Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
File: XVTR8F5RVk-oGdtyu47dOYeza74.mft (raw, json)
Hash identifier: 94kuFUEwlGaPJybWPCo0Ko+0etVhE/eQSSdjBpTDRT8=
Subject key identifier: 6F:A3:A3:DC:6D:AE:36:3C:51:D7:A2:77:4C:F8:40:CD:FA:BB:83:80
Authority key identifier: 5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
Certificate issuer: /CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Certificate serial: 0198D73AEDF7892DECE64540FC6535E4958E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
Manifest number: 15CA
Signing time: Sat 23 Aug 2025 14:00:20 +0000
Manifest this update: Sat 23 Aug 2025 14:00:20 +0000
Manifest next update: Sun 24 Aug 2025 14:00:20 +0000
Files and hashes: 1: XVTR8F5RVk-oGdtyu47dOYeza74.crl (hash: /RAf2xIGR7Yq57b8DPxp2Jyr5Gn2HNbsZ83hM4bwZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:ed:f7:89:2d:ec:e6:45:40:fc:65:35:e4:95:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Validity
Not Before: Aug 23 14:00:20 2025 GMT
Not After : Aug 24 14:00:20 2025 GMT
Subject: CN=6fa3a3dc6dae363c51d7a2774cf840cdfabb8380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:5e:a7:45:2c:37:39:b1:28:d3:b9:1c:4a:
bd:10:19:51:2c:2e:24:69:1c:12:d7:46:9e:9f:d5:
ac:a8:be:9d:07:86:10:61:2b:fc:c2:6c:0e:79:06:
12:30:88:d0:47:9b:93:3d:2a:59:3f:48:a8:c3:94:
e7:45:e0:d2:a1:45:25:d0:52:d0:cc:0d:70:09:e6:
4c:5f:de:66:43:7d:b5:77:19:49:b8:d7:ac:77:8e:
de:bc:18:97:34:38:ca:90:cc:cc:95:65:43:78:a2:
d2:7b:b5:a4:26:10:ce:94:fd:5b:e1:a8:41:75:9b:
c1:a2:dc:43:83:64:df:7f:78:95:ee:b5:75:b6:17:
d8:ca:b5:76:47:43:50:15:91:17:de:af:46:df:5f:
f8:05:eb:27:37:f1:a0:c2:14:56:d9:a4:06:63:ac:
18:2b:61:8d:a6:ec:30:58:ea:b1:f2:ad:56:b3:52:
f7:11:13:bb:95:1f:05:af:3d:9d:68:70:f2:22:dc:
08:c5:31:3e:d9:51:95:fe:cc:a1:3a:12:42:12:8e:
68:27:e3:39:8b:d9:c8:8d:3d:93:6b:fd:de:08:d1:
cd:13:b1:ac:c7:b9:44:6e:13:b6:48:ed:05:88:29:
ed:97:a3:25:e5:76:73:4f:97:b8:1e:5e:dc:dd:f0:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A3:A3:DC:6D:AE:36:3C:51:D7:A2:77:4C:F8:40:CD:FA:BB:83:80
X509v3 Authority Key Identifier:
keyid:5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:51:a9:fb:da:f4:55:66:cd:8c:29:00:28:b9:89:b0:80:ab:
21:8b:03:d8:24:61:32:9c:45:02:62:f1:2f:c8:e7:ff:53:ed:
9a:9e:00:15:aa:43:f2:c1:27:10:ff:e8:43:db:c0:c3:60:82:
94:8f:84:92:1b:67:1f:49:40:5c:6f:68:8e:a3:66:d0:0d:e6:
0a:32:f2:0f:ea:c9:c5:c2:2e:08:b5:fc:62:f6:2e:dd:9f:91:
71:0a:ac:d1:67:b3:93:ed:1e:84:61:85:66:0e:e2:db:10:35:
cc:70:68:cd:7e:38:64:31:91:ff:a7:7d:b3:03:52:a3:51:6a:
ae:71:bf:c0:c6:26:84:f7:af:77:58:fa:35:f2:c9:fd:a3:41:
56:17:99:95:14:ba:02:f1:00:ec:cd:2f:1a:95:1d:ae:6f:d7:
e4:9f:67:ef:b6:be:d1:59:6e:82:3c:a3:b6:8d:ab:e4:ef:38:
79:63:24:35:45:18:1a:46:f1:96:48:67:16:1f:62:45:72:33:
36:a4:ce:f3:ef:70:32:d8:4d:43:0f:06:98:12:17:ce:8b:ae:
1b:68:f2:1b:a6:8d:8c:bb:38:8e:b4:1f:5e:2e:63:0c:af:ed:
bb:73:ed:16:ab:c0:3e:88:c2:e4:e0:6a:2e:36:5a:95:9f:5f:
db:f0:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:11 2025 by rpki-client