Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json)
Hash identifier: X+h6CNxD6caBgS3XTH1MEKlSfExUiL4SO8RHsPRE2os=
Subject key identifier: 8F:D4:C9:73:59:AC:5F:28:38:03:B1:B1:80:49:F6:CC:55:8C:17:5F
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial: 01987298C33BED905FCB5655A5F176842A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
Manifest number: 0159
Signing time: Mon 04 Aug 2025 01:01:10 +0000
Manifest this update: Mon 04 Aug 2025 01:01:10 +0000
Manifest next update: Tue 05 Aug 2025 01:01:10 +0000
Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: /dcnoxEZJuHLn/VBULsblkeJJPtKerrqT/UOgR/yx68=)
2: sHWJgB25eZ5MsxkzvHCaC9Q9eBU.roa (hash: tfZrpnb6Dc4xLEKe9XCNdEh3R+ehL6A7wZM06Ogyh8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c3:3b:ed:90:5f:cb:56:55:a5:f1:76:84:2a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Validity
Not Before: Aug 4 01:01:10 2025 GMT
Not After : Aug 5 01:01:10 2025 GMT
Subject: CN=8fd4c97359ac5f283803b1b18049f6cc558c175f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:29:31:de:c8:d4:24:0a:2e:9f:4a:45:b0:
6b:48:c8:d4:e8:7f:23:bd:a7:1e:f3:b4:ed:6e:45:
07:03:17:4d:e9:0e:6e:cd:43:15:ec:3b:4e:f9:9c:
38:83:4c:31:45:01:db:34:19:69:b9:70:81:a1:dd:
8b:fb:8d:f4:83:c4:5c:7d:6e:df:0b:3f:07:e8:23:
fe:df:fd:89:8d:0a:3d:37:9c:01:4e:50:2e:6d:59:
9c:ee:a1:9b:31:a7:0d:dd:00:3d:b2:65:d4:27:ed:
de:40:54:a8:50:3e:65:55:7e:ed:7a:08:eb:1c:63:
ca:8e:9e:68:2b:18:4b:04:3c:80:63:d5:fd:1f:ab:
76:9a:a5:cc:bf:0f:61:b2:f6:b9:6a:47:0e:12:27:
62:39:60:a3:03:fb:e0:58:07:00:2f:7c:ac:b8:60:
0f:20:39:ce:dc:1a:cc:42:44:ff:9b:67:86:1a:86:
36:f3:14:1b:3f:bc:24:7b:f8:68:77:18:44:09:f8:
79:33:35:8a:5a:47:e8:05:f8:d0:bb:7b:9b:6a:7f:
77:4b:86:3a:59:88:af:64:d2:4e:72:d2:bb:2c:a9:
80:4d:87:34:c1:6c:ce:ad:63:e0:cb:8d:82:50:2e:
18:6c:a2:bc:41:57:d9:b6:ac:de:c2:61:49:49:5d:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D4:C9:73:59:AC:5F:28:38:03:B1:B1:80:49:F6:CC:55:8C:17:5F
X509v3 Authority Key Identifier:
keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:af:3a:40:60:6c:52:fc:e1:c2:f6:f9:02:50:72:a5:9b:df:
6a:f5:d8:64:15:65:bc:ff:47:07:b1:f2:8b:0e:16:2d:a9:41:
f7:b0:3f:66:76:46:22:1d:f1:a3:08:33:f0:a3:ca:63:c3:89:
17:d3:e8:fc:c0:12:c4:dd:52:2d:2e:1b:fa:86:a8:36:1d:5e:
98:8e:fa:54:01:c4:e9:ea:30:40:f6:05:0f:a7:26:7a:bc:70:
c2:15:5e:32:e7:06:f5:28:85:61:f7:c2:fb:f6:bd:d4:b1:e1:
d2:60:e1:8a:16:01:fb:80:9d:35:65:b8:5d:bf:58:64:db:72:
73:7d:28:15:5e:03:a0:15:b5:dc:62:05:ef:57:87:4d:b3:93:
06:06:39:5b:03:ea:b8:06:4f:b2:19:71:2f:9e:0a:95:43:dc:
aa:f5:8d:9d:03:46:5d:3a:d8:61:6e:1b:46:3d:fb:d5:b5:7d:
aa:bd:bb:60:99:cd:ba:eb:f4:4d:2b:45:1f:19:2f:81:04:73:
1b:ce:29:f9:5b:1a:18:a7:14:fa:2c:12:d9:cf:b8:4b:93:3a:
f9:ed:fb:74:fb:58:11:e8:52:93:ad:71:6e:14:9a:db:d6:7f:
a0:11:3c:b1:a6:50:80:f7:52:94:09:15:fd:19:78:2e:ec:37:
a0:f1:57:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:27 2025 by rpki-client