Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: BjRW9uhQIf4jWEhrj57sGTq1bf6ylh5gFlc9jyEqajc=
Subject key identifier: B4:FD:56:69:1A:BE:15:12:D3:68:D8:EB:8E:D4:FE:27:9A:93:A1:C2
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 0198D4DFD94E8C68EFF69FE7212D18F53296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: Q5E7wAM/Sr0E94ozzTBQdTPRfDP/o+/iD8gwZYJUYjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d9:4e:8c:68:ef:f6:9f:e7:21:2d:18:f5:32:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=b4fd56691abe1512d368d8eb8ed4fe279a93a1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:59:be:91:05:82:a1:7c:51:21:5c:4b:78:
fa:5d:66:3e:d5:40:5f:ce:a6:d1:80:2c:66:b0:33:
6d:68:eb:6a:dd:3a:60:b8:96:5d:3a:06:5d:97:4f:
1c:b2:a4:24:af:1a:81:85:ed:62:65:d3:d3:47:66:
b8:cf:a1:e3:02:a6:a2:83:5d:f2:14:dc:e8:95:0a:
95:d3:b2:38:f5:87:57:21:08:35:ab:09:8f:7a:1f:
5c:97:70:ea:ea:77:3e:3b:d7:3e:d8:8e:db:af:d5:
84:76:7f:b8:07:ee:0c:22:ad:dd:33:3f:2c:e0:1c:
86:aa:3d:b5:bf:c4:96:e1:13:24:c3:28:e5:ba:52:
51:f1:cc:47:2b:3a:c0:f5:88:c5:7e:40:75:0f:fe:
22:ee:50:ec:da:ef:03:bc:56:ba:a4:61:ef:b3:0e:
a4:4c:b0:8d:0a:85:51:1e:21:be:f2:59:f1:d6:52:
2e:59:6c:79:66:89:5c:fc:6a:65:f7:0b:81:42:39:
ae:47:18:fe:69:f0:49:24:b6:71:ab:ba:32:d6:54:
d8:19:ee:7b:d8:e3:7f:4f:8f:f3:44:88:f6:0a:64:
b5:c5:8c:ed:1b:ca:35:5d:b9:3e:51:4c:c6:da:92:
05:01:ca:d4:03:d5:e8:cf:44:8e:87:1d:f9:d6:e1:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FD:56:69:1A:BE:15:12:D3:68:D8:EB:8E:D4:FE:27:9A:93:A1:C2
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:95:43:30:d7:8f:f5:c6:e0:fe:4d:c1:13:da:9a:24:48:51:
0b:e7:5a:66:d2:36:93:bd:3c:fb:c6:a4:63:ad:06:86:6a:c7:
5f:03:c7:70:70:eb:1b:fe:f0:7d:d5:ec:0d:32:58:9d:01:8f:
8b:37:0e:b7:86:89:b5:71:96:f7:a0:11:b7:0e:58:c7:41:56:
3a:b4:ba:f3:1d:63:81:41:bd:71:01:5a:67:ec:e3:ed:bb:48:
ec:0b:13:15:b5:e4:3d:96:87:9b:db:b0:fd:52:10:08:57:14:
2a:5b:45:2e:94:af:63:25:c1:5b:4c:cc:37:32:c1:9f:68:36:
48:76:58:2c:c4:8c:a2:fc:dc:7f:11:cf:5b:63:e7:73:61:44:
ce:03:6a:63:ec:2a:a9:fd:f8:64:83:4f:b0:c3:eb:97:c9:eb:
90:10:9d:cd:09:08:4c:43:ae:01:f9:16:ee:67:c8:e2:fd:58:
83:4a:f9:93:30:9d:11:c7:c5:ee:4b:f1:c0:88:4c:6e:da:87:
4b:a4:da:3e:62:e2:19:6b:5a:c0:c7:39:2d:9b:02:c9:1f:93:
45:5e:64:85:b5:ee:74:17:79:93:6d:09:75:9a:9f:b3:b4:d7:
e5:b4:f4:68:5f:b6:c0:fe:9a:98:91:43:b1:c4:b0:44:76:9e:
d8:d3:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:21 2025 by rpki-client