Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: bRf7O2ZZV9XnJA3e3lYuTtvEG6M8lb5tyBjW06/D9os=
Subject key identifier: A3:45:03:FB:A3:53:0F:4C:F5:DC:7D:28:A5:4B:8D:57:E5:87:CC:E4
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 019892C87EBA8D4C94B018D4BE637BB7808F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 1193
Signing time: Sun 10 Aug 2025 07:01:09 +0000
Manifest this update: Sun 10 Aug 2025 07:01:09 +0000
Manifest next update: Mon 11 Aug 2025 07:01:09 +0000
Files and hashes: 1: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: UAwRECBWT5TY0gXjkG4qEjhHwI35kpBaSGCYtr4NtvU=)
2: kzlWeerWBpLQJUvq-zvqgpRgYGk.roa (hash: nVND6/0jbck+9wjQsXvYtJIdnT8gV1/CUuZluisEp4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:7e:ba:8d:4c:94:b0:18:d4:be:63:7b:b7:80:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Aug 10 07:01:09 2025 GMT
Not After : Aug 11 07:01:09 2025 GMT
Subject: CN=a34503fba3530f4cf5dc7d28a54b8d57e587cce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:21:01:59:99:c8:ad:7b:57:3c:4a:c5:81:
09:e6:e6:98:60:be:5b:6b:16:13:c0:fe:8f:88:da:
eb:30:34:16:49:97:19:be:a0:03:d2:30:3b:f9:55:
b5:2c:e9:a9:46:39:39:ac:df:50:22:04:18:c8:eb:
e1:55:68:91:b7:9f:68:46:61:86:80:d1:74:7c:60:
39:9c:55:5d:f8:e3:c3:ee:2a:ea:e9:58:31:7c:f4:
9b:bd:6b:d9:db:78:2b:1f:14:1d:c7:3f:d2:f6:75:
f2:bd:c5:2a:f6:08:54:ab:b1:9f:47:5f:a9:34:9a:
99:6e:9a:28:6e:38:49:ee:32:d1:78:68:82:79:6e:
9e:a3:70:b6:ac:0a:dc:79:1b:34:ce:4c:83:de:a9:
c7:e9:82:26:01:e1:5d:91:d7:94:85:88:7d:45:e5:
71:9b:51:b9:d9:42:83:f1:36:1e:11:6f:0f:b4:44:
74:0e:05:c0:15:04:98:3a:f1:63:86:ec:8d:4f:e4:
a8:83:6a:c9:09:81:11:c5:4d:ea:c2:dd:c6:5d:d0:
4a:af:6e:f0:f1:e8:95:e8:8f:4d:34:f8:ef:e4:25:
ba:96:a4:88:37:0a:f4:05:8a:65:15:b2:16:8b:0a:
f9:c2:b1:14:03:d3:40:9c:44:a8:00:cc:13:16:ea:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:45:03:FB:A3:53:0F:4C:F5:DC:7D:28:A5:4B:8D:57:E5:87:CC:E4
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e9:db:71:94:f1:36:8c:7c:c7:46:1e:bf:9c:8b:e3:d9:31:
a4:cb:fb:4b:7d:39:08:4a:d7:fe:31:36:70:99:16:bc:f0:af:
d4:c0:b3:6e:84:ad:08:78:70:56:67:60:e1:1a:37:58:31:aa:
d8:9a:af:37:b9:7a:73:2f:b5:ba:4c:44:a1:ed:33:04:8c:70:
33:5d:4c:c7:fa:67:a6:0a:b2:18:64:2a:ff:6f:fa:ef:b9:c9:
68:a2:83:8f:e2:0f:69:12:c1:34:27:1a:c2:e0:fc:3e:58:22:
f1:71:8b:63:f8:dd:d5:22:78:20:ac:3e:a7:de:b5:f5:0c:57:
8f:b8:a7:c3:21:cd:d8:29:57:49:fa:f6:3e:25:a6:88:bf:8d:
18:c3:50:a1:90:d9:88:7e:05:7c:65:0a:e5:2c:f4:d1:c1:c9:
de:b2:8d:c1:59:b3:ca:d5:b3:2d:77:ee:6d:74:28:79:9c:29:
a5:43:d6:83:64:74:0a:3d:17:a8:f6:6f:48:24:b1:c9:bd:82:
a7:a8:28:e9:70:28:d6:f2:b6:98:47:4f:5a:f0:cb:89:d3:ec:
8f:97:41:70:a0:ca:fa:83:9e:5c:0e:fc:3b:68:1c:65:4d:b4:
96:39:82:8b:50:e9:f2:01:e6:c0:9d:44:f1:e4:ad:57:10:3b:
3c:90:29:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:41 2025 by rpki-client