Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File: Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier: psnFUw2N3kytGBpTsU9CeEZ5xu5R/NY2ouPib6CURag=
Subject key identifier: 32:DE:36:7F:C4:E4:90:49:78:96:F5:3D:ED:8B:44:C7:57:40:E7:BF
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial: 019874BD76C522221A8F2DAD33CC19E8ECF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number: 0ABD
Signing time: Mon 04 Aug 2025 11:00:30 +0000
Manifest this update: Mon 04 Aug 2025 11:00:30 +0000
Manifest next update: Tue 05 Aug 2025 11:00:30 +0000
Files and hashes: 1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: J0+R+2HlLCc5W2LYhhEPhU2aqsuhwotKDb4SjijV2+k=)
2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:76:c5:22:22:1a:8f:2d:ad:33:cc:19:e8:ec:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Validity
Not Before: Aug 4 11:00:30 2025 GMT
Not After : Aug 5 11:00:30 2025 GMT
Subject: CN=32de367fc4e490497896f53ded8b44c75740e7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:1b:78:27:e6:ca:90:63:51:88:56:4c:44:
fa:2c:12:8f:84:53:a4:56:e1:de:7d:9f:a3:cb:67:
b1:9f:f6:6d:be:39:51:84:52:13:8a:a3:db:11:da:
3a:02:a1:fc:bf:31:6d:48:29:e2:69:33:e7:86:e4:
66:b8:45:ba:ab:c2:6c:fe:77:e3:fd:e7:0f:64:da:
15:58:41:84:7b:a8:96:ff:78:d1:2b:bc:3a:20:0e:
11:d8:94:9f:b2:26:59:a8:cd:8c:0f:84:3f:05:a9:
0a:dc:e8:2d:81:e9:d4:8f:8d:cd:0c:0a:d0:d3:22:
40:2f:b5:eb:0b:96:27:26:35:1d:98:07:52:92:3f:
43:04:9e:80:0a:23:08:e4:1c:63:d9:11:c3:68:99:
42:5b:b2:08:96:c8:28:16:1a:96:91:b2:02:cd:af:
d4:5d:3e:80:d6:fd:e1:96:91:f8:86:3b:d7:2e:c0:
d6:96:cc:f6:06:6e:db:a4:e6:bd:ae:82:5d:ec:84:
94:92:9f:80:0d:60:60:88:e4:12:28:d0:ca:2d:cb:
18:a5:be:08:ec:56:ac:fc:95:82:71:da:a6:3e:00:
ee:a5:d6:11:e5:64:5e:42:9a:51:5b:37:db:1c:1c:
d3:c8:4d:cd:a3:d3:39:ed:d9:b0:ed:24:1f:6b:6f:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DE:36:7F:C4:E4:90:49:78:96:F5:3D:ED:8B:44:C7:57:40:E7:BF
X509v3 Authority Key Identifier:
keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:52:bf:6b:f0:bd:a3:09:50:6c:21:33:61:33:16:41:67:cd:
32:4c:20:8b:85:3d:3e:df:d7:ea:12:7b:93:ce:af:40:2e:68:
5d:f1:25:05:47:ef:61:ac:f0:11:0a:7b:ac:6f:99:38:d8:e3:
37:21:03:92:84:66:54:a8:e6:44:1d:58:dc:02:27:5b:4f:be:
ee:63:2b:c2:25:07:57:fa:ec:e8:b6:66:49:c3:b5:7d:ce:f7:
e8:69:a2:d6:b8:99:22:c4:9c:a2:6d:c7:48:74:aa:94:86:4f:
51:42:d0:41:c1:b5:c5:fe:82:19:1b:76:26:9c:82:6c:14:35:
fd:43:cc:66:67:41:09:08:bc:b2:f9:87:3a:c9:01:9d:40:04:
4e:ef:24:19:bd:50:8f:71:5c:f7:1f:8e:d5:5a:66:af:a9:f0:
fa:4f:88:8b:82:8c:df:1c:53:01:99:8d:92:24:dd:72:08:9d:
31:53:61:a0:ce:06:f4:e1:52:4e:b9:b7:9c:48:e5:bd:f0:55:
7d:03:1a:e4:80:96:b5:41:bf:9a:3a:41:90:ea:28:a0:55:5f:
cc:9d:5b:8a:41:66:06:8a:c0:ae:1c:b5:1f:f6:69:46:fc:f8:
68:f6:ef:94:ad:59:67:33:ae:20:5a:e5:9d:06:19:74:3d:cb:
4f:8c:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:57 2025 by rpki-client