Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: R4HZyXd8xGF7ESa0QUVFGoY9q8prvqqo1HNH7b2m5aY=
Subject key identifier: 45:AF:DE:51:08:3E:45:42:CB:7C:86:E7:9A:ED:29:0A:02:65:FE:8E
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 0198D54E907C4E807E7FBE9AB4E099358169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 08B0
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: yLE9Cv9EDSdximx6YYSC9vOuvGSghaIfulVdHjHaGH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:90:7c:4e:80:7e:7f:be:9a:b4:e0:99:35:81:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=45afde51083e4542cb7c86e79aed290a0265fe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:1c:ac:ac:8b:33:35:b3:bb:a1:10:65:b3:
cf:d1:34:aa:8f:d2:54:5e:e2:c0:ad:91:b3:d2:f0:
68:4d:3d:80:f9:a1:f5:6a:7e:9c:cd:97:9a:82:45:
93:ed:ca:6a:aa:ae:57:c2:ee:04:d8:7c:52:21:1e:
8a:b4:c9:57:fb:12:af:6f:af:f7:85:76:94:cf:3e:
98:9c:5d:b0:ff:8b:57:a8:29:23:fa:4f:cd:c4:37:
43:36:43:c6:f5:99:41:2b:88:e1:00:c5:e8:e2:c4:
a0:72:8b:37:33:65:63:28:7f:2a:c7:a3:91:41:54:
27:8a:d5:45:40:63:6e:b6:3b:b5:b6:f7:d7:0e:2c:
23:ec:74:ec:ae:1b:ff:aa:31:c4:75:af:81:e6:bc:
29:0c:e4:5c:b5:c7:36:a8:09:94:54:a1:dd:3b:46:
69:fa:97:3c:12:fc:55:b9:21:db:c8:f1:a7:2e:c7:
eb:fe:66:38:77:d0:bb:bf:7a:be:eb:2b:e4:ed:4d:
c1:9e:55:70:f7:59:4e:91:bb:31:b9:88:6d:70:40:
8e:e7:00:54:fa:61:9a:f5:2f:d2:0d:4b:aa:7e:90:
8f:40:12:7d:97:08:bb:0e:d4:a7:7b:fa:10:84:7e:
73:6f:57:84:70:ee:36:db:4e:15:9d:91:b7:fc:e2:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AF:DE:51:08:3E:45:42:CB:7C:86:E7:9A:ED:29:0A:02:65:FE:8E
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d0:f1:f7:09:b4:79:10:29:5b:0e:32:ff:36:06:4e:26:81:
c0:75:80:88:e2:0f:96:84:4d:2e:36:09:fe:2e:78:6b:57:f9:
eb:d4:05:01:58:22:1f:5d:12:e9:1d:65:e6:c9:10:3e:6e:5a:
1e:ab:d4:fa:20:85:33:6f:0e:bc:20:1f:50:17:25:65:b9:a5:
92:d1:26:23:2e:06:b8:56:ed:50:07:75:39:d4:ca:65:1c:3b:
13:38:84:c5:62:bb:dc:a8:3f:61:91:15:4c:da:3f:b0:13:05:
59:95:b1:30:ff:2b:46:f9:ba:4c:9d:fd:9c:c8:fc:af:0d:cf:
90:d6:b1:7d:8a:df:21:4a:44:d6:b5:84:42:e9:c7:ff:33:40:
6f:e3:de:4e:2b:82:3d:42:27:3a:57:94:09:73:d2:95:04:6f:
af:69:91:9a:8e:85:95:13:bf:9f:f4:0c:62:d7:4b:81:c4:86:
50:f6:4f:c2:22:95:4f:1c:47:6c:71:4e:99:b1:5e:73:32:c1:
40:c1:99:a6:6a:99:dc:79:1c:fc:d7:ab:b6:2d:98:28:6c:5c:
7b:c6:92:38:80:bd:20:be:0b:36:30:9c:f6:b6:e4:0f:46:ae:
a7:20:ad:59:bb:63:97:9e:40:e8:03:ed:d3:3f:89:6a:18:7d:
01:a9:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:01 2025 by rpki-client