Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier: Ms+ItrsmB2UsFMib+6Q7mnaxfQcDVdblsd2ymaIlN7I=
Subject key identifier: 6C:D3:E4:34:82:43:6F:0C:BA:C3:3B:41:98:88:C2:45:A8:90:D1:D3
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 0199240D50C330E52D79244FFA3276B52311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number: 0643
Signing time: Sun 07 Sep 2025 12:01:16 +0000
Manifest this update: Sun 07 Sep 2025 12:01:16 +0000
Manifest next update: Mon 08 Sep 2025 12:01:16 +0000
Files and hashes: 1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: sUTc0oN6NYDk4vUfUJhxeBF5sXhZYKWZYkiJJW+236Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:50:c3:30:e5:2d:79:24:4f:fa:32:76:b5:23:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Sep 7 12:01:16 2025 GMT
Not After : Sep 8 12:01:16 2025 GMT
Subject: CN=6cd3e43482436f0cbac33b419888c245a890d1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:76:f3:1d:55:bf:77:07:de:36:6f:b9:e2:
5e:44:9e:fd:3b:01:de:4c:b2:ec:fd:ef:9b:07:2e:
ac:41:b3:ce:50:c7:d3:fa:83:67:6e:99:eb:13:ce:
2a:5c:9d:54:6e:a2:ac:ca:39:be:59:5b:3c:03:12:
a1:bf:e4:b2:0b:f2:4c:81:99:78:66:96:98:20:07:
f8:3b:67:ba:dd:ec:92:91:06:4b:9f:db:cd:0a:7e:
69:eb:bd:54:3c:08:1d:92:48:1c:00:cd:1d:a7:7d:
a5:54:08:33:df:c2:4f:9e:9f:da:1a:1b:5e:45:5a:
fb:e7:21:00:d4:0d:22:67:ad:ba:e9:47:60:ef:5b:
42:47:a5:7c:e9:2d:91:4f:c8:4a:8b:d1:7f:db:eb:
15:4d:3d:89:8f:85:60:fb:f5:7f:60:33:3f:35:23:
ba:21:ae:60:0a:1c:78:db:37:63:95:b6:d7:18:bd:
c5:4d:74:57:2d:09:63:7c:9c:8e:63:88:43:97:e9:
24:f7:35:60:45:b8:1b:44:f2:be:97:0b:1c:61:e1:
5a:f5:9e:5a:7f:bc:29:69:47:be:dd:fe:c4:2c:cc:
97:ca:f1:01:5d:e1:51:25:27:21:a7:d6:08:9b:40:
36:35:83:6a:f4:a8:4e:b0:e4:af:f2:0a:34:dc:95:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D3:E4:34:82:43:6F:0C:BA:C3:3B:41:98:88:C2:45:A8:90:D1:D3
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:68:03:af:2c:29:96:40:f0:6b:fd:99:7c:dd:5c:e2:50:97:
28:2e:27:d7:03:74:c8:1e:ec:9d:bc:0f:ef:15:0c:73:06:6b:
8e:f6:2d:29:04:02:71:08:ac:70:e7:36:68:da:a2:46:02:b3:
53:fc:88:4c:22:8f:c9:28:65:23:be:56:70:91:87:43:1f:4e:
2e:e1:f9:ae:a8:61:54:9e:e7:ec:de:72:db:96:8a:9c:e4:fe:
a5:e9:78:a1:22:cf:c7:72:ca:96:ef:8f:d7:a0:19:61:36:b6:
d7:b9:1a:b4:9b:63:61:ef:1c:25:de:ab:47:99:fc:02:cd:68:
23:20:ea:67:f8:b6:c3:9b:bc:d8:ab:67:54:aa:dd:64:8f:e9:
91:9f:38:06:70:a8:65:5a:a3:e4:56:9d:0d:5f:c3:c2:71:3c:
5c:cc:a2:81:8e:ec:0c:0e:54:01:f1:e3:dc:89:6a:c7:23:7c:
fb:a4:f6:d3:7b:42:30:f2:6b:bf:5c:16:d7:4d:07:38:9b:98:
e6:34:db:dc:8f:cc:97:22:55:60:dd:9e:8a:aa:af:00:65:d1:
33:4d:37:36:c2:c0:a7:e4:2d:f7:96:d1:bd:67:05:0e:d8:cd:
b1:58:b5:8e:fc:98:af:cb:92:89:60:5f:d6:cc:09:25:96:0b:
5f:3c:5b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:52 2025 by rpki-client