Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: ELHJQLmzB+sc3O4nAJlLFc7+Rt+hCOxU/ZlLlzDDJiI=
Subject key identifier: C3:2D:9D:99:9B:EF:13:66:97:F6:A2:9B:D4:0A:BE:B9:9E:A8:73:3C
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 019874504ACF5C6DFF716B2B266E4449370B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 09:01:15 +0000
Manifest this update: Mon 04 Aug 2025 09:01:15 +0000
Manifest next update: Tue 05 Aug 2025 09:01:15 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: 6XeMd/27dzADURGSwC5YgC6eceNIJZOAaufmgtyQaSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:4a:cf:5c:6d:ff:71:6b:2b:26:6e:44:49:37:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Aug 4 09:01:15 2025 GMT
Not After : Aug 5 09:01:15 2025 GMT
Subject: CN=c32d9d999bef136697f6a29bd40abeb99ea8733c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:20:3d:4a:df:ee:8a:c4:a9:c8:4c:72:5f:
da:e9:04:6d:4c:59:ce:d6:51:26:8d:cc:70:7d:09:
00:fb:a4:45:89:5c:9e:1d:bd:a1:39:59:7b:0d:1e:
0d:40:90:26:93:ae:a3:27:fb:a6:b8:06:e6:ea:ed:
2b:9d:75:2a:90:d0:a5:7c:31:70:c5:50:cb:a1:e3:
d3:3c:82:d1:36:d7:86:48:b2:f5:ff:da:d1:ea:de:
d0:bd:29:7f:7b:1e:c3:ba:cc:4e:fe:a4:d4:57:3c:
4b:93:99:17:48:aa:90:29:f3:30:a7:b8:88:e2:64:
1c:f5:70:19:66:4f:65:d8:34:47:0e:db:6d:64:69:
fd:40:88:5f:55:7d:1a:f9:f2:a3:31:4c:d0:95:0c:
89:ed:ac:01:b2:18:eb:11:87:c3:cb:c4:2c:76:f4:
bd:13:fe:3b:bc:7d:6a:d9:23:be:8e:cd:32:38:31:
2f:b5:80:41:dc:03:8b:a1:db:26:b4:82:f0:a0:49:
06:61:8f:55:48:85:d1:e1:90:4a:b9:52:b3:8b:68:
71:62:e1:ff:af:c3:34:bb:03:d4:a9:90:ee:91:fb:
f2:8a:7b:1d:2d:47:51:bf:5d:05:9a:8b:78:d5:46:
95:64:99:15:dd:bc:61:73:a7:35:e0:2b:df:aa:c7:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2D:9D:99:9B:EF:13:66:97:F6:A2:9B:D4:0A:BE:B9:9E:A8:73:3C
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:61:63:86:fa:76:a1:e2:20:dc:14:50:a8:9a:9d:04:59:0b:
f7:fa:26:a1:cf:1e:62:df:bc:65:c5:26:af:1b:b5:b6:9f:ff:
0c:01:9c:79:ff:57:1d:46:05:86:90:b1:07:2d:3a:fb:3c:79:
de:0f:6a:be:5c:66:26:7e:86:f9:a6:c7:91:c8:47:5c:30:c8:
c1:e1:9a:a7:dd:e2:f6:6d:c0:b2:ba:2c:3a:88:f7:5d:99:f3:
06:a7:be:d8:75:a6:23:7b:32:53:eb:86:e2:05:4a:ce:0f:ee:
cf:d5:79:66:03:ec:08:d2:69:22:43:67:d4:79:c9:d8:ad:47:
17:0e:d2:d1:16:de:59:41:34:e2:e2:f0:f1:cb:ef:b0:92:87:
69:e7:78:02:7b:4b:cf:ea:64:cd:19:b8:b9:ed:a7:72:56:f1:
9b:c3:cf:2a:78:b6:ca:a4:ed:81:db:97:39:f4:3f:19:bc:50:
0d:ea:7f:d0:80:be:5d:6f:e0:87:78:64:e5:cc:88:c5:be:e0:
14:a4:44:ea:af:03:b1:d4:8c:9d:d8:f9:21:7a:24:57:88:74:
af:65:e3:7e:24:e5:ea:5a:d2:c9:f1:b2:d5:49:ef:44:62:5e:
c1:68:62:fe:8e:34:56:ea:27:8e:c2:77:8b:e3:97:f8:06:c7:
ca:55:09:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:51 2025 by rpki-client