Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: CxLEzQTxGMw5njttucs3Vi9UfjMcu677q5pscyhQUko=
Subject key identifier: 24:4D:EB:FA:F8:90:54:13:CE:BD:A0:F2:EC:5E:68:F3:A1:B0:2C:FE
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 0199FC8F61FDC0973B6E4D64D505CDBAF4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 06DC
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: 5WxRuM2GP2be8rrQDMX4TZdL2mA/b8zQDw1kKu/6Obc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:61:fd:c0:97:3b:6e:4d:64:d5:05:cd:ba:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=244debfaf8905413cebda0f2ec5e68f3a1b02cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:49:3a:8b:e9:1c:b4:25:25:71:b8:70:bb:
29:0e:37:b2:5f:9a:7f:7c:11:f8:1a:14:7c:9a:1a:
ed:53:ab:94:6b:c1:c4:52:8f:ea:35:4d:4d:50:04:
c9:b0:64:5d:37:88:15:db:5e:e1:72:8e:21:9a:da:
a8:8c:bc:28:6b:16:a9:17:be:3d:02:18:b2:af:cc:
27:5e:c6:5d:00:09:a0:64:9a:43:3d:87:3d:97:34:
36:6f:d3:ad:8d:d4:5b:3a:9b:4e:4d:9e:79:02:c8:
4b:4a:8e:12:9b:f5:44:b3:78:68:af:b5:d5:c7:3d:
45:95:bc:2b:20:33:bf:8d:56:b0:ee:e4:e3:69:d6:
1e:b4:16:bd:93:1b:9d:ca:83:b6:16:62:ba:af:a3:
68:84:ca:6d:b0:9b:d6:07:e3:e6:9f:06:18:a9:24:
c1:54:15:9a:c3:23:7b:75:7d:8a:64:3f:a5:ff:d0:
61:cb:31:c7:df:0c:44:15:a7:67:01:7c:f6:b4:48:
2f:45:af:37:41:7a:7b:47:91:1c:6b:99:e6:64:c4:
02:bc:88:fe:17:8f:9b:37:6d:68:96:98:1c:f1:13:
4d:ab:dd:a1:10:e6:60:6b:d0:be:1e:8d:24:d0:6d:
fb:2f:28:7d:c8:14:51:6d:6a:3a:24:3a:7d:4b:33:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:EB:FA:F8:90:54:13:CE:BD:A0:F2:EC:5E:68:F3:A1:B0:2C:FE
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cb:da:bc:fa:54:5c:a6:dc:02:ca:87:ba:2d:cb:35:7c:d0:
d4:ed:38:af:a9:0a:7b:dd:b7:e9:fc:df:d7:ad:33:cc:cf:84:
a6:41:24:9d:a4:86:0d:65:7f:d8:af:fb:86:19:7a:e8:91:47:
8f:a3:c7:c3:42:4b:68:2c:45:e5:32:2a:d2:ba:cf:73:4b:bd:
e0:a9:b8:60:3b:6e:f5:7f:f1:7f:c3:bb:39:79:c0:a6:aa:36:
81:93:16:31:88:87:5d:ce:f6:51:28:9e:19:e9:61:54:c9:f3:
4b:02:67:7c:83:70:ed:7b:cd:95:c7:7b:d6:22:b2:81:74:5d:
eb:00:e5:b0:fa:c8:07:20:7a:f1:31:ab:4a:90:1a:3d:27:6f:
df:a8:ea:94:d7:a8:02:ae:78:55:6c:9c:2a:88:9d:6d:8d:ed:
a6:cb:d7:d6:7e:73:b0:77:83:c0:b4:a1:ab:23:1e:2a:dc:b2:
77:46:e9:10:24:61:2a:7a:1e:ee:11:92:ce:ba:5f:f1:a6:2a:
57:ee:77:37:e4:a2:26:da:eb:24:51:bf:03:c4:5f:cc:23:61:
9e:b1:96:c1:df:61:bf:d6:81:00:33:82:11:32:43:f2:7e:81:
ee:7b:ef:9f:37:a7:7a:ed:eb:1c:15:ef:5e:9c:1c:10:82:ee:
96:b6:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:31 2025 by rpki-client