Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
File: X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft (raw, json)
Hash identifier: pXaAF4RAXU+UpVmZu+WPMKxWxBK09TcAKqJGAJhUQL0=
Subject key identifier: 53:97:54:D1:50:77:73:88:F3:52:97:2F:00:D0:63:20:03:E4:1E:46
Authority key identifier: 5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6
Certificate issuer: /CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6
Certificate serial: 0198D69885081E1DEB6AEA3633A638118ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
Manifest number: 0421
Signing time: Sat 23 Aug 2025 11:02:56 +0000
Manifest this update: Sat 23 Aug 2025 11:02:56 +0000
Manifest next update: Sun 24 Aug 2025 11:02:56 +0000
Files and hashes: 1: X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl (hash: opdvak1Tn1zbld2OlsYwlTaldBZIdQeRghQqiYElfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:85:08:1e:1d:eb:6a:ea:36:33:a6:38:11:8e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6
Validity
Not Before: Aug 23 11:02:56 2025 GMT
Not After : Aug 24 11:02:56 2025 GMT
Subject: CN=539754d150777388f352972f00d0632003e41e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:d8:eb:6c:81:70:f4:8b:4b:26:3e:8a:a3:
09:54:9e:78:2e:90:8b:d3:98:5f:56:25:db:fa:f5:
d8:80:a7:83:07:9a:c1:f4:73:e5:b2:a4:da:2d:90:
e0:6d:8c:4b:92:df:a1:28:ba:5f:84:12:46:bb:c5:
09:76:0b:73:a4:8f:bf:63:78:9c:10:d2:16:d8:15:
73:66:40:c3:df:4c:47:af:53:35:3e:f5:59:fd:a7:
ba:8b:a8:63:67:2e:f2:60:5e:a8:2d:e3:32:11:5a:
e6:4f:4d:5d:97:8c:22:3d:48:31:4a:00:23:c7:a3:
fb:6b:03:7f:31:da:7c:d1:12:17:de:75:1c:db:95:
64:1f:e1:bb:b1:95:d6:a2:38:3d:80:2e:45:62:be:
d4:81:65:9f:d4:04:23:56:18:a9:da:d8:81:5e:00:
0d:f1:72:12:4f:09:fa:dc:dc:a6:cb:49:5c:53:34:
ff:32:34:7a:e8:f0:e6:8b:47:a5:2e:a8:8a:8a:67:
f8:b8:e8:13:6b:a2:9d:cb:47:04:18:d5:a9:0d:cb:
db:bc:97:f0:d3:1a:81:99:e8:31:71:7d:44:74:26:
3b:10:96:ca:4c:af:9e:38:81:ea:ef:8f:8b:b3:22:
d1:b5:4f:58:59:1c:2d:ba:e9:a7:89:41:ec:b0:29:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:97:54:D1:50:77:73:88:F3:52:97:2F:00:D0:63:20:03:E4:1E:46
X509v3 Authority Key Identifier:
keyid:5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:52:0f:77:02:3d:15:1e:e5:e1:40:3a:bf:31:df:a3:0f:69:
df:f0:0d:33:3e:df:1e:72:0b:59:d3:d3:a3:f5:bb:43:4c:92:
3c:e2:ca:b8:18:53:fb:3e:87:d6:9c:c8:85:f5:5f:d3:ac:95:
a7:1e:b5:d6:66:9a:3f:81:d6:12:2a:9e:5c:73:fd:b0:d6:9c:
25:3d:1a:9d:d6:af:d7:bb:15:d2:c2:2c:0f:37:13:5c:8a:e0:
5a:a9:d4:00:ec:9f:8b:8b:1c:27:35:e0:c6:7e:7a:8d:20:b0:
33:9d:6d:d7:9d:a7:65:c7:78:8d:e7:78:fb:38:a8:7d:df:a0:
de:c8:bf:4b:ad:db:7e:a6:d3:77:77:07:52:bd:d4:f3:60:83:
e4:e3:b9:46:86:76:3c:ee:85:2c:b6:83:83:b6:99:f2:9d:c2:
0d:c9:db:8d:2f:9d:30:0b:2d:ee:a1:8f:e0:dd:19:d9:dd:77:
ff:e3:6b:0e:95:2b:b1:32:b0:ba:f5:c3:9b:21:58:8c:32:c1:
e5:6d:0b:9b:93:10:14:52:b5:ab:3f:bf:1f:ff:f2:49:25:e6:
00:7f:0c:5e:be:a8:c8:13:7e:03:36:72:de:08:3d:72:aa:d1:
13:23:0a:96:69:f0:c7:ea:5b:2e:8d:a0:9c:a0:f2:83:df:ac:
26:79:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:37 2025 by rpki-client