Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: ipOwW/b77bcWvf5PQmpFPdON4PHMt5FHbkIdilYUHLY=
Subject key identifier: DF:B7:FF:3E:66:FA:6E:78:CB:7D:E5:4D:0E:D4:60:16:68:4E:2B:4B
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 0197B70F342376F91C4C2AB18FE76B07BE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: 3urXg/RYIIpOIB72q2cAfviO7Fgv9hvPLRL3GHv1YSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:34:23:76:f9:1c:4c:2a:b1:8f:e7:6b:07:be:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=dfb7ff3e66fa6e78cb7de54d0ed46016684e2b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:23:06:9b:01:61:7c:9d:fa:ad:9b:9e:81:
16:a9:ab:7c:e7:19:ea:43:f7:97:43:f2:66:cf:63:
a8:ea:af:b4:c1:e5:67:ff:b8:0a:c1:96:07:31:14:
d1:49:f9:e7:af:2a:20:82:ad:62:4f:2a:f8:51:bc:
d7:7e:10:e8:fc:b9:42:a1:df:52:86:d6:95:60:62:
0f:59:fc:7c:da:f9:59:7c:f3:c6:8e:a5:a7:47:24:
23:2b:22:4c:12:7e:fa:8e:5b:2a:b4:ae:6a:0d:e2:
dc:05:5b:13:48:33:43:91:77:64:4d:c8:c7:62:c5:
d1:7f:28:2d:ef:78:09:c1:92:c0:c8:ac:bc:c8:9d:
e9:11:f2:e3:9b:b3:35:a9:77:a5:db:4c:b4:62:80:
8c:55:7a:33:e4:63:fd:da:41:5c:2b:61:bc:70:ab:
46:f2:40:3e:be:fb:df:68:90:1d:81:9d:bd:ce:92:
17:6b:64:14:db:cf:36:ea:61:de:47:cb:6c:84:6a:
3a:dc:1a:2e:a0:3c:d3:bf:d1:94:05:9f:36:ad:99:
34:70:6b:2a:3e:ee:58:e3:3c:4c:a5:33:15:fe:7c:
70:2f:9d:02:0a:d4:a9:fb:dc:36:64:11:0d:af:26:
fc:c6:cb:be:58:44:91:31:c5:a9:69:b0:be:ad:43:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B7:FF:3E:66:FA:6E:78:CB:7D:E5:4D:0E:D4:60:16:68:4E:2B:4B
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:7d:79:9c:f6:c1:2a:c8:3f:0e:9a:a2:ca:d5:9a:f4:35:
a2:ab:f7:32:0c:59:95:fe:51:44:fd:f8:14:d4:8a:05:b7:6c:
5b:23:3e:03:55:12:3b:55:1c:4f:62:0b:d3:3e:04:06:23:57:
51:d5:b6:8d:9a:b9:81:05:4b:ea:b8:87:23:d2:ad:23:ed:e5:
a1:e5:ec:e3:c5:7f:e3:8b:1c:b5:2b:ba:3e:f4:07:4f:27:2a:
0f:8a:50:a0:87:32:71:bd:7d:eb:77:1b:c5:1b:b6:b6:1a:cb:
0a:28:ab:22:d3:ea:52:5a:ec:ec:08:30:78:e0:72:a9:8c:9a:
97:29:2f:23:b6:3a:8e:f6:fe:60:88:56:01:45:71:32:9a:ff:
a7:cd:33:db:f6:02:ad:93:69:f8:a9:0e:78:10:f3:59:64:2d:
80:9e:62:f0:40:dd:ab:63:03:b2:fc:a9:e2:0c:f5:e8:0c:d1:
c7:cb:9f:5b:bb:f7:31:75:34:a2:75:d3:ea:87:54:6a:0d:fb:
a1:f1:92:e5:70:57:d4:a5:c5:92:7b:21:b4:f8:14:f5:a6:b1:
17:c2:30:f1:e9:73:ec:76:95:4c:51:8b:8b:8b:83:5d:d9:71:
80:a1:71:a9:5b:28:c9:c0:6f:33:7f:31:59:bc:14:c3:96:e5:
66:6b:27:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:52 2025 by rpki-client