Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier: IqqhBXHqxKri2JLfk9Y+04knPOdeqZOcxtcUBrzFgV8=
Subject key identifier: 73:68:1F:59:76:A1:EF:1E:5D:E1:CF:51:FA:C9:AD:F4:22:06:17:FB
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 0199FBEB20EA77A26745B5537ACA303C7FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number: 1302
Signing time: Sun 19 Oct 2025 10:01:54 +0000
Manifest this update: Sun 19 Oct 2025 10:01:54 +0000
Manifest next update: Mon 20 Oct 2025 10:01:54 +0000
Files and hashes: 1: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: zspellzV0qy0darTZMkhpL/HTHNEd2cfVL+ObGCZfPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:20:ea:77:a2:67:45:b5:53:7a:ca:30:3c:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Oct 19 10:01:54 2025 GMT
Not After : Oct 20 10:01:54 2025 GMT
Subject: CN=73681f5976a1ef1e5de1cf51fac9adf4220617fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:4b:34:88:cc:12:28:4c:0d:54:4e:ea:47:
69:32:27:76:62:e5:6c:c1:a8:e9:07:bf:50:27:ea:
c5:5b:2f:5c:5e:a4:2f:a5:4c:08:0b:ac:9c:4a:66:
05:31:37:49:0b:07:ef:99:06:34:44:34:ac:a7:59:
28:40:1d:a0:5e:4c:48:10:d8:81:d6:3e:b0:81:32:
14:11:f1:62:6c:74:75:16:8b:9c:3e:90:a9:ef:9a:
f3:f7:79:f7:3d:8c:82:d3:5e:91:87:85:62:e1:3a:
a3:8d:e9:ef:f2:1b:3f:33:2b:7d:a8:22:9a:fd:c9:
97:03:a9:24:f2:db:04:1d:f0:e4:52:88:9a:12:41:
90:b4:d1:87:c8:95:da:29:9a:c2:53:04:28:17:a9:
3d:51:03:d6:60:e9:ff:2c:43:e5:c5:67:37:bb:03:
9e:5e:ea:93:0d:c0:cc:2f:d8:c1:63:8f:59:04:69:
c8:2a:aa:e8:cf:c4:45:d9:58:18:f1:47:35:36:74:
a6:87:c6:cd:84:bc:d4:fd:b8:92:f2:70:7f:40:cd:
ae:67:70:9f:41:99:a3:24:27:fb:3a:60:ee:ab:ed:
a5:ca:0f:c9:eb:13:13:15:01:2f:56:1c:7c:58:ea:
ee:88:56:4a:4b:24:ed:78:d8:27:2d:f8:2b:00:5e:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:68:1F:59:76:A1:EF:1E:5D:E1:CF:51:FA:C9:AD:F4:22:06:17:FB
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4f:c5:13:e5:27:71:b3:17:12:4a:15:35:b2:76:52:54:69:
fa:38:7b:fa:7c:d3:07:d7:3b:4d:c0:3b:5b:2f:da:06:24:87:
86:00:55:57:a7:4d:ae:1b:5d:a0:08:da:4b:cc:c5:60:b0:4a:
63:8d:52:02:8d:8e:e5:8a:82:0e:1e:3d:fd:c7:88:c0:2c:2f:
03:26:13:14:3a:32:b1:a9:55:31:35:79:3c:15:b7:c6:49:4e:
94:bf:76:2f:2c:58:a0:b8:f9:c9:14:47:b3:c4:3d:40:86:33:
7b:d7:6a:ef:d1:cf:09:ed:08:ca:a4:34:b7:6a:c0:06:4b:11:
aa:06:cc:e9:3c:d9:1b:9a:4b:fa:d4:cf:b2:18:bf:a7:d3:07:
d1:df:df:b2:70:13:e5:81:5a:73:5b:43:66:cd:4c:65:35:1c:
52:05:7d:5c:90:9d:00:0f:25:0c:ce:d0:3a:0c:52:03:39:f4:
37:3b:30:d0:46:9d:70:6d:f3:4b:f9:ae:d8:58:78:05:ad:2d:
73:19:68:5a:a0:c8:ed:de:73:49:75:21:82:c6:d7:b9:b9:7f:
4a:77:bb:d2:30:5f:1c:a5:be:2f:60:9f:e0:05:c3:3a:89:8b:
b0:b4:52:7a:d4:60:67:0e:c5:6b:26:eb:e5:b6:03:d3:69:9d:
0c:47:02:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:06 2025 by rpki-client