
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json)
Hash identifier: 75QeHNYzRl8lvsF1gAezCUQmEeGjw2FqFMz4O6G6N/M=
Subject key identifier: 59:40:DA:96:91:8B:A2:03:43:1A:83:08:EE:0E:58:03:07:63:ED:C8
Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac
Certificate serial: 01987CAE8A0FFCE87A96A917666DB2275FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
Manifest number: 045E
Signing time: Wed 06 Aug 2025 00:01:09 +0000
Manifest this update: Wed 06 Aug 2025 00:01:09 +0000
Manifest next update: Thu 07 Aug 2025 00:01:09 +0000
Files and hashes: 1: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: wAFOfz+FEFhtuVec3WwrYeTwkiJb+ylZdGUX5e5nU1A=)
2: c_JE84x-V2cV3KZFySyzgUu68wY.roa (hash: mJ5axd73qhrQA8e697fkmyMkcOmN3YmgqnGx7qbzQIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:8a:0f:fc:e8:7a:96:a9:17:66:6d:b2:27:5f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac
Validity
Not Before: Aug 6 00:01:09 2025 GMT
Not After : Aug 7 00:01:09 2025 GMT
Subject: CN=5940da96918ba203431a8308ee0e58030763edc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:c0:e0:b3:1a:0b:0d:69:be:3e:dc:f2:fb:
c5:27:fa:e8:e5:41:69:9d:08:39:bc:d3:9a:8c:fb:
dd:90:7c:bf:7f:62:64:8b:c2:2b:99:65:28:c1:d7:
42:39:31:b8:68:97:d8:9b:da:8b:6d:e8:f2:4e:02:
0b:9b:15:1f:45:03:83:f2:2c:a7:f4:a2:12:e9:8b:
da:30:45:3c:a9:cd:b9:27:00:27:14:25:b9:8d:0b:
77:7d:1f:30:15:ec:f2:8a:00:e8:ab:27:25:2a:b8:
49:bd:67:70:f1:78:4a:4c:e0:37:44:0d:81:35:b1:
17:d1:1e:2e:f8:4d:60:17:9e:80:af:d3:30:c8:82:
07:5f:d1:d6:10:a9:a5:3f:de:be:97:ea:eb:75:61:
50:9e:bf:c5:85:34:f0:47:18:c4:4c:e1:9b:af:97:
46:38:ba:4a:fb:ae:c8:62:9f:07:f1:5c:20:9f:e0:
42:a0:ba:6f:1f:e5:ae:85:77:a3:96:8b:e9:0f:95:
6c:4d:58:d0:25:8c:98:d0:52:02:36:a5:1f:da:20:
48:2f:43:ca:43:98:e0:3a:06:a6:99:15:41:ae:ec:
4d:bc:04:8d:36:98:55:bd:e8:2c:e1:87:5b:68:73:
35:8c:37:a8:b2:c9:b1:c7:eb:91:6c:e6:5c:a2:fb:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:DA:96:91:8B:A2:03:43:1A:83:08:EE:0E:58:03:07:63:ED:C8
X509v3 Authority Key Identifier:
keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:dd:3e:0b:c4:cd:84:8d:77:63:83:af:95:c2:6f:72:4c:16:
26:52:2a:22:d2:11:30:73:24:8b:e0:c7:07:ab:2c:d7:93:e4:
4f:bd:82:16:b6:43:7e:c8:f2:d9:86:7c:58:64:e7:13:70:c6:
94:59:2a:7d:3b:79:11:a2:a3:85:27:9e:d5:67:38:53:5a:83:
d3:17:e4:53:12:7b:0c:40:c4:a6:2c:df:0f:4f:e3:3f:25:94:
d8:54:11:7d:3d:df:9b:3b:68:b5:88:0f:50:c9:1d:83:b7:5c:
ab:d5:cb:2d:5b:2e:37:78:0e:5d:07:a3:81:62:5d:21:70:82:
a2:c9:db:27:ec:e0:0d:13:65:a6:66:0d:35:14:ac:2f:d4:ec:
c6:2c:fd:3e:46:0a:a8:50:bf:1c:d0:8f:d9:b4:ff:69:51:b6:
c5:3c:8d:99:45:78:a9:56:63:14:66:43:b6:97:71:d4:fd:7b:
24:2e:28:f3:9b:45:dc:49:6b:bc:18:92:e0:72:d9:9e:d2:cd:
b2:c3:16:09:79:ce:50:2d:e6:66:02:e9:83:51:78:fa:59:c4:
f8:45:25:3e:3a:ac:68:94:b5:e1:f0:7b:02:a0:b7:96:12:51:
bd:60:5a:97:62:50:78:4e:43:bd:0a:ef:e1:31:6a:41:61:b2:
2b:e8:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:57 2025 by rpki-client