
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: H23uQN4/Nr8b7SzHPooMb9wDGs2ZU3WN6zqGpolPL90=
Subject key identifier: 78:E9:5E:E4:04:2A:72:80:BA:BB:9B:7B:7E:B5:5E:A4:46:5F:8E:08
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 0197B70F3846CDE14576C520DBBC3941765A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 107A
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: d+DRXJLn4cj/cMOlFSFzdR6eAZqpNLS5dB2Icn6/5YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:38:46:cd:e1:45:76:c5:20:db:bc:39:41:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=78e95ee4042a7280babb9b7b7eb55ea4465f8e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:97:fa:14:34:5f:69:e2:26:80:32:27:be:
f3:a7:2e:14:b9:37:b6:a7:a8:1f:90:84:59:87:b5:
43:d1:73:da:0b:66:b8:cc:5c:cb:30:4d:5d:e1:d1:
68:c2:25:cb:f7:8e:ad:e5:db:88:0c:77:6c:43:79:
64:6c:3d:ea:74:63:78:88:1c:79:82:be:73:14:81:
52:69:d1:28:6e:43:88:7e:f2:46:eb:96:7e:b7:c2:
f1:36:ca:85:80:47:7f:cb:1e:f7:8e:fa:64:7d:13:
2a:29:c1:82:53:b7:a7:ea:ff:c4:97:73:9b:7d:fc:
38:2c:02:ed:ed:43:1a:e7:ab:e4:64:b0:ac:3f:69:
cc:9e:81:af:06:82:14:ce:59:70:8a:c3:ce:00:d8:
d1:c4:18:a5:ad:27:08:80:e3:42:f7:ee:de:b9:9b:
3b:74:8e:60:a5:06:97:0c:f1:c0:40:82:96:2e:1d:
91:bc:d0:94:3a:3d:e5:92:23:f2:f2:13:99:ce:d1:
04:e5:2a:0e:55:da:92:e6:61:22:b5:7b:85:47:b6:
3f:14:6f:64:a4:fb:59:5f:55:68:40:31:cc:13:df:
b4:8b:fe:b4:5d:d2:a0:08:9e:c6:62:eb:ba:89:62:
4f:b0:93:b2:e3:1c:38:75:0b:ee:e5:17:cc:e5:7f:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E9:5E:E4:04:2A:72:80:BA:BB:9B:7B:7E:B5:5E:A4:46:5F:8E:08
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6d:b2:8c:9b:dc:1a:d3:d6:c7:f0:7f:56:6a:a8:fe:26:7c:
52:b1:2d:01:71:34:76:3e:32:d2:65:39:9e:0e:07:ac:3c:ee:
d4:a7:07:cd:b6:54:dc:a3:55:97:d5:ef:de:67:df:40:3c:18:
39:b1:80:e9:9d:89:e4:39:96:22:e1:c3:c1:62:6f:41:97:0a:
c9:6e:08:03:02:ce:c7:be:b3:fc:17:e1:1a:9e:6d:6c:05:71:
51:b3:0f:5e:7a:da:ef:34:98:d6:4e:75:ee:e5:68:10:67:45:
35:cd:a1:03:87:5b:ee:e5:76:b3:db:23:6b:03:40:3b:3a:0f:
ff:c1:c5:4d:98:12:e8:3b:9e:a4:a3:93:a1:ec:de:eb:71:f2:
99:39:da:b3:80:22:ec:33:52:12:84:1d:9c:b8:bb:97:eb:0e:
fb:6f:66:12:60:4a:8e:98:b2:d6:5f:38:70:93:ec:8f:d7:da:
c4:54:2b:f7:12:65:f9:9c:2f:d9:8e:49:df:68:90:9a:ea:d0:
d1:98:c4:82:a6:42:e7:93:5e:7c:e9:6b:d2:4c:63:3b:a9:60:
6a:f3:a3:48:12:ab:33:63:1c:e6:2a:1d:e7:3e:0d:17:ca:80:
03:2d:99:ff:aa:31:ea:92:35:88:1e:dc:4e:54:8e:f3:1a:e1:
c8:69:15:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:03 2025 by rpki-client