Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
File: XO56utwc1TZH4rILdg1aXHqxp8w.mft (raw, json)
Hash identifier: pRoe/sA8egrzjZwTSyCyenOLRauS/TugK2AnKQE7XXE=
Subject key identifier: 98:1D:BB:86:73:40:66:0E:AD:4F:74:48:C9:64:C7:94:92:7B:15:C0
Authority key identifier: 5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
Certificate issuer: /CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Certificate serial: 0199FCC611C57A7231CC35B34B889E5444AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
Manifest number: 01CF
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: XO56utwc1TZH4rILdg1aXHqxp8w.crl (hash: qeiDf5H7cEsYiqx6LFWkYQllykuYjTMzOU2QFyHR10k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:11:c5:7a:72:31:cc:35:b3:4b:88:9e:54:44:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=981dbb867340660ead4f7448c964c794927b15c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:59:60:01:d5:94:84:df:31:c8:71:c9:8e:
45:0d:23:48:87:81:14:a0:3c:29:d2:2a:ac:5d:f8:
75:b9:f9:16:fc:0d:4d:78:48:6a:e1:16:70:40:d2:
ed:bd:e7:cc:23:e0:c2:01:aa:42:09:ba:7b:91:c8:
09:cc:89:01:1d:5a:3f:06:54:b1:bb:ee:d8:a6:a3:
94:15:aa:63:65:08:9d:9a:78:f6:56:38:06:40:21:
08:62:74:f1:7f:c5:ed:87:bc:a0:a8:81:ec:cd:86:
84:aa:ce:fd:c4:f4:f7:db:74:52:3f:85:63:79:88:
20:7f:be:35:33:b1:6a:4f:07:e8:1e:83:a5:49:88:
49:a9:8d:42:7a:0d:87:81:64:32:d7:88:99:af:cf:
f0:ab:78:69:c5:ce:f0:93:26:f3:e3:29:7e:c1:94:
e9:f5:b2:53:ff:a5:17:24:58:c6:44:57:fa:fc:42:
25:29:42:d9:c5:3e:a4:3d:41:cf:ed:35:14:18:a5:
44:c9:00:a1:bd:21:95:05:16:f6:ab:fe:f8:91:e4:
27:7f:5b:cf:b4:38:a6:bc:7d:60:1d:2e:52:b9:a5:
83:7a:cd:33:d7:a3:7e:71:be:ee:3b:2d:d5:4f:d1:
72:91:52:16:8b:e5:f8:c0:18:19:6d:fb:58:3a:37:
35:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1D:BB:86:73:40:66:0E:AD:4F:74:48:C9:64:C7:94:92:7B:15:C0
X509v3 Authority Key Identifier:
keyid:5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:53:5d:26:87:46:82:0e:67:a7:8d:e4:e2:05:c8:b4:50:d2:
c4:f4:06:52:e0:ae:4e:4d:0a:35:67:62:57:dc:09:f0:82:59:
ff:bd:74:62:80:4c:89:08:81:7e:a4:db:2f:39:2d:e3:bc:10:
87:14:b1:db:cc:ae:ca:27:98:81:37:0c:a8:e7:e1:35:ac:bc:
8f:79:68:3d:e8:51:b4:31:0d:f3:39:c6:74:5b:a3:ec:32:9a:
ee:3e:ed:e6:33:41:8a:e7:bf:ef:83:f7:02:6f:59:70:02:d5:
00:13:0d:b8:c4:72:9a:fd:ca:c1:71:af:9d:e9:ac:98:21:fe:
42:68:08:6a:0e:3a:e4:a6:11:67:2a:56:51:5d:1e:dc:13:64:
aa:e7:3d:1d:fe:ae:fa:67:89:32:14:d6:49:c6:40:f9:76:39:
28:8b:0b:c0:0d:2b:9f:f5:73:18:e4:8a:b4:6b:8b:de:75:95:
ae:26:8a:ac:f4:71:8d:6e:81:d1:19:20:a7:e8:95:3d:ab:6d:
ea:52:c8:53:50:27:f6:9c:24:fc:73:8d:2d:7f:9a:b4:35:b6:
f3:00:b0:64:c4:76:0f:10:a1:f8:df:76:fb:6a:d8:fe:96:72:
de:bb:ff:d8:dc:13:b3:63:79:24:73:3c:38:71:a9:0b:9d:ef:
70:d3:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:11 2025 by rpki-client