Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: CxXAWI8+iXfY8PjwgaY3jxG8/BQvd9UIyjO5+zbdmVc=
Subject key identifier: 2A:47:5D:FF:AF:86:47:93:0E:1F:D9:B3:7B:9E:D7:54:36:78:75:C4
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 0198A0BAE2F820808CF0ACDE09E38142C4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 057D
Signing time: Wed 13 Aug 2025 00:00:58 +0000
Manifest this update: Wed 13 Aug 2025 00:00:58 +0000
Manifest next update: Thu 14 Aug 2025 00:00:58 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: iGfo8UM9kSjRIxgEodSbv20NbQuNGFxjyha2VexPb7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:e2:f8:20:80:8c:f0:ac:de:09:e3:81:42:c4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: Aug 13 00:00:58 2025 GMT
Not After : Aug 14 00:00:58 2025 GMT
Subject: CN=2a475dffaf8647930e1fd9b37b9ed754367875c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:4f:a0:1b:53:e5:ae:20:1f:ed:d2:65:07:
6b:b8:18:3f:10:d6:8a:1d:87:c9:06:7f:e6:a9:b5:
56:af:8d:82:f6:26:e1:81:98:b0:86:4d:02:70:ac:
94:f6:89:5c:54:94:a5:33:13:e4:76:b2:ee:05:b6:
06:cd:c1:cc:06:48:6d:bf:41:11:c8:49:08:38:b8:
a3:7d:58:b5:c8:f7:83:19:87:eb:6a:98:53:c4:85:
40:5b:73:09:23:9e:cd:e6:24:69:33:29:45:d5:08:
10:46:89:0f:25:1f:fd:f9:86:d4:ec:29:21:f0:81:
e5:37:e8:b1:ef:06:7d:20:54:14:7d:35:b0:4e:a4:
e1:45:7f:a4:8e:ba:9a:2d:18:1c:11:4d:87:ba:3f:
f3:ba:01:48:d9:c1:f1:2e:71:85:34:e3:f3:f4:8a:
bd:72:64:3f:13:7c:0b:4d:90:63:ed:85:c3:14:c8:
23:b0:ab:10:9c:08:15:9e:51:4b:d2:7c:ba:14:fd:
b4:95:e2:74:b7:6b:55:76:06:5d:c1:35:fa:72:4a:
a3:0f:aa:0b:e0:c9:7e:94:0e:e9:3e:5d:01:23:55:
29:ab:60:f5:1b:bc:bd:d9:23:14:ca:17:ce:24:e8:
32:38:c4:e8:66:ae:8c:34:f6:a0:80:05:e0:28:cb:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:5D:FF:AF:86:47:93:0E:1F:D9:B3:7B:9E:D7:54:36:78:75:C4
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2b:fb:29:ca:63:ad:1e:76:c3:ce:04:28:ba:03:56:2b:1c:
0c:a0:9b:81:af:a2:a2:ae:53:6f:a2:79:23:76:8f:f6:b8:39:
95:f0:73:97:79:76:39:11:21:ce:76:fc:26:1b:15:55:e2:53:
a0:30:35:fb:a6:48:64:b6:2f:11:82:7b:82:58:89:c4:8a:0c:
e4:6c:02:c6:01:d3:96:64:dd:9a:4b:56:d6:64:f4:76:3e:28:
c4:7c:5d:8c:66:d5:c5:00:32:e5:80:aa:d2:8d:97:be:ef:13:
ed:a1:0f:2f:3d:2b:cb:a0:06:77:ad:41:35:48:82:e3:53:84:
5f:9e:ca:aa:6f:5b:3d:5a:c9:2e:fa:a8:ed:ff:c1:34:2a:53:
87:9e:d4:33:d0:a3:e4:ca:5c:e5:e6:33:0b:87:cb:56:06:99:
aa:12:e4:78:82:21:b5:56:23:3a:39:b8:51:2b:8b:5d:19:ae:
5b:cc:d7:91:41:74:17:9b:12:94:a8:cf:29:4f:94:36:ed:f9:
f1:e9:30:74:7a:02:38:99:c7:09:c9:d4:f3:54:ac:8b:9e:0f:
39:90:5d:45:12:55:58:b9:d9:36:47:31:f7:19:55:9e:b0:f2:
11:ec:9b:8d:56:78:f9:61:c2:27:14:4c:9c:ae:a7:a2:51:73:
28:f0:cf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:05 2025 by rpki-client