Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier: E5XGZJ3m2VuwEiTgWI6x6rJqo2V1PtIKjvzBfpO0Hns=
Subject key identifier: 81:27:B9:66:B8:60:CF:52:7F:2E:97:3B:3B:12:1E:C0:46:38:96:83
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial: 019916BED62A697639E0A267E88995FD8941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number: 0443
Signing time: Thu 04 Sep 2025 22:00:29 +0000
Manifest this update: Thu 04 Sep 2025 22:00:29 +0000
Manifest next update: Fri 05 Sep 2025 22:00:29 +0000
Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: xRB+sS2HVvqAW5+g/siXEW31HvRFaXI7HJFl3pHZ2Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:be:d6:2a:69:76:39:e0:a2:67:e8:89:95:fd:89:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Validity
Not Before: Sep 4 22:00:29 2025 GMT
Not After : Sep 5 22:00:29 2025 GMT
Subject: CN=8127b966b860cf527f2e973b3b121ec046389683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:f5:a4:6c:ea:45:e5:6c:0a:dd:66:02:eb:
f2:df:40:7b:0d:87:57:87:3a:f6:84:2b:96:c7:b5:
4b:18:40:ab:2c:3e:0d:56:b1:54:7b:1c:d4:79:9e:
53:a0:88:87:c2:ed:66:5d:5b:3e:5a:2b:c4:7a:34:
83:e5:b9:e0:fc:2d:29:93:90:33:e4:10:88:5a:f9:
d9:1a:db:c5:5e:78:d6:50:1b:7e:3b:25:51:fa:2e:
1a:9a:14:d4:72:f0:ab:86:09:bd:e3:c4:09:56:a4:
31:e5:39:27:c3:55:2a:a5:15:08:ac:9a:3d:98:5b:
fd:73:e5:72:7a:37:1c:54:1d:28:04:1e:59:85:fc:
1f:41:fb:ea:02:38:04:53:04:e9:c4:e9:0e:3e:fc:
38:f5:11:ba:ad:67:74:af:eb:30:e4:5e:1a:ff:bd:
c2:8f:40:16:c6:9a:62:2d:69:cd:53:91:97:72:85:
a6:d3:51:67:29:55:bb:1d:b0:44:5b:96:b6:3b:e3:
d7:54:41:67:b3:42:86:04:ea:ad:b9:6e:22:36:22:
80:be:f5:fc:30:69:cc:b7:8e:f0:9e:74:b0:d5:04:
98:8a:58:60:57:96:0d:e0:dd:39:81:92:43:c6:6e:
82:2e:a4:c0:f1:c7:74:6e:46:7f:9d:46:ba:e7:6c:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:27:B9:66:B8:60:CF:52:7F:2E:97:3B:3B:12:1E:C0:46:38:96:83
X509v3 Authority Key Identifier:
keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fe:63:1c:ce:01:9d:c4:4b:eb:37:a2:15:8e:24:8b:e2:68:
00:0c:bd:75:37:ff:06:d3:0b:6b:ea:b1:12:88:fc:b2:d7:6a:
84:9b:7a:86:10:46:51:52:85:de:35:24:21:62:52:15:4d:74:
d4:f9:74:d9:bb:4c:f4:bc:e8:88:e3:a7:ab:b9:27:c2:e3:ed:
54:3f:b1:39:18:51:4e:7f:c4:82:84:fa:d2:f9:8b:7f:3b:6a:
17:38:26:dd:3b:f3:2d:8b:f9:e1:46:c8:04:59:1d:75:a4:05:
cb:a2:13:b2:99:fa:79:36:a9:40:40:b5:b7:01:c3:84:25:a5:
fb:f6:47:0b:44:fc:e9:89:f1:0f:ac:f3:2b:2f:24:81:41:a2:
4b:9a:f5:7e:08:45:9a:4d:f0:b5:61:c5:e5:76:b5:c9:36:31:
a9:e3:08:89:21:c6:ae:bd:57:64:a7:0b:c0:fc:71:99:cb:fd:
b2:fe:55:6f:21:17:54:44:d4:df:ff:a3:7a:7a:ef:af:28:1a:
bb:5c:da:ae:ef:14:87:f8:18:56:a8:d1:70:0e:fa:1c:6c:49:
68:f5:ed:e0:ea:ba:5b:82:41:ff:e0:3d:ba:50:2f:69:ee:9d:
73:a4:36:f9:66:29:30:65:49:73:dd:c5:e3:36:f0:23:a2:5e:
d0:75:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:04 2025 by rpki-client