Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier: +aS6lpeMuwgn+usEPnxRqQQaMDeopJHVMoaEHFBR5tA=
Subject key identifier: 3B:A0:69:47:6C:1A:FB:F6:96:BC:3D:A1:5D:03:1D:59:94:66:B5:4B
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial: 0198D54E2915EC96BD13EA967130FCD08E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:05 +0000
Manifest this update: Sat 23 Aug 2025 05:02:05 +0000
Manifest next update: Sun 24 Aug 2025 05:02:05 +0000
Files and hashes: 1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: N8RusCT/wkZ9BU/3orQTdHtJumdceYM1I2rrpOqczHw=)
2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:29:15:ec:96:bd:13:ea:96:71:30:fc:d0:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Validity
Not Before: Aug 23 05:02:05 2025 GMT
Not After : Aug 24 05:02:05 2025 GMT
Subject: CN=3ba069476c1afbf696bc3da15d031d599466b54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:0a:cb:67:09:85:fe:7f:19:82:a7:ab:81:
db:a0:8b:4c:15:52:ef:8d:8d:5c:89:0f:4b:f7:a2:
77:b9:f5:e8:97:23:bb:34:fb:6d:6c:73:23:61:f0:
f1:aa:db:4d:83:a2:a5:a4:e1:e7:0a:b2:7c:49:57:
7a:aa:e9:63:da:f2:c6:c5:bf:c5:59:a7:19:7f:1c:
b1:2c:33:e9:d7:81:07:5f:de:6a:7c:1a:53:0e:52:
cb:04:b1:e5:71:a4:29:72:62:8e:7d:da:98:1d:45:
7a:0b:d4:e1:8f:0a:98:36:73:8f:70:cd:e1:d4:db:
84:c6:27:b1:c0:57:c5:31:a9:47:83:bc:a4:19:13:
df:c7:27:b8:5c:00:af:17:18:54:34:49:e6:43:88:
b2:1c:a7:79:9d:ba:32:07:c7:39:50:c0:38:ba:bc:
c1:77:27:06:86:1b:e4:13:e5:8e:ee:38:c6:3a:a0:
52:9c:dc:74:30:94:1b:f5:e7:16:93:b5:22:32:43:
97:51:1f:9d:70:95:14:53:b7:b8:60:4c:05:5b:38:
db:d8:85:5a:2d:0d:c9:e6:32:2c:5e:35:5b:49:76:
64:bf:5f:1d:40:fc:6b:c7:d9:78:63:64:18:c8:ba:
c1:16:52:e4:07:3c:66:e0:88:57:92:b7:2b:52:b9:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:69:47:6C:1A:FB:F6:96:BC:3D:A1:5D:03:1D:59:94:66:B5:4B
X509v3 Authority Key Identifier:
keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c6:7d:63:cf:ad:b4:7e:82:82:5e:42:6a:3a:54:d4:02:cd:
b0:69:6d:c8:20:23:a0:bf:2b:ea:54:60:64:c4:a6:4f:d6:9f:
4a:93:25:7d:81:fe:f8:51:b6:6b:dd:c2:c9:81:69:75:24:cf:
59:06:f8:b7:dc:0c:27:f0:75:83:7a:b4:0d:93:f2:40:70:90:
36:32:cc:39:05:49:14:e4:7a:0f:0c:ed:44:04:ee:f4:9b:b0:
03:90:f1:28:d6:d7:99:1b:fc:b3:76:ec:63:9e:01:22:84:6a:
04:ec:f4:88:9e:e2:be:37:64:c9:ae:87:5b:b2:4d:72:8f:39:
98:4a:c7:12:0d:00:ab:eb:00:8e:8f:51:4f:95:56:9b:87:04:
ae:76:d2:af:ad:2c:83:60:63:ec:4e:f9:ab:fa:57:ad:65:56:
44:b4:dc:36:c6:7f:a7:88:ca:cb:f4:24:c8:8e:03:62:51:cc:
6e:2a:25:53:da:74:56:39:1c:9f:cf:93:80:dd:eb:6c:76:07:
21:28:a5:bd:cc:f2:1a:d1:f8:81:9b:02:c5:94:25:42:eb:7e:
e6:58:2f:02:27:71:22:24:1e:b2:a2:c4:23:68:fd:60:a0:2c:
4e:07:41:ad:28:83:a0:ba:a9:38:8d:ea:9a:40:eb:91:ba:e8:
1f:a3:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:59 2025 by rpki-client