Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
File: XVTR8F5RVk-oGdtyu47dOYeza74.mft (raw, json)
Hash identifier: 36TFimf9yi/++HqEnDvpzwlUGyBV1eRdwgv9ZT6jS/M=
Subject key identifier: 9B:89:CB:A8:E1:02:97:33:0B:0B:87:E6:08:DE:30:6A:5B:1A:AE:39
Authority key identifier: 5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
Certificate issuer: /CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Certificate serial: 0197B77C8884FEC2006E7B4E46B9B628183C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
Manifest number: 1535
Signing time: Sat 28 Jun 2025 17:01:21 +0000
Manifest this update: Sat 28 Jun 2025 17:01:21 +0000
Manifest next update: Sun 29 Jun 2025 17:01:21 +0000
Files and hashes: 1: XVTR8F5RVk-oGdtyu47dOYeza74.crl (hash: 5vDjjGBJCkxL0691Mtr2pXxLPBn+DQEoJYdH110azgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:88:84:fe:c2:00:6e:7b:4e:46:b9:b6:28:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Validity
Not Before: Jun 28 17:01:21 2025 GMT
Not After : Jun 29 17:01:21 2025 GMT
Subject: CN=9b89cba8e10297330b0b87e608de306a5b1aae39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:64:6d:14:b4:40:a0:fa:76:48:c7:9d:ae:
34:74:aa:33:37:24:df:09:9d:0f:57:c3:a7:ed:c6:
8b:de:cf:e8:ce:dc:f7:70:01:6b:f7:39:b3:93:83:
90:58:85:37:92:ed:2a:0f:2e:a0:db:a1:b3:c2:47:
6a:92:01:da:39:14:a8:4e:35:64:88:aa:6c:74:12:
de:e0:d4:e1:c6:f6:d5:4f:1b:9f:1f:30:ca:5b:ee:
9f:52:a0:2c:08:15:68:a2:1b:fd:13:89:c2:3a:08:
77:e2:bb:3c:fb:a7:bf:f8:5f:e0:98:fe:38:c8:6c:
e5:05:57:29:24:96:4a:4c:97:8c:c1:e1:39:a0:52:
61:67:f3:1c:77:4e:ae:87:62:e6:98:25:3b:5f:ab:
85:f6:54:d6:cc:f1:9b:49:2f:f3:64:e2:1f:3b:21:
43:65:a6:c1:cd:a1:2b:60:69:74:f8:2f:f7:ef:04:
96:6d:19:15:9f:71:fb:bc:1d:ac:8a:c0:dd:72:6a:
e4:36:f9:ef:19:71:2c:19:ab:32:97:4c:b2:61:1e:
4f:63:4a:c0:46:ec:be:2d:50:f7:9e:4a:05:92:f9:
6c:72:08:be:97:ba:ff:bc:b7:31:e6:3a:d1:16:2f:
17:42:db:1a:aa:d7:21:d6:0c:0b:41:aa:38:66:ea:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:CB:A8:E1:02:97:33:0B:0B:87:E6:08:DE:30:6A:5B:1A:AE:39
X509v3 Authority Key Identifier:
keyid:5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:70:88:b6:a4:36:19:32:00:b5:bd:50:16:9f:76:d4:92:cc:
72:dc:41:10:06:06:79:04:d3:ba:6e:23:16:a4:d9:df:79:53:
45:ec:eb:7b:b7:89:51:59:95:36:8c:01:58:62:67:e1:a8:1b:
cb:a3:ce:8f:43:67:fe:ec:ba:60:35:c9:0e:69:50:af:4d:3a:
82:40:47:eb:2d:be:fc:4c:48:56:ce:e4:74:ad:01:c1:0b:44:
23:b0:dd:25:c3:0e:6a:a5:31:29:b0:71:d4:d9:00:c7:0c:9e:
a5:8c:e2:e9:4e:04:eb:14:d8:30:9d:c2:97:1f:a2:8f:5a:c4:
a0:44:32:13:ca:a2:5e:f2:57:ce:ff:f6:0b:67:48:c1:5b:92:
47:e5:f4:9f:e1:73:85:78:e9:83:9e:f5:87:87:d0:58:d7:d5:
98:e6:71:91:42:ef:23:06:be:ca:18:f3:8c:ca:d1:1d:12:d4:
4a:6c:c4:e0:f5:e9:46:c9:2a:3b:9d:51:37:87:2f:dd:50:cf:
eb:6a:ef:d8:8f:20:f4:32:79:2a:36:dc:01:b1:28:99:9d:ca:
a9:0e:9e:82:0c:a3:38:95:e0:26:72:81:26:ff:ee:0c:06:1a:
e3:f7:fb:a9:74:6a:08:d3:32:74:dc:f9:e7:a2:a9:f9:0f:3b:
60:24:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:43 2025 by rpki-client