Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
File: xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft (raw, json)
Hash identifier: XzxAGgMi3/GD49Cim6lFcn07lmWV39GvD0fuAdYt73E=
Subject key identifier: FE:01:CE:9F:8A:AE:F0:F1:C0:31:DA:B0:AF:FA:6A:DD:24:45:BB:0F
Authority key identifier: C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0
Certificate issuer: /CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0
Certificate serial: 0199FBEAE0DBB8A721F7D0404827ADF2FB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl (hash: DnV4Q2Do0RITS0htr+u8iT3jVyi/QY+vrCMrb1toWaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e0:db:b8:a7:21:f7:d0:40:48:27:ad:f2:fb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=fe01ce9f8aaef0f1c031dab0affa6add2445bb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:2c:c0:5c:18:99:2a:14:08:89:17:f7:27:
8b:46:33:df:7f:89:1b:34:4b:be:59:73:4e:db:03:
42:8e:55:a5:cd:29:a9:1e:be:c8:a7:20:f6:ca:6d:
55:ab:78:18:fd:13:7c:90:cd:df:0c:db:2e:30:c9:
50:e0:44:ba:5d:2a:c0:c0:e6:2c:fd:ed:a7:3a:41:
01:35:8b:63:f7:49:3e:dd:d2:1f:86:53:f1:07:b6:
6d:35:23:53:d0:2f:13:c1:3a:94:59:27:0a:3c:23:
ee:b4:e1:a1:47:fb:3f:ad:f4:a4:ed:26:73:1f:0e:
26:7b:dd:36:81:0e:a8:c2:30:55:e2:1d:1d:bb:a8:
cb:ac:96:23:8d:2b:25:c4:01:36:64:76:9b:44:cd:
8a:cf:3f:b7:12:0e:cb:1e:9b:9c:c2:e7:59:3d:d0:
0b:d9:3f:8c:1c:28:00:83:72:5a:48:13:51:45:9f:
d9:27:6a:e7:4b:a0:f3:86:00:55:c2:0b:52:ea:cf:
c0:b6:42:35:2a:e3:45:27:34:79:74:3f:48:00:7f:
20:09:88:d2:63:15:bc:2c:f9:6b:d5:02:af:21:53:
9a:a1:7d:6d:4b:1c:6e:96:21:ff:5e:53:56:d5:4f:
7e:d6:92:52:ea:ba:3d:71:3a:b2:a3:25:91:73:72:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:01:CE:9F:8A:AE:F0:F1:C0:31:DA:B0:AF:FA:6A:DD:24:45:BB:0F
X509v3 Authority Key Identifier:
keyid:C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ab:ba:ee:4c:c4:2a:96:3a:cc:62:58:fd:bc:5f:b4:78:32:
05:4d:0e:ba:09:30:ec:20:2c:6d:85:cd:d6:ed:5d:38:b3:91:
82:c6:66:3d:82:25:81:a6:00:f8:47:9c:73:7f:fb:e1:f4:9f:
0b:15:ac:07:d5:86:c4:f8:5b:62:1f:08:4a:3b:a0:2f:77:e4:
df:43:01:b9:2c:24:03:6f:3c:31:de:10:a0:c4:50:c7:22:66:
3e:d5:a2:02:d1:a0:62:68:08:bf:58:36:06:57:d8:ca:66:c9:
ed:ce:ed:69:08:0c:5c:24:75:29:e5:6f:c9:51:dc:d3:0a:42:
74:11:31:92:4d:b6:50:65:84:5e:a5:9b:d3:46:e2:ba:fb:ab:
00:41:7f:a4:0f:77:65:6d:40:7a:19:5a:ac:95:cb:75:d2:4f:
68:09:fb:a1:ac:b4:60:82:e8:af:8a:7d:fa:cb:f8:4d:90:7b:
42:e6:05:46:0a:02:2d:66:ad:4d:22:7c:90:7e:d1:7d:f0:33:
c8:59:93:16:b0:53:9c:cd:8e:b4:d8:70:8f:8a:5f:f3:26:97:
76:5a:37:fe:ae:87:d0:87:03:6a:6b:df:1b:40:9f:26:4a:8e:
c8:b5:78:b7:34:db:0e:36:9d:0d:ef:b0:71:f3:bf:c3:93:6c:
ba:d6:a4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:41 2025 by rpki-client