Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier: tFHkIQYXQiGy9s1FWL3B6L+/TuWk8Djx0U51Qf/sKSM=
Subject key identifier: 32:28:60:1A:75:9D:8E:04:DC:9E:C4:B1:61:02:F7:09:C3:DC:29:2A
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial: 0198D54E9D8E28FC801C9EE7B97237AC688B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number: 0BFB
Signing time: Sat 23 Aug 2025 05:02:35 +0000
Manifest this update: Sat 23 Aug 2025 05:02:35 +0000
Manifest next update: Sun 24 Aug 2025 05:02:35 +0000
Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: bS6ZuJOzSiJVO9/BITdeABiNTo5FxuQeyB4HWWodKHU=)
2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9d:8e:28:fc:80:1c:9e:e7:b9:72:37:ac:68:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Validity
Not Before: Aug 23 05:02:35 2025 GMT
Not After : Aug 24 05:02:35 2025 GMT
Subject: CN=3228601a759d8e04dc9ec4b16102f709c3dc292a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:fe:d4:51:bb:95:0e:1f:f3:9c:15:f5:f1:
0b:86:96:1e:01:13:f7:e2:b0:03:1b:ba:9b:93:29:
e4:36:a2:76:e3:18:9a:64:a3:7c:60:5d:84:e8:a1:
b4:bd:1e:b8:37:21:e1:c9:be:6d:35:ec:fc:11:4e:
c6:73:3c:e5:5c:cd:a2:15:7a:41:5c:0c:ed:41:76:
1f:0b:bc:2f:ec:8f:ca:39:04:ca:09:89:73:74:17:
14:23:2f:c3:19:e4:97:26:b3:4a:c4:f6:0e:4f:65:
f3:d5:dc:58:a8:df:79:57:0c:f4:fd:a0:be:b4:51:
c4:0c:1b:2a:d7:10:70:94:43:a0:3d:29:61:2a:20:
02:f2:ee:c0:40:fb:2b:51:4f:0b:6a:ef:f5:df:b1:
42:1f:5b:d4:13:2d:88:f6:22:96:46:e4:43:b2:c8:
4b:08:6a:48:dd:cb:05:32:e5:7c:e8:7d:f8:8c:0d:
96:54:18:37:4b:ee:a0:a8:f2:71:11:78:21:66:67:
2e:17:f5:6a:b1:1d:24:27:e9:e1:00:cd:d2:b1:ae:
fa:3e:4b:ce:d6:93:bb:c5:dc:45:27:81:88:e2:be:
68:ba:4b:42:15:60:c1:23:a5:6a:68:7b:a0:07:30:
87:81:7d:a2:80:2d:63:68:e9:d7:24:7f:c9:b5:80:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:60:1A:75:9D:8E:04:DC:9E:C4:B1:61:02:F7:09:C3:DC:29:2A
X509v3 Authority Key Identifier:
keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f2:61:d3:f9:f3:b9:8a:07:bd:d0:59:90:ed:4c:53:7e:27:
43:83:61:a7:33:b1:67:0c:a8:ce:ab:1c:f9:55:01:bc:e5:11:
4a:32:f0:9d:7e:0a:1a:da:55:ad:de:47:32:9a:fd:cb:09:df:
0b:6e:c7:b7:80:54:71:97:3d:30:e5:44:48:b3:c5:2e:dd:af:
80:49:a4:c3:3e:72:e3:72:7d:87:32:a1:b0:34:47:74:88:70:
55:d7:3e:4f:78:74:30:69:ad:5e:09:a3:8b:b9:7f:18:c1:18:
02:cc:f4:0a:29:a8:28:f6:30:ee:9a:d5:da:1d:94:ee:a8:b6:
11:e7:db:e0:6b:3b:f6:91:38:43:cf:3e:7c:16:59:b0:60:96:
b9:a9:36:9a:d4:3a:67:10:a8:53:1c:96:92:25:a9:95:38:4d:
a3:ea:dc:e1:90:dc:fc:34:8e:8f:84:df:48:fd:5e:ee:a6:51:
a1:96:2b:97:89:0c:e4:06:ca:e6:19:02:ea:a0:07:ff:6d:9c:
36:51:27:b6:ce:0c:41:8e:34:f2:12:c9:9b:ba:ac:d3:62:fd:
a9:f2:10:93:3c:a8:57:78:f4:9e:29:4e:46:dd:6e:47:dd:e2:
36:ed:c6:a1:4d:28:da:11:11:82:f3:ae:5d:ab:ef:6b:5e:38:
5d:e5:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:33 2025 by rpki-client