Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: QeXD/niwO9EGWQ5qhiwQ9/dbwjQ2d0FQ7r3wojjrS9s=
Subject key identifier: 14:E1:E1:8D:E3:A1:85:83:34:47:40:ED:62:6C:6C:F0:69:DB:9D:63
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 0197B7457E1C4BB2388B9736D782B5E9B79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: Od+VcCf+06kXBXi1xkEQZy21wrBVrsql7sYh8dcmS7w=)
2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7e:1c:4b:b2:38:8b:97:36:d7:82:b5:e9:b7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=14e1e18de3a18583344740ed626c6cf069db9d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:d2:b1:ce:27:dd:eb:4d:a1:9a:12:70:ec:
88:72:c0:28:73:25:44:65:20:dc:2e:2c:b7:1c:5d:
bf:16:e5:f8:08:e2:9f:09:6c:c0:75:85:5b:a5:f0:
4c:af:44:30:30:b5:e8:e8:dd:6b:ee:73:6c:9c:81:
07:21:70:19:76:16:ff:b7:fa:4c:53:88:5a:7b:2c:
ff:b2:57:83:8b:4d:18:71:48:04:05:9d:d0:7f:6e:
d9:e2:34:fb:df:c5:35:47:de:28:0f:cb:90:b0:ca:
68:ca:b0:56:ea:94:08:e7:5b:f7:10:f0:e9:da:29:
68:b4:9e:bf:c4:45:5a:ed:87:99:a2:b8:a6:be:47:
a9:41:7d:1f:b6:98:7c:40:6e:82:a9:1b:ca:d3:09:
de:2a:cd:5e:82:90:59:92:42:b3:0f:be:72:d1:79:
39:37:fa:2b:d4:16:65:1b:4f:7a:e9:12:7c:22:84:
c2:01:52:24:4a:64:de:ba:c7:4c:e1:bc:3a:08:0e:
64:4f:a3:75:4e:b3:f1:1b:ef:c0:9a:b9:a5:8d:87:
43:5a:07:d7:1f:dc:f8:84:8a:a8:5c:f1:64:7c:13:
e0:4d:f2:01:a6:bf:8b:7f:66:00:f8:b4:28:e8:0d:
c4:6e:20:fc:4c:cf:32:c9:bb:17:5d:02:72:14:0a:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E1:E1:8D:E3:A1:85:83:34:47:40:ED:62:6C:6C:F0:69:DB:9D:63
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fb:1e:03:0a:27:6b:b5:09:e5:82:71:a9:bf:eb:bb:47:70:
07:78:21:40:e5:08:7c:5f:5b:57:16:ee:01:f6:10:b7:94:66:
a3:94:ab:5d:40:95:ca:68:14:57:ec:e3:fb:14:cd:5f:9d:d9:
3a:ad:bc:17:df:d2:a5:a5:ac:22:14:7a:a0:a0:62:ca:6a:b6:
12:88:6c:27:2d:b1:00:26:08:ad:52:42:25:6d:fd:27:c8:99:
f6:d3:68:43:2a:90:85:ed:1b:5d:06:e1:db:70:67:6e:88:29:
6d:1e:8d:40:f5:5e:d3:ff:32:8a:2e:d0:27:86:95:84:a0:a2:
c9:1a:98:c2:e4:c2:59:89:6c:da:44:1c:f6:ba:22:70:54:59:
f8:b1:61:9b:90:53:cb:10:d5:71:74:2e:09:79:b9:72:d1:c8:
71:50:c6:af:02:aa:a9:1e:92:9d:91:f9:55:51:8a:b9:57:9c:
c7:77:68:31:84:56:6e:0e:9e:ce:9f:d8:41:09:28:64:b4:fb:
26:4b:2a:64:98:9e:ce:a0:b0:a2:d2:ab:37:ee:6d:4e:8a:df:
72:8a:dd:c2:b4:66:3f:c9:b4:99:d6:29:43:2c:c9:65:fb:da:
b1:4e:bc:0e:a7:ce:be:8e:76:68:d2:a1:74:f4:32:45:c5:e8:
ae:e9:da:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:42 2025 by rpki-client