Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
File: XKiGCq68SoHT0ibUI4c-M8OICqo.mft (raw, json)
Hash identifier: EPAA4yPJQcn1Evj3gosp8Cfq3FIgFFY+dXQF9gJLUyw=
Subject key identifier: B4:5F:01:A2:FB:F9:AE:0C:92:04:19:E8:FC:83:98:FC:A0:1F:01:54
Authority key identifier: 5C:A8:86:0A:AE:BC:4A:81:D3:D2:26:D4:23:87:3E:33:C3:88:0A:AA
Certificate issuer: /CN=5ca8860aaebc4a81d3d226d423873e33c3880aaa
Certificate serial: 019873E360A768B1BAA66DDC975B7B0C4758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
Manifest number: 0A8F
Signing time: Mon 04 Aug 2025 07:02:17 +0000
Manifest this update: Mon 04 Aug 2025 07:02:17 +0000
Manifest next update: Tue 05 Aug 2025 07:02:17 +0000
Files and hashes: 1: XKiGCq68SoHT0ibUI4c-M8OICqo.crl (hash: z8vfmOmptw1uxPLhIaqRfblTQuFt6spGgtMv7OhC1/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:60:a7:68:b1:ba:a6:6d:dc:97:5b:7b:0c:47:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca8860aaebc4a81d3d226d423873e33c3880aaa
Validity
Not Before: Aug 4 07:02:17 2025 GMT
Not After : Aug 5 07:02:17 2025 GMT
Subject: CN=b45f01a2fbf9ae0c920419e8fc8398fca01f0154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:c0:3b:52:4b:21:98:80:4b:fc:57:c7:2d:
0f:7c:12:35:4e:9c:d1:7c:89:8a:3a:5f:60:f5:d1:
e3:04:e7:4c:2a:5b:e1:82:8e:d9:63:99:a5:9f:74:
dd:de:dc:c6:50:a6:74:0a:64:0d:15:3d:c7:1a:4d:
25:aa:f0:cd:41:95:55:45:4d:aa:ff:44:34:b6:ee:
fb:28:3d:1f:1e:53:21:30:05:06:bb:a6:66:5f:f4:
36:d9:26:e7:a4:c8:a4:a7:58:1c:d2:e1:4e:5f:b8:
86:e0:c6:e1:86:78:8d:07:cd:9e:de:c2:37:9e:bd:
9b:f6:d8:33:d6:7a:30:88:73:54:e5:13:1e:d0:e3:
cd:5e:00:e0:f1:80:57:3e:fc:7d:c8:01:1c:db:c7:
33:94:ba:d6:1e:be:4f:1b:91:99:24:be:84:9b:3c:
81:b1:56:b1:17:36:9c:53:f2:ea:e5:36:2b:40:c8:
be:a5:0d:b2:cc:19:fa:d0:8c:11:d1:4a:31:db:c0:
d1:d5:fe:be:5a:b1:5d:a2:aa:03:94:cd:e3:af:76:
22:24:b8:20:44:91:4e:e0:09:59:55:65:08:c7:ae:
a4:42:01:15:2b:f6:c0:ac:4b:ea:1e:84:3e:a0:a1:
4b:f1:98:9d:4d:26:b3:66:6c:3a:0b:cb:7f:c3:ed:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5F:01:A2:FB:F9:AE:0C:92:04:19:E8:FC:83:98:FC:A0:1F:01:54
X509v3 Authority Key Identifier:
keyid:5C:A8:86:0A:AE:BC:4A:81:D3:D2:26:D4:23:87:3E:33:C3:88:0A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:07:b6:67:6b:5a:77:7f:54:55:e9:bb:c4:d7:67:a9:64:6d:
6c:78:fc:0d:d2:48:27:6b:77:56:c0:2e:69:97:de:46:ba:21:
e8:fd:db:a9:a2:98:08:a4:e3:d9:89:17:3b:c6:5c:54:a3:34:
66:b8:82:8d:3c:72:c5:3f:8f:08:ae:30:9e:fe:e1:e7:41:a7:
e7:30:3d:25:a1:c7:a8:da:cc:ce:47:bd:09:f2:89:a6:ec:86:
3c:83:5d:4b:e0:aa:f0:dd:9c:56:20:2f:89:9b:82:bc:c9:d6:
2a:1b:14:07:1a:5e:d2:81:9c:d6:e1:93:1d:3d:df:7c:e8:42:
f9:17:c6:b3:36:53:05:a0:34:08:0c:d9:d0:1e:6f:c8:bc:f9:
bf:a1:86:b6:b6:86:5c:c8:c3:f2:b6:62:6a:76:08:2f:29:d7:
81:87:ae:85:8e:10:dd:64:d1:67:ce:ff:1e:26:12:92:6e:25:
19:ef:b8:56:40:79:7d:76:78:36:d5:e7:79:dc:1a:22:f8:6f:
f6:65:c8:12:f2:ef:9c:84:97:3c:bd:61:7d:34:e3:1d:d9:91:
3d:dc:a1:17:02:c9:44:d3:c3:87:fb:b9:01:76:d5:06:b4:9d:
3e:cc:27:5d:6e:26:55:b2:ac:13:bf:cf:09:12:78:b4:55:06:
8f:38:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:16 2025 by rpki-client