Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: zaoNUpzD7E+6TMIquDYLcx35uIVhb93ygbK8CkqZT/c=
Subject key identifier: A1:17:A8:5E:E8:0C:23:1D:2F:6B:94:4E:DB:AC:DB:AB:C5:CF:8D:0D
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 0197B7EA96512913A6EE80495D29AC7F40E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 14A5
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: lfoDnFRfu57xdwXa/o74kWAeru5nlflcNTzZ8S2RTiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:96:51:29:13:a6:ee:80:49:5d:29:ac:7f:40:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=a117a85ee80c231d2f6b944edbacdbabc5cf8d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:88:bd:30:29:99:83:67:00:f6:0e:7d:e1:
7c:82:18:24:5d:18:8c:a1:d6:d4:86:f0:50:d3:60:
b0:99:79:7b:87:51:73:eb:64:92:62:ec:a1:af:5a:
2b:f4:02:06:df:31:12:84:ba:df:e2:c4:2d:44:ea:
66:3a:3e:87:6d:43:7c:9e:e0:32:80:77:c2:6c:89:
27:91:6f:11:1e:fe:2c:52:c6:01:b1:0d:aa:cf:e4:
64:ca:ea:b7:47:0f:85:e0:3e:76:e1:c6:36:bf:a7:
5d:55:a4:f8:24:2f:45:77:77:5c:76:6f:fe:1d:a8:
e5:0b:76:f4:ea:28:3c:ed:0a:ad:84:ec:b8:18:ed:
5b:25:22:63:0c:97:eb:86:47:e6:13:05:6b:03:a8:
a8:4a:b5:50:28:db:b2:b9:c0:85:9f:ef:dc:db:ee:
13:b0:07:dd:fd:d2:44:69:53:23:0a:e4:3c:b5:d3:
f2:b3:68:12:c5:0d:ca:ff:03:99:b5:96:cf:c6:1c:
23:91:70:c9:4b:1c:39:a9:1e:b5:1c:5c:ae:88:ef:
ae:aa:9d:b0:9b:3f:c2:30:2d:23:d3:4a:26:f1:14:
0b:3f:e6:4b:a4:cb:a5:ac:3a:40:ec:9c:e3:a4:33:
f7:61:6f:38:7e:b7:50:6d:a1:6e:dc:ce:5e:5c:4c:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:17:A8:5E:E8:0C:23:1D:2F:6B:94:4E:DB:AC:DB:AB:C5:CF:8D:0D
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:76:d4:ac:51:8c:37:89:ca:61:5b:2b:b2:dc:cf:aa:db:49:
e4:5e:16:ba:35:79:1a:da:58:0f:a4:cb:ad:cc:70:32:46:55:
88:44:1a:38:06:6a:6d:62:8c:87:b1:02:f7:f8:b4:1d:20:da:
6b:c4:9e:2e:ea:01:ea:d4:1d:07:55:08:e8:15:ed:83:e8:17:
76:ff:36:c9:89:21:1b:26:fa:13:85:00:a9:79:96:55:72:f3:
31:40:62:7a:57:aa:0e:b5:ea:c6:81:f5:35:ff:0c:58:c8:82:
fc:4c:e7:fe:b4:e5:6c:55:6e:9b:3d:bb:e2:ae:a4:e4:9a:77:
d0:71:c0:db:ed:cf:b4:d9:40:54:4a:1c:35:53:92:a1:43:60:
84:6a:68:3c:c5:3b:50:03:ed:e5:69:5b:33:4f:18:54:85:4d:
14:80:06:03:71:c0:a7:6c:e9:1f:80:6f:7f:eb:f7:e0:58:78:
54:f1:1e:84:0d:2d:1d:00:6a:e5:2c:e8:da:1e:e5:5c:a5:11:
52:be:1c:d1:a4:3d:56:57:31:9f:47:cc:6d:3b:d0:f9:89:81:
4a:19:c4:bb:da:81:f4:10:0e:da:cf:93:62:83:c5:49:cc:72:
74:01:b9:7a:26:74:d9:49:b9:43:7f:49:cb:c4:fe:a6:8f:73:
b6:b1:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:40 2025 by rpki-client