Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: nTDYEvveDWkxjf2WRN19kX33+WI1CE3SI9T7PRlrJz8=
Subject key identifier: 96:B8:64:9C:AB:0E:4A:36:6E:28:12:65:13:A3:20:C7:2E:79:31:2E
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 0197D662BBD1B0449B98FA357E88B5A9429E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 15C4
Signing time: Fri 04 Jul 2025 17:01:24 +0000
Manifest this update: Fri 04 Jul 2025 17:01:24 +0000
Manifest next update: Sat 05 Jul 2025 17:01:24 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: BjLovqDfKaXH8wBCVSExciZQpAErMcA8VLn+Zk9Eve8=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:62:bb:d1:b0:44:9b:98:fa:35:7e:88:b5:a9:42:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Jul 4 17:01:24 2025 GMT
Not After : Jul 5 17:01:24 2025 GMT
Subject: CN=96b8649cab0e4a366e28126513a320c72e79312e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:ce:33:98:c1:e9:d7:be:d2:ea:ec:76:53:
be:f9:fe:79:0e:9f:4f:09:00:fd:50:f1:a0:9e:0c:
98:6f:46:09:98:e2:86:d7:22:de:a6:b6:76:6f:d4:
69:d9:89:2e:58:cb:00:65:95:bc:62:64:0d:6a:8d:
8a:9a:f7:46:31:9d:af:e3:86:ff:5d:22:28:06:e0:
e1:32:34:df:1d:99:a7:92:28:f2:55:30:03:de:cd:
c4:07:19:2c:e8:f3:c2:93:a4:58:cf:aa:31:59:9f:
28:ea:d9:22:75:1a:d2:46:af:dd:4e:fd:24:84:cd:
0a:f6:64:84:7c:fa:93:ff:c8:6a:c0:29:0e:86:cf:
dd:36:77:1c:51:4a:3b:21:d5:c7:34:74:6a:cc:69:
15:ea:69:2a:42:ed:c8:6a:bc:62:4c:a4:ec:8b:a3:
f5:85:d7:69:6c:85:ec:e5:d6:f2:c8:f6:87:a9:64:
07:88:db:e5:e4:4f:bf:d2:a7:f3:f4:d1:72:f1:77:
65:36:21:6e:5d:35:be:44:36:b8:64:9d:27:6d:d7:
5e:af:f1:99:3a:27:40:20:fd:07:58:82:df:36:bf:
80:85:fa:eb:38:4a:98:69:ba:f9:c8:0e:5e:1e:0e:
a3:26:2b:8a:0e:f0:89:ed:bd:8c:44:9c:2f:0b:c8:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:64:9C:AB:0E:4A:36:6E:28:12:65:13:A3:20:C7:2E:79:31:2E
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:08:a6:73:15:b3:ef:35:b2:04:22:4d:7f:98:40:eb:58:aa:
05:0f:4e:72:2c:87:16:46:df:bd:cd:b0:c5:6a:92:b2:3e:e6:
a3:3c:86:e0:71:f5:11:20:d6:2b:e1:5c:9f:d9:25:ba:56:ad:
ec:ef:94:0a:1e:97:d4:63:8f:d2:eb:42:ab:64:3c:53:88:cb:
21:31:10:c4:c1:4b:7c:2c:78:bc:90:bc:8f:c8:e2:8f:38:3a:
62:da:dd:31:dc:85:88:5b:6a:68:af:ad:a8:18:1b:de:4f:3b:
7f:8f:94:3b:03:0d:39:ee:9d:b2:6d:dd:c6:4d:b8:b6:f9:a0:
60:cf:90:e0:f8:fd:79:af:99:40:5f:96:74:f4:be:68:ee:4f:
33:23:1d:1f:83:ff:de:4c:28:c3:e3:2e:01:f4:eb:38:b4:59:
9b:f6:c9:fd:67:09:db:67:dd:7a:78:51:3f:83:3f:79:35:db:
dd:1a:ff:95:3a:a7:90:98:b2:e9:ed:c8:bb:18:95:92:d4:87:
1f:f0:c9:e3:6a:39:c3:65:72:07:38:c0:43:ca:18:4e:4f:69:
f3:32:af:aa:ec:17:a3:29:2f:e1:b8:a9:fc:22:70:1c:80:a8:
a9:fc:37:85:38:89:2d:93:d0:de:22:2c:95:f7:a8:6e:39:df:
53:0e:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:54:23 2025 by rpki-client