Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
File: XWU9B97R6Nf08uoEvTaELFsS8V4.mft (raw, json)
Hash identifier: U6tP/rUV2XWkHZ5hqXyiBB13Fa+k6k3Y1/ajku5C0lY=
Subject key identifier: 27:63:49:EF:93:E3:A0:72:FF:39:0F:5B:D0:1A:B8:1C:A3:65:DE:AB
Authority key identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
Certificate issuer: /CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Certificate serial: 01987486EFC044D55112C46BA71D5C1D502A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
Manifest number: 0E3F
Signing time: Mon 04 Aug 2025 10:00:56 +0000
Manifest this update: Mon 04 Aug 2025 10:00:56 +0000
Manifest next update: Tue 05 Aug 2025 10:00:56 +0000
Files and hashes: 1: XWU9B97R6Nf08uoEvTaELFsS8V4.crl (hash: cGk/CrajwInE6L9uB2kPVGoT35i+ndaH5yB82cyAe40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:ef:c0:44:d5:51:12:c4:6b:a7:1d:5c:1d:50:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Validity
Not Before: Aug 4 10:00:56 2025 GMT
Not After : Aug 5 10:00:56 2025 GMT
Subject: CN=276349ef93e3a072ff390f5bd01ab81ca365deab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8e:73:ff:fc:51:59:01:64:7e:ad:e1:02:04:
0e:f1:0a:40:15:7c:f3:43:b5:27:2e:2e:c8:89:7e:
01:77:97:df:38:c9:39:f6:e5:98:d0:06:66:89:8b:
ef:05:82:d8:4a:16:a0:01:7f:c0:b0:b9:dd:19:75:
78:20:70:06:94:c1:bb:4a:a8:04:3f:b5:1e:4a:5e:
45:a1:6a:7f:75:95:9d:33:df:10:1f:4a:a2:24:46:
ab:14:49:4d:d8:6a:43:66:9a:fd:39:e6:b5:3a:a4:
0b:dc:63:48:a6:49:c4:99:7d:32:ad:97:3d:c1:5b:
c2:33:65:1b:1f:86:df:57:46:c1:60:fe:3a:e2:03:
88:0b:41:df:e7:20:e1:d2:d3:10:e8:22:24:38:6d:
98:77:d8:82:ea:95:93:43:eb:6a:7d:46:c1:7e:45:
bd:c6:e0:99:5c:ac:fe:ad:e1:25:f7:5a:a2:7e:55:
1f:4c:04:64:11:56:c6:11:f5:20:9a:50:9b:43:a8:
90:e5:bd:12:fa:93:05:a1:46:39:80:b8:9e:08:f4:
b8:5f:5a:50:06:a0:9a:24:d1:8d:fb:76:ce:a7:db:
3c:e3:5b:f9:52:ff:54:ab:a8:ce:9d:3c:6a:4d:72:
af:1a:95:7b:be:35:d2:b3:68:04:d8:e7:ef:15:85:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:49:EF:93:E3:A0:72:FF:39:0F:5B:D0:1A:B8:1C:A3:65:DE:AB
X509v3 Authority Key Identifier:
keyid:5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:e6:e2:03:44:90:34:f6:e9:1d:30:e4:65:33:24:8f:57:
27:b0:77:ca:9c:9f:a9:c6:bf:dd:87:83:cf:d5:aa:95:fe:e5:
5c:31:f8:e5:37:94:46:a6:52:81:a0:5c:82:4d:5d:2a:a8:92:
85:87:0e:0e:d4:da:be:6d:2b:08:6a:02:76:71:5e:ce:68:d3:
86:5f:5c:ee:a4:8b:06:ef:16:28:5d:86:d9:20:87:cb:7d:1a:
c3:72:13:73:ef:8c:bf:ef:f0:aa:9f:d1:10:b7:24:71:20:6f:
10:cf:1d:3c:42:2e:20:bb:11:a9:d0:1a:e7:06:3f:74:2b:b1:
b1:2e:a8:7a:31:0a:49:83:8f:75:1d:8d:fb:3c:17:bd:a8:a0:
ca:b1:e3:ce:95:bd:c5:05:e0:ca:2c:3b:bd:fe:51:24:a8:4d:
5c:a3:74:20:af:70:08:11:d4:2c:a5:4e:55:2d:f7:62:5e:4a:
3c:2f:b2:ed:d1:dc:dc:f3:4d:fa:d6:63:5b:c3:73:55:1b:ee:
1b:eb:51:eb:69:6a:40:37:ad:29:ef:c8:88:5f:d6:27:44:5e:
9e:af:f9:67:b8:e1:30:57:15:dc:b0:b9:00:bd:28:a6:9f:32:
0e:cf:ad:56:f2:10:72:bb:7d:4c:1b:8e:ae:cc:f9:2c:58:8a:
f5:6a:17:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:20 2025 by rpki-client