Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: nI/oIu9qoZdLBpTVror6oxrBkMOT9Gwxxry+c/VQHNA=
Subject key identifier: 5A:9A:85:24:49:85:65:76:A2:AC:21:00:6D:2B:B5:15:2B:D6:2C:7C
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 01989CDEA60857B2BBB3554EEF14D953D8F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 152B
Signing time: Tue 12 Aug 2025 06:01:33 +0000
Manifest this update: Tue 12 Aug 2025 06:01:33 +0000
Manifest next update: Wed 13 Aug 2025 06:01:33 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: 5eIU2fdEraSlnuXpTIYC/vfmQj59TlMHjaUioPgg03c=)
2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:de:a6:08:57:b2:bb:b3:55:4e:ef:14:d9:53:d8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Aug 12 06:01:33 2025 GMT
Not After : Aug 13 06:01:33 2025 GMT
Subject: CN=5a9a852449856576a2ac21006d2bb5152bd62c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:e9:6a:a4:eb:9b:90:6d:01:e1:f1:a4:2e:
ae:2e:64:85:20:da:ef:40:58:b1:df:04:26:c0:c8:
84:3f:79:f6:3a:c8:55:c3:57:0b:39:14:0d:a9:4c:
06:7d:c0:c3:e2:e7:51:7e:97:25:1d:06:83:c9:02:
ec:50:1d:d0:c6:6d:ef:66:63:f5:4d:9f:46:8c:5f:
4a:8e:3a:2e:7c:a7:ac:13:e8:ed:3b:25:be:da:fc:
53:d0:c4:ee:97:49:ec:86:be:75:49:fd:25:b4:04:
79:2c:e8:d9:4a:6d:6a:32:92:4a:3f:1b:63:13:fc:
04:6c:62:39:e6:5e:03:72:73:51:24:3d:fa:24:b1:
13:34:31:78:ac:a1:76:50:8c:e3:15:62:4b:63:13:
ab:a6:be:42:62:f2:47:a5:64:f3:67:ed:09:ed:ea:
a4:d8:b2:df:1c:93:84:9b:85:73:68:27:d7:b5:d6:
a9:fd:06:ec:4c:e8:db:54:e0:85:0f:69:f3:81:45:
99:7d:1a:74:74:73:cf:41:69:7d:cc:a3:34:ee:51:
ae:67:6c:16:69:95:e3:07:62:41:98:07:38:a6:c2:
e1:6a:4c:5d:fe:9b:b2:9f:72:81:03:38:74:a8:e9:
4b:d0:d7:8b:bf:68:3b:ff:98:8a:44:0e:ef:b8:49:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9A:85:24:49:85:65:76:A2:AC:21:00:6D:2B:B5:15:2B:D6:2C:7C
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:76:e9:66:9d:41:de:3f:24:00:2d:e0:b9:8b:fb:cb:cd:4b:
8e:12:ff:d8:c6:b5:9a:be:a8:42:8e:7a:ca:18:3e:dc:fc:80:
10:c9:ac:d6:92:d2:d5:fb:dc:00:a5:11:ff:db:12:60:97:62:
32:b4:45:ee:e5:97:c2:9d:a0:4f:2f:7c:f7:1a:b9:97:e9:a7:
31:0a:a6:52:39:2c:b5:e4:c6:bc:06:c5:1b:36:2b:03:2b:ca:
15:c4:cf:7b:6b:bc:80:79:80:7d:0d:3c:e7:cc:d7:3d:02:2e:
8e:58:f6:07:a5:e7:6a:ea:6d:91:cb:fb:dd:6d:92:34:2e:34:
6e:56:2e:4d:71:d4:70:c9:79:3c:f8:f7:fd:8a:cb:65:b1:5c:
ec:0a:ce:30:57:26:c7:db:18:77:9f:33:37:dc:61:64:88:a9:
a7:47:27:42:79:cb:0c:40:86:4f:98:db:85:be:3b:a2:51:10:
92:79:02:04:22:a7:45:34:76:07:ff:a2:8f:92:f0:0b:e3:f1:
da:83:f4:3b:d8:39:e8:71:5c:69:50:cd:7e:d8:b3:04:26:b3:
8c:60:16:a3:09:bf:44:e0:99:8c:53:6b:01:a6:13:ce:6f:ee:
cf:c3:2a:3c:0c:5b:a9:8c:45:b6:c2:a0:f2:8e:7c:cd:c6:bc:
3a:58:08:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:48:45 2025 by rpki-client