Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
File: XKiGCq68SoHT0ibUI4c-M8OICqo.mft (raw, json)
Hash identifier: pgh7HWpe0c4YrdCmedYTDM63Xa9Lk9wRjRkF4bgWVZ4=
Subject key identifier: FC:92:97:2B:A4:EE:E4:11:03:18:AE:CE:67:53:7D:E4:3A:5A:1A:FF
Authority key identifier: 5C:A8:86:0A:AE:BC:4A:81:D3:D2:26:D4:23:87:3E:33:C3:88:0A:AA
Certificate issuer: /CN=5ca8860aaebc4a81d3d226d423873e33c3880aaa
Certificate serial: 0197696145B991C077249A851EF5BC142445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
Manifest number: 0A05
Signing time: Fri 13 Jun 2025 13:01:11 +0000
Manifest this update: Fri 13 Jun 2025 13:01:11 +0000
Manifest next update: Sat 14 Jun 2025 13:01:11 +0000
Files and hashes: 1: XKiGCq68SoHT0ibUI4c-M8OICqo.crl (hash: WWIXRHBF//EiXcKFUyLCS8S+jJZk6QSwYVz8KNTPrcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:45:b9:91:c0:77:24:9a:85:1e:f5:bc:14:24:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca8860aaebc4a81d3d226d423873e33c3880aaa
Validity
Not Before: Jun 13 13:01:11 2025 GMT
Not After : Jun 14 13:01:11 2025 GMT
Subject: CN=fc92972ba4eee4110318aece67537de43a5a1aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:c0:ba:4d:ce:e1:03:37:c5:9f:39:fe:be:
0e:22:e7:07:5a:d5:be:1b:d3:60:61:d3:3c:1c:1b:
f2:e9:a3:f4:8f:73:51:e9:44:77:55:ff:10:be:e9:
3e:1b:1a:94:d7:24:58:cb:e1:e7:6c:b4:c6:39:08:
27:02:65:3f:76:8c:55:5e:62:4b:7a:fc:5f:37:4a:
6f:d7:1f:5a:dd:d1:4a:20:ca:82:85:8c:9b:6e:e1:
fa:40:35:99:d7:08:2d:f9:62:de:fc:87:87:34:22:
77:e6:69:a2:e9:a8:55:95:05:5a:04:7a:57:27:b6:
bd:6f:76:fb:fb:1d:1b:b6:26:88:1d:80:ae:72:98:
9b:ac:d2:88:c6:81:cb:b9:04:7b:9a:47:bd:a6:83:
79:44:54:de:fc:54:2f:8b:52:b8:fa:e3:a0:ee:e7:
29:e5:ee:89:e8:75:e7:12:81:e5:15:41:a1:7a:66:
fd:31:cf:d3:7a:cf:29:4e:b5:41:1c:46:6e:29:e1:
54:ef:e7:36:8c:64:79:f9:88:15:bb:2a:5a:66:58:
b3:78:64:19:be:1f:59:1d:7d:c8:81:11:09:ad:c1:
2b:5c:54:95:c5:07:81:2b:16:e0:d2:4a:6a:6b:23:
08:4b:3c:90:17:81:e6:a4:c5:36:a1:55:80:b2:b8:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:92:97:2B:A4:EE:E4:11:03:18:AE:CE:67:53:7D:E4:3A:5A:1A:FF
X509v3 Authority Key Identifier:
keyid:5C:A8:86:0A:AE:BC:4A:81:D3:D2:26:D4:23:87:3E:33:C3:88:0A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:82:f2:83:8e:12:c6:c9:3f:ef:ed:90:f9:8a:7c:65:42:c6:
6d:ba:b3:cd:75:05:6b:29:2d:44:45:8e:a3:9c:19:11:8f:da:
7e:fa:5d:00:37:09:6b:34:94:66:f9:68:f8:cd:a7:97:ce:9f:
bc:d2:68:fd:b6:b2:d2:de:10:95:8c:91:25:b3:9b:e6:21:f8:
63:f5:e5:67:53:41:5d:d4:3b:d2:88:61:79:36:19:f3:37:05:
d7:ec:60:5c:d1:f0:7a:77:dc:4a:6d:44:af:4c:14:9a:d1:3a:
75:70:42:04:24:6e:12:6e:b6:ae:15:b7:24:41:83:3d:08:6b:
fd:09:8d:6b:51:b6:3d:70:0f:2c:6c:f9:dc:c1:3a:43:cb:0e:
43:b2:a4:0b:a5:23:d9:d3:6c:c1:a5:f6:10:90:35:93:63:2d:
9f:ee:3f:14:73:27:ce:f1:42:04:54:ab:7d:6c:c2:e5:10:76:
c1:df:71:df:8d:0c:60:fe:91:ff:65:dd:d7:c3:1e:bd:dc:76:
29:54:b8:a0:34:13:67:32:fa:8a:48:9e:3e:cf:a1:07:cc:4e:
74:1d:09:f1:98:e6:1e:fe:43:4e:47:1b:b1:c5:89:07:31:aa:
94:96:a8:0f:d5:72:5d:44:fc:7d:45:d0:8e:1f:51:b0:1c:b3:
12:56:e9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:06 2025 by rpki-client