Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: AWAHIUCiIygHunAOzoVUqjtKxgStp5D3kV+I6zVGWMw=
Subject key identifier: 5F:33:FB:52:C1:D9:FF:02:83:99:7A:43:97:E9:F1:8F:FF:E7:6B:73
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 0199FBEB5EDA2FE12D721F18A3D72BB234AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 0A55
Signing time: Sun 19 Oct 2025 10:02:10 +0000
Manifest this update: Sun 19 Oct 2025 10:02:10 +0000
Manifest next update: Mon 20 Oct 2025 10:02:10 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: 7fUK9KZvcrgISKekPDkWYggnJQ8b0JruC947qYg98Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5e:da:2f:e1:2d:72:1f:18:a3:d7:2b:b2:34:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Oct 19 10:02:10 2025 GMT
Not After : Oct 20 10:02:10 2025 GMT
Subject: CN=5f33fb52c1d9ff0283997a4397e9f18fffe76b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:17:9d:f8:57:cf:6c:49:4c:68:ab:62:09:
f2:61:1d:cd:66:8a:a4:32:69:2e:ee:7d:8a:e9:6f:
8f:af:5b:d5:86:7e:02:3a:1d:44:51:e3:25:35:3c:
d6:3c:55:9a:07:2a:7b:71:a2:74:2c:a8:c9:a2:dd:
4c:8c:fd:f2:13:86:e2:e5:a4:17:d8:95:4c:8f:44:
62:84:ed:72:eb:14:09:67:bf:5a:4c:9e:28:f7:0f:
ad:34:eb:5d:0e:ab:f6:af:8f:38:09:ab:73:78:2f:
ab:d9:c8:98:4e:54:1d:da:82:50:4f:49:73:5d:9d:
d1:c6:15:33:40:c0:8e:eb:af:f5:7a:6c:93:5b:7c:
7b:4d:f7:52:07:65:a1:f8:0b:a5:9b:f8:ce:2d:02:
ad:9f:c5:26:48:60:d0:ac:19:7f:cb:47:9b:ee:a4:
79:70:f3:c4:73:d8:f1:62:4b:88:83:0a:82:3b:82:
a9:1b:d6:56:79:62:76:8a:af:8f:e2:c8:c7:19:af:
ee:ef:07:85:fa:09:d4:91:36:0d:f3:54:57:7e:a0:
ed:84:25:50:0b:eb:25:80:72:58:89:0e:b2:cf:ab:
14:8c:e8:f3:88:02:2d:85:fb:eb:95:5f:58:85:fe:
82:55:e3:d5:51:75:84:38:7f:aa:7d:ec:16:d6:41:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:33:FB:52:C1:D9:FF:02:83:99:7A:43:97:E9:F1:8F:FF:E7:6B:73
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fb:6a:9a:34:dc:9a:bf:4a:22:e2:8d:53:de:e2:41:6c:4f:
78:c0:4e:00:41:ec:14:6b:45:c8:3e:8d:a1:43:8e:91:9e:cf:
43:fa:46:18:e6:c2:8f:27:2c:9d:4e:1e:67:a3:f0:c5:c7:5d:
1c:60:f4:f8:0c:dd:77:66:c8:5a:07:17:76:d8:c7:2c:a8:fb:
71:56:a6:55:b4:3b:ce:9e:a3:68:7b:f0:0f:4f:2b:32:06:b7:
fc:55:d8:cb:b8:40:cf:ec:6b:bc:42:f7:40:39:6c:e1:f8:93:
1d:37:84:cc:68:a9:d6:41:8d:fc:50:a5:68:be:79:7e:5b:39:
cc:f3:bd:f9:7a:f4:ef:b5:fd:22:b6:eb:40:fb:62:a2:8d:c9:
0e:8a:a3:e3:e4:c3:55:59:a3:eb:41:f7:55:5a:38:eb:4d:5a:
91:1e:24:d3:89:c5:34:2b:d3:86:97:72:6d:db:62:69:97:ce:
6c:ef:d7:74:95:ab:3e:b2:6d:e1:e6:8a:1b:1d:04:0f:5a:fe:
e5:b1:e6:be:98:48:59:ac:2c:69:ea:b6:c4:ea:b3:f9:38:53:
d0:8e:de:f5:db:b3:2b:57:52:1a:60:f7:1a:7b:5e:0f:1d:f0:
32:96:d8:e9:96:a2:fc:7b:48:50:94:85:e3:ab:a6:f7:58:03:
da:c6:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:26 2025 by rpki-client