Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: /9MAisT2eC1/hwy/ewBV8pQnf4/S7gZIsGvrmhE/Ip4=
Subject key identifier: BD:A3:FB:2E:EF:33:7E:D0:B4:4E:59:39:67:0D:13:84:1A:A2:9B:2D
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 0197D7E37B39F635C1F1A79D5AC830137628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 08E8
Signing time: Sat 05 Jul 2025 00:01:38 +0000
Manifest this update: Sat 05 Jul 2025 00:01:38 +0000
Manifest next update: Sun 06 Jul 2025 00:01:38 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: mmgXm+Lo6xnF2X2WYI3FBgl7MCptlI7I9yExqwp8Jqc=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:e3:7b:39:f6:35:c1:f1:a7:9d:5a:c8:30:13:76:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jul 5 00:01:38 2025 GMT
Not After : Jul 6 00:01:38 2025 GMT
Subject: CN=bda3fb2eef337ed0b44e5939670d13841aa29b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:dc:de:27:a3:0d:5c:54:01:d5:5f:1e:04:
05:83:6f:f0:a4:a3:da:60:e1:2c:3a:71:1d:1a:6c:
3a:69:f2:a8:7a:14:d2:a7:f6:31:b1:18:a9:b7:81:
02:9e:2b:ac:bb:1e:f3:73:50:04:72:fc:02:50:fa:
71:d5:e3:50:98:a5:46:32:14:87:96:f2:c7:3e:24:
42:e8:df:7b:e4:71:9c:6d:9d:63:4c:3e:0b:7c:6f:
a6:5f:e6:e7:85:35:12:f8:20:2a:2a:fc:3d:cf:fd:
b2:de:57:fb:89:1c:25:74:0c:1a:e4:25:10:22:06:
32:36:12:9a:27:b9:fa:30:11:b0:a6:41:e5:07:98:
a0:6c:4b:eb:0d:16:be:92:36:20:1c:69:c0:f3:a9:
65:c7:f2:9b:40:50:14:c4:1b:00:1c:47:f6:ea:f8:
1c:03:4f:23:17:b0:d8:54:6b:5a:42:77:e1:62:f9:
fb:93:b1:a7:45:03:9c:49:60:8c:fb:95:60:80:2b:
48:83:c7:24:d3:db:92:91:be:75:a2:fe:70:01:85:
ee:2f:4a:3c:18:41:8f:f5:75:99:c9:79:99:e3:e6:
be:f2:d1:72:f0:6a:06:b2:f0:aa:d6:93:de:42:57:
da:e4:0b:39:cb:b4:51:49:af:44:07:20:8b:cc:39:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:FB:2E:EF:33:7E:D0:B4:4E:59:39:67:0D:13:84:1A:A2:9B:2D
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:26:52:2c:f1:22:fb:9d:98:44:b0:13:99:0a:4e:e3:11:56:
64:f3:d8:70:74:a7:d3:d7:4e:56:e3:dc:fd:d7:1c:9b:c2:37:
d7:86:3a:84:ab:7e:4c:10:58:5a:e5:ff:3b:6e:11:69:f7:06:
51:49:e5:43:d5:aa:4d:be:dd:03:bf:76:9a:26:a8:9f:ac:09:
b0:e2:d3:a0:e3:ac:d5:34:63:88:ac:c7:ff:09:88:96:ca:9d:
9c:6f:93:15:6b:69:13:e1:a2:84:f6:c4:49:b4:95:25:5d:18:
51:ed:32:67:5a:ee:54:1a:92:b6:80:30:2e:8c:ce:c1:30:1b:
59:23:db:8f:ca:43:02:ee:76:5f:00:90:80:ee:d0:84:fb:dc:
96:f6:1c:9f:88:c4:22:3d:bc:d9:3b:0f:57:65:37:f9:7f:49:
ad:47:e7:44:9b:b5:ec:52:f2:9d:73:7b:0a:3e:d9:07:46:68:
d0:20:ca:6e:2b:dc:53:58:d4:fb:f5:8d:90:86:58:bd:a0:0d:
50:e0:58:f0:84:a1:5b:c8:17:58:68:82:93:e1:9a:2d:13:4e:
d1:a8:5c:5e:cd:7e:b2:2a:03:c1:e6:ec:81:d1:eb:ae:ff:3a:
6c:a0:49:24:6c:9d:10:10:21:f1:ce:22:91:61:12:e9:d3:c8:
fd:83:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:49:39 2025 by rpki-client