Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
File: xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json)
Hash identifier: mqnhCJgbXZcgxCid+5/uyti9FT8TkSsJ7NL8ssmGOY0=
Subject key identifier: A2:80:5A:0C:6A:ED:E1:74:BF:C3:65:C8:E6:A2:E0:67:25:54:07:40
Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
Certificate issuer: /CN=c54a6558d6923be429d9389531adc1008795270b
Certificate serial: 0199FC8F63E90912F5DEC5D86FC98D9A5F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
Manifest number: 0DC2
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: 2Wp82DoGTweceSpg+FscRS7VsOpNIyvdTsifIMmL0mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:63:e9:09:12:f5:de:c5:d8:6f:c9:8d:9a:5f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54a6558d6923be429d9389531adc1008795270b
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=a2805a0c6aede174bfc365c8e6a2e06725540740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:57:68:98:59:78:68:e5:3d:67:88:d8:e5:
8b:81:16:c5:a9:7e:bc:63:20:ac:1e:85:b4:38:94:
84:51:0f:bb:61:09:33:57:85:c9:e4:f0:bb:8c:3b:
d8:b8:d2:0c:da:2c:05:57:52:e3:58:ee:5b:35:0e:
df:76:57:c0:a3:8e:61:65:cc:23:68:6c:36:61:0a:
5e:8f:40:fa:0c:d6:72:b6:06:06:78:7b:80:4a:99:
71:91:14:c7:ce:75:a3:c9:f3:14:7d:4f:74:b4:2d:
ee:97:97:b9:dd:4a:be:49:a0:ec:70:61:ba:06:f3:
c2:f6:7b:0d:8e:7a:6c:a2:eb:89:5f:c3:2b:c0:23:
dc:2e:a7:24:b2:ab:d4:69:0c:03:09:2c:37:c6:b6:
41:0e:0a:cb:98:ce:e9:bb:75:fb:4e:3c:3b:2d:e9:
60:c1:13:f7:94:d1:47:8f:0f:20:54:35:dd:5f:af:
84:45:88:cd:c9:ad:0f:ca:4f:9a:ce:8f:4c:54:f2:
53:ef:f8:5d:48:b5:76:4b:55:ac:da:db:79:c9:bf:
01:12:56:08:c9:c9:98:ac:48:11:6a:57:08:dd:ab:
33:89:ee:72:8a:33:d3:09:c0:d1:da:10:fd:5b:de:
23:23:97:73:f5:f5:a2:2f:6a:0f:f1:fd:64:66:d7:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:5A:0C:6A:ED:E1:74:BF:C3:65:C8:E6:A2:E0:67:25:54:07:40
X509v3 Authority Key Identifier:
keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7e:1e:93:19:62:3e:9b:f0:3c:45:fd:91:c1:ef:fb:ba:39:
72:44:99:e3:90:4d:5e:72:cb:32:2a:db:90:76:42:4b:88:a6:
85:b6:47:10:16:39:ac:da:64:95:94:73:ad:ed:ea:bd:8c:6d:
4c:57:ed:77:95:63:c0:fe:11:21:2b:9e:4c:fe:ce:80:e0:d3:
ee:cb:7b:e8:c9:35:ff:01:36:3a:bb:65:17:31:23:98:f7:f6:
61:d1:ec:70:fd:d5:90:ed:0c:ba:16:5f:bc:40:f2:38:02:2e:
95:cd:66:9c:94:79:bb:ed:38:0a:5e:dd:74:94:85:cf:06:c8:
9f:ea:ed:b4:d9:86:a3:bc:1c:ed:25:93:83:43:8e:2e:bb:25:
9c:7d:a3:30:e7:af:9b:3a:1e:95:29:2b:5b:c1:74:74:77:a5:
4e:c8:ad:33:12:1e:09:15:b7:a0:f2:72:7d:6c:98:0c:0e:d5:
85:5e:36:9e:36:5c:ab:90:23:79:16:f3:52:52:68:1d:f3:cb:
63:e9:4a:af:a6:c6:21:4a:b8:fd:7b:77:e3:08:68:1e:a5:1a:
ed:6b:1c:33:93:67:a0:e0:55:40:41:b7:29:47:c8:65:5d:80:
73:71:4d:53:62:df:36:d4:48:80:01:85:97:f5:ba:1e:20:ae:
a9:cb:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:33 2025 by rpki-client