Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
File: XeYTaCVSAQKY86aUoA18WQYGC5U.mft (raw, json)
Hash identifier: kuwxUh9zmMyiVFLhMn3hF4lK20UZxf50ab2ZJeHnk4M=
Subject key identifier: 26:00:8B:B9:CC:13:A1:6E:D5:53:73:EF:3C:84:DE:9D:C6:42:AE:D8
Authority key identifier: 5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
Certificate issuer: /CN=5de613682552010298f3a694a00d7c5906060b95
Certificate serial: 01988DA22DF7401033DEAD91E52C7ED5D7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 07:01:12 +0000
Manifest this update: Sat 09 Aug 2025 07:01:12 +0000
Manifest next update: Sun 10 Aug 2025 07:01:12 +0000
Files and hashes: 1: XeYTaCVSAQKY86aUoA18WQYGC5U.crl (hash: O8ORNH9a3yo7J0ie7EgzlxXLu/tFcdjmym407FG2X0I=)
2: auYlcZnEp-yqavQsok9_TPLHAq0.roa (hash: kbe3quRrlIxTjuDhfKrAisNkV8HOTBuxWR/raJshlU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:2d:f7:40:10:33:de:ad:91:e5:2c:7e:d5:d7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de613682552010298f3a694a00d7c5906060b95
Validity
Not Before: Aug 9 07:01:12 2025 GMT
Not After : Aug 10 07:01:12 2025 GMT
Subject: CN=26008bb9cc13a16ed55373ef3c84de9dc642aed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:74:f6:86:f6:fd:94:b5:d2:f2:a5:06:3b:
b7:15:4a:6a:7d:ab:00:2a:c2:64:0f:cd:13:b4:8b:
69:df:99:78:be:46:84:dd:dc:68:95:e5:c6:40:56:
3d:26:36:4e:88:d9:82:3a:c1:cb:30:5a:17:69:d0:
a4:35:77:5d:1b:b5:38:65:ef:c3:23:d3:e4:8c:58:
a5:08:ed:ac:e4:43:0c:2c:21:a3:3a:ea:ab:2f:4b:
19:cf:f1:b4:dd:67:c9:a1:58:be:97:1d:f4:e9:87:
f8:27:42:be:f7:11:79:f0:35:fb:4d:66:92:f6:b1:
26:9f:6a:b0:b8:87:5c:b3:ee:01:2f:eb:25:46:5a:
71:ae:05:94:4f:75:7c:87:52:b1:50:34:73:c5:00:
e3:ec:d3:fc:0c:c6:ed:56:39:55:48:ee:ad:65:93:
99:df:1c:b2:bc:72:5d:0b:56:91:32:93:d3:2e:1c:
40:2f:39:6e:7d:c3:fa:5e:21:2c:20:5a:ae:1a:70:
4a:b5:ab:7f:d5:f0:77:f0:83:e9:73:4b:94:8d:83:
7b:4e:8b:4c:52:a3:7f:3e:0c:70:1f:a7:62:88:5f:
34:26:71:4f:f9:a7:84:90:cf:96:26:43:f0:d4:79:
1b:ed:63:ab:ed:46:52:7e:7a:35:60:86:76:17:ba:
66:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:00:8B:B9:CC:13:A1:6E:D5:53:73:EF:3C:84:DE:9D:C6:42:AE:D8
X509v3 Authority Key Identifier:
keyid:5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ef:b5:47:4a:0b:63:c2:5f:2e:d7:17:3b:c0:fe:6d:38:f8:
ae:10:72:4e:5f:4b:85:94:55:9c:db:75:56:05:55:cd:58:7d:
2b:e8:6e:02:a1:23:cb:75:97:5d:66:da:07:19:50:34:e2:91:
a1:12:30:6c:42:26:90:73:0c:dd:80:6b:62:f6:5e:f7:54:61:
33:11:25:4d:9b:6e:72:f1:e5:8a:ba:cd:2e:df:05:cc:72:b5:
1b:fa:d5:46:ce:79:84:8d:20:20:00:5d:86:ac:0a:ec:3d:39:
9c:2f:b6:16:f9:33:3d:29:16:14:df:35:f5:0a:05:4c:87:60:
5b:ab:f2:88:57:db:6c:d8:fd:e6:3d:94:23:9c:63:b9:db:57:
c9:40:db:83:8b:91:99:2d:85:f2:2c:2c:b7:9a:56:a1:f0:58:
de:eb:35:8f:d1:9a:53:22:fb:13:68:c7:98:87:f3:83:63:ea:
01:4d:a3:22:d1:7a:09:89:03:65:48:f7:00:50:35:4e:93:03:
a4:f1:36:f9:68:19:d3:7f:fd:a5:03:c6:45:2b:51:1c:b5:13:
bf:ce:50:c6:43:f0:cf:7d:be:6d:47:e2:58:a5:bb:9f:05:07:
46:fc:6f:39:21:ef:4b:2b:53:54:fb:ef:c6:4c:73:21:2f:d9:
e5:89:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:54 2025 by rpki-client