26:79:80:1f:59:2e:41:0e:2e:6e:2b:8b:b3:
8e:e4:0d:a3:e2:07:7f:9a:73:0c:3b:e1:cd:87:ac:
e9:ef:6e:a1:ad:55:1c:25:cb:6d:70:35:2d:a9:e9:
13:91:dd:bc:2b:0e:24:fe:41:05:93:9c:76:fb:fd:
30:79:66:10:eb:7e:b8:c2:29:ba:4e:24:f3:59:42:
fc:f8:87:44:df:89:05:a4:43:ac:5e:24:8f:78:f0:
06:01:e8:3d:2d:4c:14:02:ad:19:04:11:0e:4c:e4:
cf:e5:77:c3:b9:92:2b:90:8c:96:1c:7e:29:90:c8:
db:5f:78:53:9d:29:77:34:77:c3:17:f0:e2:4e:25:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:37:78:A6:D9:FF:0D:65:A7:CF:C1:91:BC:25:FD:3A:91:14:62:BB
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a7:5a:e5:39:e0:55:f5:ad:a0:b5:88:a9:1b:e8:8f:bd:49:
c4:77:ba:20:0e:1f:a1:aa:30:45:d1:92:57:34:60:7a:fa:03:
70:a9:a6:ca:64:44:a0:1f:f4:ee:70:6c:d8:7c:54:ee:1a:90:
de:dc:c8:fc:a9:8a:cb:62:4b:eb:cc:d5:03:23:a7:fd:be:e3:
3c:4a:dc:44:fa:65:da:66:47:58:04:5a:11:cb:ba:13:ef:ae:
60:7e:1b:d5:70:b8:09:f7:20:eb:e9:77:ad:8a:54:2e:c4:34:
a9:63:d2:f2:fb:0d:1a:3e:27:2f:0c:c9:85:13:08:73:d0:9d:
94:ff:54:85:53:45:bb:50:82:06:96:1f:db:ef:a3:d7:43:76:
06:45:1b:b5:25:f9:7f:32:29:a4:10:58:b4:37:f1:f5:17:b0:
20:1f:34:46:3c:1a:c8:64:b1:2f:19:a2:30:19:dd:6e:1f:7b:
04:e3:85:57:ec:1a:49:5a:98:6f:f6:13:76:8d:bc:42:8b:ca:
33:84:5e:19:9b:10:e0:6c:d1:e7:f4:9f:cf:a8:c7:44:b6:8e:
66:f6:88:eb:77:96:93:f7:d5:ec:3c:3c:42:1f:be:6c:5f:38:
77:7d:0d:50:18:e5:fc:8f:bb:68:17:82:86:e6:97:9b:7f:7a:
a2:ae:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:38 2025 by rpki-client