Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: xXxP4qs/ugyyjN3WPD5U4BgwUEHTHg+67iTG/9JyBUE=
Subject key identifier: A6:C0:E8:10:99:69:2B:1D:D0:D5:CB:A6:21:EE:F9:5C:9B:C3:CB:4F
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 01987D8B4DD570031BAE29617D1D3A76D58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0C26
Signing time: Wed 06 Aug 2025 04:02:18 +0000
Manifest this update: Wed 06 Aug 2025 04:02:18 +0000
Manifest next update: Thu 07 Aug 2025 04:02:18 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: gofzqwK1KO4GUyrcQ8ePYThGwyJUaufN7aJ04UMAatw=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:4d:d5:70:03:1b:ae:29:61:7d:1d:3a:76:d5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Aug 6 04:02:18 2025 GMT
Not After : Aug 7 04:02:18 2025 GMT
Subject: CN=a6c0e81099692b1dd0d5cba621eef95c9bc3cb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:92:94:08:dc:8e:2f:02:df:cc:29:30:50:
7b:63:35:ce:46:3d:ab:ad:3b:87:1c:64:53:56:c0:
ee:6a:c3:e6:8f:c3:6d:5b:09:d0:3f:96:f6:95:15:
84:c4:70:a2:d2:d2:66:c1:d4:4a:65:6f:ff:19:2e:
31:a7:2f:9b:0c:ca:04:e7:64:4a:25:ab:69:eb:e1:
07:b4:85:aa:96:c9:e7:96:76:1a:d2:85:67:3c:42:
ba:93:a3:86:6d:11:a2:60:37:60:72:9d:8e:47:a9:
d0:31:f5:be:18:e1:7d:cf:9a:5f:9f:4a:c6:0a:fe:
d2:38:71:8e:69:c3:75:e5:23:4f:02:d7:49:7a:6b:
37:f6:4e:05:16:0c:e0:ba:d8:39:5f:73:de:fe:c0:
37:1b:5b:6e:0d:65:51:e1:31:bb:8f:f4:41:f6:6e:
2c:15:81:44:e3:19:be:2b:fa:0d:58:6e:ac:59:2f:
0c:ac:e1:6b:14:97:26:15:bd:01:57:b2:eb:55:6a:
e7:5f:6a:1c:71:43:a5:6d:00:0f:a1:7c:21:0c:03:
f7:34:f2:98:e5:6f:d4:1e:aa:2c:42:53:bd:c8:d8:
5e:56:43:b9:09:84:7f:a5:fa:fc:ad:e7:42:e0:d6:
70:de:bd:e5:20:79:99:15:14:f4:99:dd:88:3f:d4:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C0:E8:10:99:69:2B:1D:D0:D5:CB:A6:21:EE:F9:5C:9B:C3:CB:4F
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:0b:20:b8:2b:df:38:ab:c7:8b:87:5f:51:5e:95:3b:ea:07:
30:4b:b2:c0:03:96:47:43:2c:3b:3d:e8:bb:4c:8b:6a:c5:51:
15:7f:b1:d9:e0:05:10:8e:88:c4:69:8a:82:9a:a0:f1:cb:e9:
05:3a:e9:b0:6f:85:ba:b6:37:ba:e8:30:b1:63:7e:e7:cc:88:
d1:86:f9:99:7f:46:f9:c0:3d:ff:1b:1d:97:ed:2b:f4:5a:75:
00:7e:54:0f:60:be:4d:87:e6:32:22:90:ba:43:e8:04:c4:24:
5b:08:89:65:8c:52:84:ce:3a:31:5f:12:9b:9c:e3:b2:3b:ca:
6a:6a:f1:ba:72:79:0a:ed:3f:26:0f:88:22:72:b3:9e:0e:11:
99:d0:cb:3a:d7:d7:d3:6f:c4:37:ce:e6:60:f8:1c:52:49:f1:
21:e5:ca:69:4c:03:86:75:fc:81:c4:73:d8:6f:b5:a4:2a:35:
5e:cc:d4:b9:76:1a:43:87:ad:c6:a9:69:d3:2b:44:83:bf:5e:
8e:7e:15:d6:9a:7e:d3:87:68:30:90:99:74:78:fc:bb:a8:3b:
33:64:8c:4f:a9:48:b9:40:6b:70:93:d8:e3:b3:00:6e:fa:6b:
e3:51:26:1b:25:e4:78:c7:61:d7:77:b8:f7:2a:7a:bd:5a:d1:
8e:6a:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:19:17 2025 by rpki-client