Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
File: XO56utwc1TZH4rILdg1aXHqxp8w.mft (raw, json)
Hash identifier: IewztHjY+AEBHAB4y8CaPSFhD3bxoSLDKgANefzn2og=
Subject key identifier: AA:DC:46:11:07:A5:E1:06:70:68:3A:E6:C0:00:DC:96:44:F4:C6:D3
Authority key identifier: 5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
Certificate issuer: /CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Certificate serial: 019891B5C06D4A8AF4570B873B913FFB9F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
Manifest number: 0113
Signing time: Sun 10 Aug 2025 02:01:04 +0000
Manifest this update: Sun 10 Aug 2025 02:01:04 +0000
Manifest next update: Mon 11 Aug 2025 02:01:04 +0000
Files and hashes: 1: XO56utwc1TZH4rILdg1aXHqxp8w.crl (hash: k5GbclS8UzJL+IYCUO15Vbjq9kAhMm/8XIhlO3m6pow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:c0:6d:4a:8a:f4:57:0b:87:3b:91:3f:fb:9f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Validity
Not Before: Aug 10 02:01:04 2025 GMT
Not After : Aug 11 02:01:04 2025 GMT
Subject: CN=aadc461107a5e10670683ae6c000dc9644f4c6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:6b:84:e8:6a:74:52:51:d8:6e:e5:32:20:
40:f5:54:f5:a3:79:69:79:a8:6e:14:b5:e4:46:6b:
5e:53:6c:73:1e:3c:3c:29:fa:88:86:1e:67:67:00:
c3:72:83:ac:a7:03:95:bb:89:7d:d3:6c:f2:be:b3:
f2:3b:32:b5:31:08:00:3f:95:fc:98:15:d9:a7:d1:
c6:1e:8a:75:53:95:ab:e0:44:a9:5a:fe:9b:8a:c8:
14:89:f9:bf:db:be:75:be:ee:43:24:1c:f3:1e:65:
4b:f0:26:8a:40:01:91:b6:73:b5:5c:ec:54:a5:e5:
cc:53:e7:8e:79:05:91:5b:ee:fc:e2:e6:a8:c6:54:
c5:cc:68:bf:eb:0b:2c:8e:71:29:29:25:d5:fd:0f:
b3:8b:48:1e:1b:64:8c:f3:be:44:0d:9a:d1:e7:9d:
5d:f7:cf:09:8c:23:2a:bc:c2:1e:2d:1c:7b:b0:c6:
bf:86:e7:1d:43:7d:10:2a:29:c2:22:e3:b2:e9:3b:
31:7b:b5:4f:2e:83:83:56:a9:15:06:0b:d1:d7:2a:
64:40:2c:44:22:62:df:68:28:05:f5:53:04:d1:da:
f8:18:ca:dc:4f:c1:73:8d:da:12:e2:a3:83:f6:aa:
23:5d:7a:2c:0a:03:0b:bf:41:f7:c6:fc:b0:7e:1b:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DC:46:11:07:A5:E1:06:70:68:3A:E6:C0:00:DC:96:44:F4:C6:D3
X509v3 Authority Key Identifier:
keyid:5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2a:be:6a:5d:ed:24:19:3f:ae:12:b8:f0:38:32:d6:3a:dd:
b4:75:9e:cf:9a:4b:82:d8:9d:e0:fb:67:dd:b4:46:cf:e7:90:
84:25:37:98:ac:8e:37:f2:31:53:68:77:19:21:07:84:18:b5:
df:3b:4e:83:7e:56:09:d7:1c:29:5e:cd:61:31:70:48:40:46:
b6:20:0d:13:26:96:3b:11:27:94:2d:8e:e0:55:b3:b0:f6:1a:
38:7e:37:19:ad:65:3d:ff:fd:d8:58:21:dd:e1:85:57:0d:7e:
fa:77:3c:8e:31:15:15:cc:5c:05:86:5f:00:4e:61:ba:31:60:
7b:fa:21:aa:ff:9a:ba:d7:c0:fe:68:f6:58:02:1e:bf:b6:dd:
69:08:05:6d:f5:87:33:8b:57:cc:a0:d5:f7:6a:b9:23:88:1a:
c9:7f:b5:c8:c0:2f:fd:ab:66:b5:fb:43:20:b8:34:1e:55:2c:
42:6a:a9:0c:f6:da:4f:4d:07:90:e3:11:ae:90:d2:f7:78:74:
d6:18:a2:92:6b:56:73:97:7a:81:d0:c2:00:fa:59:53:e3:8a:
f6:c1:20:2c:4f:fc:4e:3f:2f:2e:15:da:b7:c8:e3:5b:e3:cd:
7a:58:7a:9b:0e:22:02:d3:88:f9:1c:b5:c7:f1:21:78:7d:9b:
43:f2:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:09 2025 by rpki-client