Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: IWmT3GuE6v56ghrnfaWp1zJBDTJXuvwaNvV7qt+l1iA=
Subject key identifier: 2A:E5:57:0B:75:73:EA:F0:87:CC:36:64:EC:02:C8:DE:27:4E:19:1C
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 019882B116D452BF868FAAF45FB4621C02C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 150E
Signing time: Thu 07 Aug 2025 04:01:40 +0000
Manifest this update: Thu 07 Aug 2025 04:01:40 +0000
Manifest next update: Fri 08 Aug 2025 04:01:40 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: YFw5uZbK0xkoznw4PXTXqSPBRHNHmfFVkzzyUlnOEfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b1:16:d4:52:bf:86:8f:aa:f4:5f:b4:62:1c:02:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Aug 7 04:01:40 2025 GMT
Not After : Aug 8 04:01:40 2025 GMT
Subject: CN=2ae5570b7573eaf087cc3664ec02c8de274e191c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:ee:1e:4c:2f:32:58:74:e5:1e:a2:bd:4f:
a8:30:7f:0b:90:59:b3:b2:b9:c5:f3:10:26:b6:2f:
da:ac:36:94:99:85:46:7d:82:ba:17:b1:8f:ed:84:
a6:2a:3a:32:35:89:66:40:74:f7:a4:8e:7a:67:12:
08:99:d2:29:45:09:d8:d4:42:27:8c:4d:cd:24:98:
62:ac:78:88:4f:3e:79:d7:4a:3e:ff:14:71:81:dc:
64:b7:4d:01:35:56:2f:85:ff:94:1f:1a:41:44:a8:
63:28:ec:de:53:51:99:eb:ea:4f:cc:f3:a4:9c:54:
b9:cc:89:2e:ce:db:0d:5e:df:dc:eb:1a:52:e9:1b:
af:aa:01:92:f9:ec:11:ad:6b:dd:ae:c9:71:4f:7f:
eb:64:0d:67:08:6b:0d:d5:8d:6c:9a:f3:61:28:57:
2a:3f:1c:ee:06:a5:d5:ce:87:72:24:6f:33:43:d0:
41:2f:3a:d7:c3:df:a7:ac:95:c9:b0:c1:ce:95:be:
91:e7:f2:6e:13:31:d4:63:97:81:f4:65:bb:fd:e0:
f6:49:32:cd:31:27:c0:e3:bd:6d:ed:86:31:4c:5e:
b6:c1:4f:03:ed:c0:48:0a:6f:d8:3c:71:77:75:69:
e3:0b:20:f8:e0:a8:91:a1:a2:e3:19:85:4a:5f:63:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:57:0B:75:73:EA:F0:87:CC:36:64:EC:02:C8:DE:27:4E:19:1C
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4c:5f:76:3a:18:ea:cd:e6:2f:f7:3d:90:da:e6:df:d2:ea:
16:a8:a1:a6:98:17:f9:b0:88:ab:f1:59:81:f0:ab:f8:c7:76:
7c:ac:aa:ae:e1:08:59:d8:64:62:b9:c0:e4:37:1b:a5:4e:c7:
fe:f1:8a:97:5c:8a:e2:8b:14:1e:e8:d3:00:06:af:04:78:ee:
e8:1d:46:3b:61:55:07:28:92:ad:b1:76:98:a6:10:4e:c4:7d:
02:83:23:22:a8:70:6a:df:e8:dc:dc:a0:51:72:74:ae:05:8c:
3e:6e:ed:e0:4f:1e:41:18:95:bf:90:20:6f:d2:8d:8c:63:e5:
c4:01:79:61:c7:d0:36:ca:f4:7e:99:6c:b6:f3:b8:eb:ca:1c:
bf:01:d7:95:74:fb:70:77:4e:85:c1:23:7d:d1:b1:c5:8c:95:
3e:e1:8f:8d:c5:3d:2e:3a:9d:ef:c3:2c:a4:08:fa:b3:29:6d:
2c:8c:7c:8a:2e:23:d2:dd:10:7e:96:26:7b:95:77:36:58:62:
23:88:71:42:36:85:da:7b:02:30:23:68:03:b2:99:fe:25:e5:
8b:76:1a:32:69:33:11:25:74:2d:bd:7b:08:7e:ca:74:13:c0:
a8:c7:50:92:3a:58:6a:5b:d8:9d:8d:f2:5a:6a:eb:30:c2:ac:
ad:3d:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:15 2025 by rpki-client