Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
File: XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json)
Hash identifier: vvw56u8ZKA26DZjR8PKtJUE+oWOE8H3Ns+Q7xteS950=
Subject key identifier: 73:06:73:DC:3F:59:36:D5:54:FD:4C:0B:E7:03:73:10:BF:CC:7E:0C
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial: 019882E75EA0CF94A13021E6158D9BE7D61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
Manifest number: 13CA
Signing time: Thu 07 Aug 2025 05:00:57 +0000
Manifest this update: Thu 07 Aug 2025 05:00:57 +0000
Manifest next update: Fri 08 Aug 2025 05:00:57 +0000
Files and hashes: 1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: LKRGfp7icUlO66xMPlb0OOVqRhR0PjUrjgDsw/LLRL8=)
2: rIHO9BGM8FbqBMmG5rRph997QKc.roa (hash: 8yht5PsqRnylMZKjON2/XT2bc+vyA/zY0feaEVSh3nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:5e:a0:cf:94:a1:30:21:e6:15:8d:9b:e7:d6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Validity
Not Before: Aug 7 05:00:57 2025 GMT
Not After : Aug 8 05:00:57 2025 GMT
Subject: CN=730673dc3f5936d554fd4c0be7037310bfcc7e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b5:df:47:30:dd:c1:89:8a:5d:ea:03:d5:53:
0c:b5:89:6f:b9:54:76:8d:ad:41:2e:30:dc:cb:6e:
42:98:d2:55:a6:e5:dd:0c:bd:c0:56:c4:d9:c9:12:
4d:ae:d5:d1:01:16:90:cd:89:fb:c2:5b:21:22:87:
f2:e6:11:a4:a0:68:0d:30:b6:dd:19:4c:fe:87:42:
2c:05:66:bb:63:7d:4f:62:d5:21:2e:5f:29:d9:65:
36:8b:de:df:ef:a9:47:98:04:b7:b2:cf:32:af:13:
df:81:a8:a5:6d:09:94:0f:e2:c4:22:7a:d7:6d:c2:
ae:6b:a0:cb:65:b9:ac:5e:13:91:08:dd:df:05:3f:
8f:32:7d:62:5a:06:e8:0a:08:10:c9:16:de:31:3c:
90:4d:65:88:0c:8e:66:6d:9d:12:56:7a:6f:28:36:
98:ff:a7:bb:7f:37:bb:40:7d:97:13:2b:06:f2:13:
d5:40:9d:20:ad:bd:a7:57:6d:ed:3c:13:32:86:19:
73:e5:8a:a7:08:ac:43:ab:c7:13:ab:12:2e:13:6c:
91:0f:a4:a0:7f:4b:e4:91:ab:d1:14:a5:13:f9:6f:
1b:43:34:a3:13:f4:1b:53:19:67:83:38:17:76:1a:
37:57:db:46:ff:2f:51:2c:7a:af:f9:de:2d:a3:e6:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:06:73:DC:3F:59:36:D5:54:FD:4C:0B:E7:03:73:10:BF:CC:7E:0C
X509v3 Authority Key Identifier:
keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ce:c8:5a:0b:02:34:53:1f:69:ae:dd:55:52:20:68:ab:55:
c8:03:25:5c:c4:b0:be:2d:f1:52:a3:21:e2:a1:5b:d6:3e:57:
19:bb:11:39:48:f1:8d:32:52:84:dc:8a:b7:de:01:d0:d2:2f:
1c:a0:6f:2b:cc:e7:0f:98:e1:8a:86:bb:ce:43:aa:ab:55:11:
f9:46:68:e2:07:7c:a4:31:6d:17:86:95:5e:26:1b:2f:5e:96:
6f:75:88:fa:69:4f:7b:88:69:63:1c:cc:14:f3:2d:1b:df:63:
4b:54:ee:14:1e:2a:99:17:56:e3:d6:f4:67:01:a7:e2:a7:f0:
65:32:8c:de:f2:c5:3b:09:4e:64:a7:06:74:e1:96:c4:30:0c:
aa:a6:bb:74:35:46:f9:1e:53:5b:a2:ca:1b:f3:3f:7b:2c:aa:
9f:93:a7:fc:68:b1:91:fc:e4:22:57:17:7a:df:bd:7d:4c:c8:
d8:da:6f:1e:8a:83:c7:3d:fa:50:26:d4:7c:f5:be:17:2a:ef:
27:ec:84:11:72:46:2e:66:56:a5:5f:5b:15:22:05:2e:2b:20:
ed:2c:0c:d7:93:df:04:a8:5b:d4:92:c5:35:43:28:4d:8a:fd:
f4:2c:a8:2c:23:7d:92:66:bc:c8:0c:31:e7:6c:d0:7d:02:57:
6d:97:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:57:06 2025 by rpki-client