Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier: JUf+QPzb0jLG8G+N0+Pw/ynBCfjrCDStBI+/2lyOFQY=
Subject key identifier: 40:FF:83:31:55:66:5F:A0:8E:7E:81:6A:1C:E0:3C:7A:B4:64:05:91
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 019874500B0941269790D57C9EC6441A524C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number: 05E8
Signing time: Mon 04 Aug 2025 09:00:59 +0000
Manifest this update: Mon 04 Aug 2025 09:00:59 +0000
Manifest next update: Tue 05 Aug 2025 09:00:59 +0000
Files and hashes: 1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: TfECPZ/MlrqSm3roJcTOVlKmJgWN5VBwlTSnWF9UDeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0b:09:41:26:97:90:d5:7c:9e:c6:44:1a:52:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Aug 4 09:00:59 2025 GMT
Not After : Aug 5 09:00:59 2025 GMT
Subject: CN=40ff833155665fa08e7e816a1ce03c7ab4640591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:8c:9a:51:a9:6d:72:9c:5b:4b:a1:10:7a:
be:dc:2d:5b:9a:94:40:9f:6f:ce:b9:5f:2b:86:98:
37:bd:ca:d5:58:81:2e:20:e4:fd:f8:88:f5:ff:13:
a4:bd:b3:c6:d0:0f:aa:30:1a:05:1b:c7:23:7a:e9:
05:36:ef:ef:93:b7:a0:15:41:7e:a4:2d:94:63:40:
3e:e6:7e:53:26:03:f0:36:df:9b:1b:2e:af:26:b1:
a7:4e:cf:58:17:a8:44:80:57:4d:0e:89:7c:f6:8e:
b8:66:1e:10:ca:40:ab:0e:f2:43:75:67:ae:c0:51:
17:e0:fc:5d:8f:c6:62:49:7d:b5:60:eb:f9:76:a2:
f7:a9:e4:af:a1:b6:b4:72:74:9c:ae:2c:ed:8f:b6:
bd:4a:b7:cc:e7:1c:13:fb:cb:95:f0:2e:2e:a0:18:
06:7a:d1:02:a0:0a:1c:08:ea:43:3e:62:fa:fc:08:
09:3d:26:68:51:d8:fd:00:a9:57:2b:80:35:2a:34:
09:65:34:c6:af:7e:5a:39:4d:22:36:e2:ed:6e:88:
28:b6:23:ef:34:29:7c:3e:ea:55:ac:5d:69:33:22:
ad:47:6a:3a:7c:71:e9:92:b1:a1:51:e6:56:31:20:
6d:56:b1:4f:8f:e4:bf:3b:a9:bc:43:4d:61:c7:49:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FF:83:31:55:66:5F:A0:8E:7E:81:6A:1C:E0:3C:7A:B4:64:05:91
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:28:76:7c:48:ce:47:b5:d0:15:c5:be:24:a2:4e:e9:16:23:
35:f9:e6:4e:b9:d1:a7:35:01:c9:28:58:37:99:13:e4:b2:3a:
ed:fd:73:23:8b:61:6b:21:a5:f1:c6:2d:cd:b9:e9:c0:bc:2b:
26:1f:3b:df:84:b3:3a:bf:88:86:45:c5:0b:85:72:9d:6e:5d:
e4:59:ef:b2:f3:27:ca:6d:88:b9:b0:94:6f:82:ca:b8:7a:a6:
26:c6:74:a5:3f:e4:65:53:24:36:27:4f:54:56:b8:eb:8c:94:
d5:d4:4b:c4:86:b8:e2:9a:41:2a:27:84:57:45:17:ba:03:2d:
8a:7a:71:76:76:64:df:b5:01:f9:55:6f:07:44:ce:b4:db:dd:
2f:0e:2a:fc:4c:3f:61:29:67:a7:c5:03:fb:f4:13:85:e7:24:
ee:2c:81:76:10:3e:bd:fc:ff:45:65:d9:f1:b4:51:5c:5d:a4:
bd:3e:2f:53:6b:4b:4e:9e:29:d9:da:20:8a:d1:6c:48:1b:05:
e1:4b:35:06:df:27:fe:c9:3e:89:df:c5:66:ce:ac:76:76:59:
aa:48:27:96:0c:f4:e0:5e:0a:8c:67:68:43:c6:20:b7:b8:cb:
bb:62:03:f4:36:74:c2:99:aa:4c:d1:f2:f9:71:63:fe:a0:ce:
a0:2b:9d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:41:53 2025 by rpki-client