Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: faWV6cpyNo3HjJ1dWauMXFOOGmBHByzNtMwLGo3Qm8Y=
Subject key identifier: B7:44:80:03:AB:72:D8:F5:D9:6C:51:C7:B0:5A:0C:54:8B:A6:76:C2
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 0198D4E0199AA1CBCEA96C53596AC26DCC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 110E
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: +vPLbVPebIehJ3KjLTEhGpNN0+dqPplcIWcKrsG04Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:19:9a:a1:cb:ce:a9:6c:53:59:6a:c2:6d:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=b7448003ab72d8f5d96c51c7b05a0c548ba676c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:73:12:27:00:cd:f4:e6:ef:1f:6c:bf:62:
52:93:04:b5:75:e5:55:a7:08:a8:22:e0:5c:25:89:
77:63:cc:ea:39:c3:bc:dc:0a:09:05:d0:73:61:e6:
36:c0:e2:fe:db:68:bf:fd:db:a6:67:22:15:3a:be:
3f:7f:bc:be:31:b4:12:03:33:ff:f5:95:96:89:ec:
29:a5:d4:67:0e:98:f1:f1:a5:7a:63:49:4e:47:b3:
39:a9:f4:a0:88:90:7a:bf:53:e6:45:10:04:38:99:
61:4b:8e:fa:d8:f1:9f:d4:1b:25:ea:5a:63:23:0d:
20:4e:e2:db:1e:93:0a:fe:90:ba:0a:56:bb:dc:79:
bc:a0:50:04:a8:30:a6:35:0a:46:06:e9:b1:fb:d5:
4f:f9:03:08:01:ad:f3:e3:eb:49:a2:43:0d:8c:7d:
d6:d2:12:4f:f9:59:dc:5c:d5:e3:37:59:87:46:bf:
81:01:89:8a:48:69:a0:16:f1:ce:e3:f1:68:42:42:
ec:90:6e:b0:3f:13:a8:14:05:c5:5c:79:85:93:b4:
8b:ec:4f:dc:33:8b:7c:d8:6d:b6:ab:2a:8d:7f:df:
2b:46:5f:55:db:fa:93:7a:85:07:2f:f5:6d:7f:c4:
fb:e9:29:ef:b7:1b:10:c3:ef:10:19:cb:14:d1:b8:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:44:80:03:AB:72:D8:F5:D9:6C:51:C7:B0:5A:0C:54:8B:A6:76:C2
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:00:5f:ea:c7:3b:38:d4:d1:5d:87:40:35:37:2b:89:aa:f0:
63:6c:2e:a4:d0:24:78:4d:30:3d:67:d1:03:7d:9f:94:b2:73:
77:b6:37:d6:ba:c0:b4:95:3b:a2:ea:08:fb:01:58:b3:43:1f:
0b:91:68:64:55:3e:58:24:8e:a1:2b:18:b3:58:5f:00:1b:bf:
37:ad:d3:cb:b1:81:7e:99:8b:76:5b:68:be:cd:a6:9d:cd:e3:
31:e0:e7:4b:03:3e:40:ff:74:5b:e6:1a:11:e4:1a:09:6c:a2:
de:d8:f2:19:cf:f7:af:53:aa:cb:6b:75:dd:97:7a:4f:80:77:
cf:a8:4c:3e:79:21:93:91:1e:46:98:27:5e:6d:17:3a:2d:02:
9c:09:d0:d9:e3:63:04:4c:fa:9d:62:ea:ae:66:97:6c:b6:c6:
d5:7f:7f:72:a2:fb:28:c9:8d:bf:7a:99:e9:9b:f9:88:d5:34:
1f:d5:fd:7f:37:66:8a:35:46:83:0f:3b:dc:3c:dd:95:08:04:
cc:5a:35:e5:13:33:15:2e:59:ad:3d:b6:05:06:09:6c:8e:1e:
ec:f7:50:d2:50:b5:ad:ed:f7:97:e0:96:5f:2f:50:72:b6:d1:
67:f7:a0:7a:27:46:ab:d0:7f:03:ad:10:dc:69:f4:55:04:07:
58:05:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:52 2025 by rpki-client