Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
File: Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft (raw, json)
Hash identifier: MG5i1usZrX2I7SDj2WFVqj6fw/bTS8e6jMiU9sV8HT4=
Subject key identifier: 90:77:3C:BB:AB:CE:80:E6:D8:47:A8:83:DF:CD:9C:DF:E6:2D:18:CD
Authority key identifier: 5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
Certificate issuer: /CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Certificate serial: 0198D4E01D3017E3A62631CDE977F57F6A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
Manifest number: 0C9F
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl (hash: toywltU6jdMv/umHguP6vaGC1OV7y4HXkE6wmhX+8RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1d:30:17:e3:a6:26:31:cd:e9:77:f5:7f:6a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=90773cbbabce80e6d847a883dfcd9cdfe62d18cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:71:e0:06:8f:03:9e:6f:1e:d8:7e:1e:e1:
52:03:b8:be:87:2c:a3:f6:20:72:d0:c5:5b:5e:f8:
8e:6a:27:0b:73:b2:ce:5c:6d:28:d4:90:e4:b3:53:
a2:cd:b9:0a:d0:ea:48:84:e0:49:14:38:7d:32:38:
05:e4:b6:ce:8f:f9:b9:3c:6e:60:7e:46:99:b0:23:
d0:7f:72:2a:82:e1:9c:11:38:bf:8d:0a:b5:ae:74:
3f:4a:1b:8c:00:c3:a2:74:c5:37:db:3f:44:15:5c:
03:66:ee:ee:59:6c:07:d7:8c:08:f8:cd:fc:27:0f:
f8:4d:38:99:ce:5a:63:25:1b:a0:71:47:51:47:9c:
b4:7b:66:ce:2e:62:d8:74:db:56:0c:79:42:f0:a7:
55:d5:a6:14:15:80:be:86:0f:2d:c0:2a:96:75:f7:
ed:06:4a:3d:5e:2c:07:6a:9a:ce:29:2b:fe:9a:89:
23:93:08:63:be:42:e2:bb:1c:47:60:14:f9:28:54:
4b:b1:6b:a6:92:88:d9:66:d7:86:d8:5f:7d:75:79:
ca:a0:09:53:d6:03:03:f1:60:7f:ba:b1:15:cf:e2:
21:04:0a:1f:17:8f:0b:07:b3:f2:41:53:d6:c2:53:
c6:2b:85:31:71:92:60:1e:ac:96:6c:80:dc:90:2a:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:77:3C:BB:AB:CE:80:E6:D8:47:A8:83:DF:CD:9C:DF:E6:2D:18:CD
X509v3 Authority Key Identifier:
keyid:5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:78:07:ad:e5:8a:31:fa:f4:d2:fb:42:1b:ce:7a:bd:db:e1:
6c:5a:38:32:cf:2f:8f:06:6e:0d:8a:58:61:f0:0e:9d:05:06:
3d:c2:70:2b:0a:ee:5d:53:08:a6:00:e8:e0:1c:1c:62:32:20:
66:e4:2c:06:85:fb:27:f5:7a:5f:40:04:07:c7:d1:4b:21:56:
3e:33:6b:67:14:1b:56:7f:68:af:73:d3:bb:b7:d6:d3:95:c8:
09:e6:1d:f9:75:71:32:38:6b:68:37:1f:1b:99:49:7e:d9:63:
bc:1d:be:23:68:98:e2:f2:07:b7:fc:25:96:c0:5f:04:de:49:
85:78:ac:ae:e7:57:6a:56:eb:a8:bd:6b:b6:86:7e:8c:f7:dc:
f7:65:9a:4d:e7:d9:0d:df:aa:4a:9d:b5:f7:99:65:a8:79:c8:
97:5a:8a:41:d7:94:40:93:5f:02:66:a8:3e:cf:1c:c4:d4:c2:
ba:b1:e5:f7:c8:d8:39:8d:9f:fb:ed:5c:86:5c:49:40:fe:a8:
08:a2:72:f0:81:e9:ed:23:88:d5:99:02:ad:60:f1:7c:64:39:
65:32:43:f2:b5:7f:be:70:dd:b8:27:8e:11:1a:eb:88:6a:d1:
4e:e4:d0:9b:11:b0:3d:63:22:44:48:01:1a:1d:ec:0a:92:c3:
4e:cd:04:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:39 2025 by rpki-client