Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
File: XVTR8F5RVk-oGdtyu47dOYeza74.mft (raw, json)
Hash identifier: d48upOoimNtFYK8bQ1E21vELfuF65UbWI1fTDUDr41g=
Subject key identifier: 37:5B:7E:55:9B:BC:32:3D:4E:1E:C2:9B:EA:32:9C:E9:D1:E0:D6:6E
Authority key identifier: 5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
Certificate issuer: /CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Certificate serial: 01988054D84166B98B0FF8B0D1F3A1619D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
Manifest number: 159D
Signing time: Wed 06 Aug 2025 17:01:40 +0000
Manifest this update: Wed 06 Aug 2025 17:01:40 +0000
Manifest next update: Thu 07 Aug 2025 17:01:40 +0000
Files and hashes: 1: XVTR8F5RVk-oGdtyu47dOYeza74.crl (hash: DYgxTgFv7l3eM2mcrCoD0IKW7ZhIknqL7IUDZfSqSjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:d8:41:66:b9:8b:0f:f8:b0:d1:f3:a1:61:9d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Validity
Not Before: Aug 6 17:01:40 2025 GMT
Not After : Aug 7 17:01:40 2025 GMT
Subject: CN=375b7e559bbc323d4e1ec29bea329ce9d1e0d66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:12:a7:fb:a4:15:15:ed:73:53:45:6a:2a:
f1:55:a9:67:ba:e7:06:f0:0c:51:1e:6d:fd:1c:20:
c2:43:fb:8a:03:8e:d8:5c:b4:a4:d6:76:68:e2:b2:
68:c9:ee:dc:e4:c1:3d:34:a3:be:4b:91:dc:4f:66:
77:39:77:0a:9b:61:d4:50:3c:52:06:92:b9:b4:39:
12:b0:e4:3e:bb:8f:cb:9f:bd:75:b8:82:ee:85:f7:
24:ef:27:98:95:d4:f9:de:5c:41:cd:78:c1:bf:03:
db:eb:bd:42:3a:f7:3f:7a:8d:65:9f:bd:e3:8f:82:
45:ad:d0:b1:97:3d:08:bb:f0:c3:3a:73:58:e5:07:
6b:0d:8f:dd:4c:4b:92:63:42:fe:42:35:0d:af:7f:
ad:7c:86:f0:bd:5d:dd:bf:5f:21:86:a0:45:78:93:
e4:d9:1c:99:3a:03:0e:6b:79:f3:91:62:27:e5:30:
43:dd:82:d0:54:95:c2:47:4f:1f:3e:9a:93:f7:99:
b5:5a:7c:bb:e6:22:02:ee:c4:78:7d:0b:50:fe:a5:
26:8f:71:a6:64:a2:98:a2:0f:e5:ab:75:be:a3:0f:
a0:5d:df:40:b3:04:40:a5:85:b0:b6:bb:e2:3a:67:
eb:5e:55:6c:da:a2:5e:1a:fd:03:b0:74:82:18:14:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5B:7E:55:9B:BC:32:3D:4E:1E:C2:9B:EA:32:9C:E9:D1:E0:D6:6E
X509v3 Authority Key Identifier:
keyid:5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:70:fb:62:0d:16:5d:5f:e8:89:6f:ee:9a:bd:cc:4c:05:44:
95:40:6c:0a:89:7e:ea:6b:af:ab:48:5b:6b:dd:ee:09:65:14:
fb:3a:cf:cd:28:80:83:a5:0c:b7:2a:e6:17:77:ed:58:2c:6f:
16:a3:58:55:f9:24:fc:c5:a5:5d:d9:c1:8d:08:22:6f:3f:a6:
94:73:b0:e3:47:03:44:fe:27:ca:b3:cc:3f:64:8f:04:97:80:
77:0c:13:14:ed:a9:2f:8f:f0:ec:e8:46:5d:d0:fd:eb:bd:56:
3a:6a:c4:11:10:c0:7c:b2:21:df:78:f4:8e:0d:97:e5:f6:11:
eb:66:89:e3:af:9e:ef:da:ce:29:e9:6e:e8:d3:75:9c:50:85:
85:15:8c:59:c8:04:35:e7:50:36:f8:ab:bb:3b:72:34:3b:fc:
c8:64:90:72:5c:df:56:0d:4a:fd:a3:f5:7f:71:e3:98:00:a2:
c2:b1:fd:4f:4d:9f:70:7a:1c:3b:c7:b0:8b:20:e2:19:70:4b:
80:20:78:ab:58:dd:9a:9b:84:c4:b4:df:24:d9:4d:a5:e5:06:
85:14:2b:28:94:ae:9b:43:0f:05:4e:de:d7:5a:87:11:1b:5e:
20:15:38:66:4d:82:f9:da:a9:b3:bb:7c:8e:29:d6:6a:94:7f:
f6:ae:bc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:57 2025 by rpki-client