Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
File: XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft (raw, json)
Hash identifier: 4Cn1nYjgsXDm67f9xHoMaEVsdNQZLKlyaKgvTIgGIXA=
Subject key identifier: D5:7C:AA:25:D0:7F:9C:36:CE:C9:10:BE:37:CA:AF:8F:0B:B2:C4:ED
Authority key identifier: 5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
Certificate issuer: /CN=5e55afde34211bcee6a7fd992488a24927b46947
Certificate serial: 01987306D05B9844C8250564AD34302EF024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
Manifest number: 0260
Signing time: Mon 04 Aug 2025 03:01:22 +0000
Manifest this update: Mon 04 Aug 2025 03:01:22 +0000
Manifest next update: Tue 05 Aug 2025 03:01:22 +0000
Files and hashes: 1: XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl (hash: 0a8VKh4mXA6Fl66QI2NuHLRFjsrs2uhu1AUV3Np67ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:d0:5b:98:44:c8:25:05:64:ad:34:30:2e:f0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e55afde34211bcee6a7fd992488a24927b46947
Validity
Not Before: Aug 4 03:01:22 2025 GMT
Not After : Aug 5 03:01:22 2025 GMT
Subject: CN=d57caa25d07f9c36cec910be37caaf8f0bb2c4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:3a:d4:f1:e6:74:34:3f:13:f5:ff:4c:04:
95:42:e6:79:d9:42:40:48:97:d0:87:77:51:34:df:
b1:fa:d7:83:b1:33:6f:e8:1c:a5:7a:21:49:c1:7d:
e3:e4:9b:07:b1:62:6d:04:c6:db:59:d2:1a:d5:78:
8f:f4:c5:e6:89:2e:c4:af:b9:5c:41:02:d4:7d:fc:
2d:2e:f1:c3:6f:aa:c4:71:5b:41:73:15:87:3b:ff:
62:14:30:24:91:9f:e6:54:c3:92:87:3f:ad:85:f7:
57:7e:54:53:b9:04:29:1c:36:f5:30:c7:8c:4b:1a:
a8:59:31:50:36:6a:e7:93:38:d8:6d:45:60:70:d6:
77:a9:56:12:d5:21:28:5c:31:ef:dc:bb:75:84:af:
c3:b5:ea:65:34:53:a2:5b:76:92:2b:24:03:39:58:
11:01:34:2f:3b:25:c3:92:27:5a:42:ed:67:7a:ce:
f8:a5:4c:58:ed:e7:21:b5:05:7f:2d:b8:38:19:0e:
18:2b:3c:f8:11:f1:e0:41:b5:73:67:f5:ca:66:92:
ad:ec:f2:72:fe:4e:47:d4:d9:33:8a:60:fa:f3:91:
6c:a3:8f:ac:93:be:ee:db:44:7d:60:0e:2b:e0:47:
e3:2f:a4:fa:67:49:c5:5d:1f:dc:9f:67:93:27:ca:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:AA:25:D0:7F:9C:36:CE:C9:10:BE:37:CA:AF:8F:0B:B2:C4:ED
X509v3 Authority Key Identifier:
keyid:5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:95:98:ca:e4:3d:9a:97:1b:2d:5a:05:ae:59:f8:37:b5:
6d:04:44:ae:0c:f3:bd:d0:b4:e6:19:f1:d4:07:50:39:ce:44:
a3:97:ed:b5:b2:e7:51:fd:58:51:7f:a9:bc:34:7d:83:00:db:
ea:10:16:87:97:46:a5:1d:be:11:ea:a9:0b:78:09:0f:d8:13:
6e:38:38:80:37:a4:2e:4f:a1:06:5e:08:b1:28:61:d5:03:5c:
05:09:b2:ba:ef:9e:bc:8b:54:8a:91:a7:2d:f2:ee:95:e1:1a:
a4:42:70:3c:bc:be:5f:21:df:a0:a2:88:b5:4d:56:ea:e2:ab:
e9:97:89:1c:75:aa:aa:4a:e8:75:6b:05:66:5b:a1:de:6c:11:
bb:b7:84:f0:ed:be:5e:3b:ce:ac:36:67:1e:34:d3:a6:d0:ce:
75:5e:6e:a7:ec:b5:bb:4f:9d:c4:47:60:a8:47:d5:96:ca:11:
52:57:70:b2:8a:90:e0:17:9f:ea:4c:4c:c7:4d:f6:10:cb:5a:
ec:22:45:e0:b3:21:02:8b:f5:71:17:a2:6d:ad:ce:c7:d2:bb:
2b:d1:1e:d3:fd:3e:48:e0:f4:ab:3b:cb:16:ac:87:ab:6f:88:
95:bc:24:34:56:77:ab:0f:e3:2c:92:72:7b:14:0e:88:f2:0d:
da:70:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:44 2025 by rpki-client