Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier: qC+RuoBMuIJS0z1/TrQCNxAddYkV0pX/3sDtCAy3akk=
Subject key identifier: C6:3D:88:F1:A3:0F:3F:EB:68:C2:16:FE:5E:E1:52:5E:D4:A6:87:BB
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial: 0198D51578967362D60AE9E598C47F72F18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number: 0421
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: jfE+TkBKXGKd4a/sq6LdBQBNrn6RZcqswO7kSNgUAvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:78:96:73:62:d6:0a:e9:e5:98:c4:7f:72:f1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=c63d88f1a30f3feb68c216fe5ee1525ed4a687bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:7b:52:27:bb:63:80:84:9d:84:48:fe:aa:
88:f8:91:42:a9:aa:ba:c4:b1:5d:26:a5:04:39:88:
82:51:70:a7:48:3f:ac:dd:52:46:61:12:b9:e9:c6:
91:15:1b:d4:4d:64:bb:8e:db:8e:4f:df:72:d9:93:
cd:36:d7:35:18:6f:37:b1:e1:12:e9:61:33:aa:db:
df:05:5b:9e:f5:1a:6d:11:5a:6d:b8:0a:f5:3f:b9:
fe:05:44:8b:ca:02:ae:a2:64:b7:c2:03:e2:95:38:
89:cf:f4:77:d1:8b:7a:9a:14:b1:f6:4d:bc:4c:b1:
1c:10:5b:77:ab:fd:f6:46:13:0b:c6:fb:77:7c:6c:
d1:1e:cb:ab:71:1c:68:5f:4b:f5:e0:cc:4e:33:42:
7b:e5:30:6d:1d:69:4f:3f:2a:86:31:67:eb:bc:69:
09:12:eb:42:07:d4:db:55:a4:95:4f:5c:27:4c:c0:
d2:ba:9a:35:42:73:7c:da:08:eb:2f:05:a9:da:fe:
96:8f:81:50:76:fb:c5:dd:d6:3e:e1:67:69:61:c2:
a2:61:19:ee:a8:b7:51:e2:a0:32:39:f4:45:e3:a7:
45:f3:f4:f9:70:fb:9c:a8:d0:0d:21:a7:38:b4:1f:
e0:7c:8b:0f:61:4d:de:eb:e6:64:d1:c3:8c:fe:a5:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3D:88:F1:A3:0F:3F:EB:68:C2:16:FE:5E:E1:52:5E:D4:A6:87:BB
X509v3 Authority Key Identifier:
keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d1:74:af:c0:7e:a5:8f:9d:ab:93:df:a1:84:f0:00:9b:ab:
1a:42:05:95:63:de:86:77:f6:fd:9e:67:46:98:d0:a4:01:8b:
b1:80:cd:e9:62:f1:2c:e7:72:13:8f:a0:68:8f:8e:a1:d3:b8:
b7:09:14:fd:89:d4:09:76:14:41:3e:76:60:b3:ea:31:b1:3d:
14:a4:aa:6b:7c:18:4f:37:94:06:4d:db:e8:c2:68:d9:02:e2:
6c:93:f6:24:8f:65:ee:f3:a5:1b:ae:dd:f3:50:80:dd:fb:b7:
95:6b:d3:44:04:f5:6b:92:51:69:d9:e4:d6:2d:ff:f3:0b:a6:
a7:a7:c2:63:e6:18:46:4b:e7:97:0b:2d:52:2d:78:88:6c:2f:
28:82:df:a5:63:cf:ac:82:a0:6f:eb:bf:35:fb:7a:42:57:5e:
71:3d:6d:34:f0:0e:d3:4f:f7:b7:fc:41:d2:6f:01:92:42:e5:
45:8f:39:7b:ec:66:70:d9:45:6c:e6:94:b7:7c:fc:de:ab:92:
65:09:18:e9:e9:8e:98:06:af:b0:5d:bc:35:b5:4a:09:5d:39:
9a:92:75:57:8c:7a:d5:70:86:ed:ca:4a:25:36:fb:ff:45:04:
83:83:b8:74:c7:1e:c4:84:98:c8:46:5b:dc:eb:11:11:50:41:
e3:2f:8d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:18 2025 by rpki-client