Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
File: XJF3tPVOZX44dlbmc6-MDuCmCRc.mft (raw, json)
Hash identifier: pUn7RygRTjERwWnlAbtpX0jLbUlEu/WxhjaNaEK7KHc=
Subject key identifier: B2:A5:5E:27:37:2B:21:28:2E:00:54:3B:19:52:38:9C:11:C6:18:AF
Authority key identifier: 5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
Certificate issuer: /CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Certificate serial: 019874500F66A55D3DFFF16828B55AEF921D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
Manifest number: 01BE
Signing time: Mon 04 Aug 2025 09:01:00 +0000
Manifest this update: Mon 04 Aug 2025 09:01:00 +0000
Manifest next update: Tue 05 Aug 2025 09:01:00 +0000
Files and hashes: 1: XJF3tPVOZX44dlbmc6-MDuCmCRc.crl (hash: YMrefyAAo8sIElXKtYMVvMgJTrMI4KoEbMi/zUdrwUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0f:66:a5:5d:3d:ff:f1:68:28:b5:5a:ef:92:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Validity
Not Before: Aug 4 09:01:00 2025 GMT
Not After : Aug 5 09:01:00 2025 GMT
Subject: CN=b2a55e27372b21282e00543b1952389c11c618af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:00:b6:42:21:25:db:6c:df:58:16:b4:0d:
d1:33:fe:c1:fe:68:7e:33:51:a3:09:21:3b:3c:50:
71:b7:94:93:7f:99:90:18:d5:24:c8:e4:f5:de:99:
ce:9d:91:86:5e:72:1a:eb:6b:3c:3f:37:d0:31:80:
0f:b5:88:67:20:ab:98:08:05:94:50:f9:4f:de:ea:
d7:80:e5:2f:fc:6a:f4:a4:22:9c:db:e1:bc:19:43:
c3:16:e7:5e:7f:b2:36:6e:b4:0b:18:59:0a:8c:7f:
5e:ae:9f:ca:6b:a5:1e:7f:46:9e:1e:44:1b:80:23:
f5:56:7c:df:be:33:db:2c:c7:6d:52:f8:44:22:10:
dd:de:ff:b5:5a:ba:27:2c:76:6f:16:13:23:bc:d4:
9d:57:88:b7:55:43:2c:86:7b:05:52:47:7e:74:cf:
e4:e9:f6:dc:63:07:b2:05:83:f3:9f:12:b1:af:d5:
f2:c8:c6:03:db:ec:e9:2b:71:c3:64:67:18:0a:23:
ce:cd:b3:4b:62:9a:2a:39:3f:e9:dd:fd:19:a7:43:
30:fd:1f:74:ef:7e:35:7d:07:00:37:e5:72:56:aa:
59:32:f0:25:27:b8:4f:f7:90:e2:f9:27:59:f2:ec:
fb:85:00:f4:8e:0d:74:39:30:ac:c0:b2:cb:90:2f:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A5:5E:27:37:2B:21:28:2E:00:54:3B:19:52:38:9C:11:C6:18:AF
X509v3 Authority Key Identifier:
keyid:5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4e:29:40:dc:82:eb:d0:d2:cf:11:35:b0:bb:c9:98:5a:62:
f1:3a:b8:5b:93:65:6a:02:13:d7:d8:61:93:7f:02:43:a6:9a:
aa:3a:a1:f0:40:d7:79:f3:6b:d1:f9:6a:52:b4:f6:a2:f1:a2:
68:32:3b:86:fd:6a:ef:94:d3:df:d8:78:3f:fe:9f:18:f1:4c:
27:f2:23:7a:59:9b:43:35:dd:33:3d:20:91:dd:25:dd:cc:d3:
29:a4:15:8a:e1:7b:5c:04:4f:9a:7a:24:1f:56:de:be:fc:9f:
f2:13:23:41:0b:67:e0:d9:2c:b0:66:4f:cf:bb:31:2c:dd:c5:
d7:58:8b:65:73:52:3b:0b:81:2e:9e:10:44:b7:87:53:77:a9:
7c:8d:af:8a:52:c0:21:03:9b:cb:22:cc:b8:36:2a:07:3d:f7:
99:82:b9:12:66:00:bc:78:ae:a1:22:8d:fc:c6:64:5c:5d:bc:
73:31:1c:a0:68:e3:d9:e1:c8:21:ac:c5:9d:94:23:ef:5e:b0:
65:7c:69:c9:d0:76:ad:66:63:0f:7e:66:71:8d:77:fc:c7:cf:
ff:0a:71:20:8d:fa:55:19:d0:d1:46:1f:b8:74:c2:a1:ad:59:
6d:df:da:a9:4c:ab:fb:53:2a:4e:d8:1d:f7:b6:df:6d:a2:81:
7e:c5:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:12 2025 by rpki-client