Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: uaCv0pc3ZPvc3fcO7C8B0pxHfvOgzsNMBHmMq+OMorE=
Subject key identifier: CB:79:30:9E:05:5B:0C:29:3E:F5:11:0A:00:28:EB:8A:CD:C0:F3:0E
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 01976F9A2916FB9EBEE0B53B969F51E053C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 18:01:03 +0000
Manifest this update: Sat 14 Jun 2025 18:01:03 +0000
Manifest next update: Sun 15 Jun 2025 18:01:03 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: nabNhunhsDsGmCz1fSurtfgZuugU4+XD4pINrHPgVak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:29:16:fb:9e:be:e0:b5:3b:96:9f:51:e0:53:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Jun 14 18:01:03 2025 GMT
Not After : Jun 15 18:01:03 2025 GMT
Subject: CN=cb79309e055b0c293ef5110a0028eb8acdc0f30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:86:c5:c7:12:86:21:f8:8e:c2:55:52:f3:
b8:2a:02:cf:74:45:6d:da:b7:d1:52:05:da:bf:05:
a8:fc:3d:77:96:89:8a:03:04:d0:dd:61:ba:3a:b6:
c5:f1:6b:9b:c4:0d:c8:f5:d2:8a:67:08:8c:7f:5e:
ac:a4:41:2f:c7:89:40:df:71:66:33:94:77:e6:92:
5f:76:68:e4:64:f6:9c:18:70:dc:51:07:d2:c3:b4:
ad:10:50:2d:ba:cc:b7:e8:2d:68:3d:8d:a6:92:bb:
54:c7:b1:c5:56:15:12:d8:a8:86:ad:c6:07:6b:a0:
9b:79:fb:77:b7:8d:5d:89:1b:5d:77:a4:30:6e:3e:
a0:e0:9e:f7:a2:f2:86:e9:c2:b7:ad:46:dc:de:e8:
14:e8:f0:49:a1:1c:98:a8:45:df:52:68:8b:93:e2:
87:77:b4:a6:8b:d3:77:3c:ee:af:af:6c:a4:b9:67:
8c:69:43:d3:1d:e5:33:60:ee:46:c5:be:b5:aa:9e:
68:5b:e4:10:cd:a3:23:30:2f:a3:81:7b:9b:3c:37:
e8:ed:8d:92:4a:ab:c4:08:0e:6d:63:c7:c2:66:22:
26:cf:93:cc:aa:27:87:db:66:3e:f2:e0:1e:1b:29:
13:e8:71:f8:77:00:96:f3:1a:a5:85:70:67:e5:bf:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:79:30:9E:05:5B:0C:29:3E:F5:11:0A:00:28:EB:8A:CD:C0:F3:0E
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1b:25:b4:56:32:c1:d2:77:e4:4b:10:29:92:d9:9f:ca:11:
bf:e7:26:41:12:2c:6a:36:f1:11:15:b4:96:07:9c:ad:95:b6:
83:3f:e7:6e:72:01:f8:74:3d:b2:2f:4a:94:b2:a6:d8:17:ae:
44:c4:73:a9:0a:3d:cf:66:0f:1e:13:b2:bb:f8:fb:78:a6:85:
fb:f9:d6:36:c3:98:d9:8f:ac:50:d5:8c:23:8f:85:f2:61:8f:
1a:b3:f4:8f:68:6c:3f:28:ee:8e:4c:63:9a:37:18:da:d9:69:
26:7b:27:c6:18:2b:8c:21:4f:9b:a6:7e:3c:75:6f:18:8d:6b:
6f:59:08:60:ec:3d:98:7d:47:c3:f8:34:0e:48:0b:31:8b:f2:
75:38:44:b5:34:c7:5f:8c:2d:15:b3:65:1b:c1:42:ca:d5:d6:
62:2c:db:ab:81:1d:a4:08:47:9b:9a:94:7b:69:54:60:d1:d1:
e8:47:d3:51:07:31:d7:8f:d9:0c:c2:7e:d2:29:7e:7c:73:de:
46:72:e1:1a:e7:c1:34:64:4d:6f:d9:a3:27:c5:0e:e8:cd:1c:
18:bd:d1:89:cb:f6:63:20:a6:f9:57:a7:a0:0e:f9:c5:e6:38:
b8:26:ce:df:29:03:88:1b:ba:95:08:9b:8d:73:db:14:02:d2:
13:5d:d1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:17 2025 by rpki-client