Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: ba7ul3xQVbiYlrZIckc1EUjKMrde7FJ3Kwv5KWanxQQ=
Subject key identifier: A0:1A:05:0F:C7:17:49:9B:22:70:A1:C4:25:30:3E:63:F6:62:A6:FD
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 0197B77CB9308DB384E378CF95B26F84696B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 081C
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: 1SWjCXLjuUd4tV/dq5zN4dM6faJCSb36ON452xJ/Gyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b9:30:8d:b3:84:e3:78:cf:95:b2:6f:84:69:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=a01a050fc717499b2270a1c425303e63f662a6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:ef:89:52:9c:0d:f2:74:ff:5b:d0:57:1d:
ee:ef:16:30:ae:f8:37:ea:3d:74:00:5d:f3:ea:a2:
cb:37:51:d7:d7:da:9a:76:84:ed:2b:e2:44:a1:2f:
67:d2:86:1c:93:8a:45:4b:53:1a:9e:5e:c8:e9:26:
e0:58:cf:28:e4:c6:47:9c:28:ad:bb:25:77:2e:f2:
28:a6:43:e8:b4:a1:b0:5f:c6:2f:00:93:d2:fe:48:
c2:60:a6:e7:55:68:cf:7f:9e:da:f1:f8:ec:10:fb:
b8:40:75:9d:54:69:9f:4d:c6:30:5c:d3:34:0e:e9:
88:97:8e:33:c0:94:cf:74:ee:d8:a2:6c:55:8f:d3:
d0:b8:bf:1c:d2:06:90:07:98:48:29:b8:c8:34:b4:
00:19:1a:7b:3d:bf:00:71:16:f5:ef:c8:8a:f0:2a:
32:f3:a9:71:ab:75:08:b6:06:14:67:16:07:86:ee:
c9:b8:61:b3:62:aa:b8:d0:93:da:b4:6b:9f:77:2a:
4b:c4:76:15:b6:af:ed:77:6d:14:4e:ff:53:ca:59:
9a:38:87:88:99:a7:d7:82:c6:07:23:32:b3:4c:05:
b3:9a:7a:4e:f7:05:26:e4:13:28:f8:5e:60:5c:63:
7b:66:9f:a1:4d:ee:d0:0a:ba:c5:99:be:b2:49:b4:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1A:05:0F:C7:17:49:9B:22:70:A1:C4:25:30:3E:63:F6:62:A6:FD
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:18:b6:d2:07:c4:e9:70:c9:5e:c7:a8:3b:03:20:79:e8:bb:
6b:e3:da:1e:1d:33:5c:71:38:4d:ce:33:c4:4b:fd:b5:41:a1:
ac:9b:01:26:8c:fe:b6:8a:69:a5:b4:91:53:f7:7e:ee:68:2e:
b3:31:5d:38:60:80:4c:59:2a:7c:53:a9:a5:65:4f:bb:4d:7e:
34:3a:71:03:30:e7:d5:63:e2:7a:bf:a1:5f:7b:02:8c:4e:a2:
9c:dc:a5:8a:51:7e:e1:88:03:6c:9a:42:f2:33:5f:07:d0:27:
da:b2:2b:37:8b:8e:e1:7a:ab:25:4f:1d:3a:d3:56:0f:57:3b:
3d:39:72:17:97:d7:d9:e7:25:2e:96:31:71:38:de:b7:02:27:
22:ff:39:df:04:9a:43:a9:83:f8:74:57:ac:46:8f:9d:f2:35:
cf:31:6a:09:8b:3d:f5:6a:1a:24:56:6d:5c:0e:2c:ff:10:84:
1b:0b:c6:02:73:25:b0:91:f9:fe:f9:db:30:71:58:f1:10:cb:
6e:b0:99:08:2e:a3:5f:fe:b3:af:19:7d:58:a3:74:91:39:71:
a1:83:a0:49:e6:2c:31:0b:0f:e6:52:ae:78:6d:de:bd:ab:6a:
5f:29:35:29:a9:03:66:67:28:cb:67:f7:d7:3d:33:a5:9c:38:
11:2d:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:23 2025 by rpki-client