Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File: xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier: 76FFreiJyjj85BbAJIDMf2aNOg5IvWzsyX+DgF5Gf+g=
Subject key identifier: E1:73:3F:D3:4B:44:59:2E:E3:32:5D:AA:8D:90:A2:CD:85:15:42:C2
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer: /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial: 0199FC8F3C37B115B9B1B63FAD64447A3A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number: 0D23
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: 5xO6FkkCov3cDPnyu6qUF+EXdQ1POnrlW7FXVDpji3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3c:37:b1:15:b9:b1:b6:3f:ad:64:44:7a:3a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=e1733fd34b44592ee3325daa8d90a2cd851542c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:e1:1d:e7:94:61:a5:c5:f5:3b:b7:55:90:
d7:65:4a:39:9f:52:d2:66:b0:bf:1b:c8:25:38:cd:
c0:df:b7:45:60:0a:51:73:fd:fe:35:15:8c:48:dd:
2a:05:16:5f:03:22:5d:cf:06:7a:37:74:3d:3e:d0:
62:16:96:19:b3:5e:48:09:34:d9:f5:61:1a:02:e0:
25:81:eb:67:a9:5f:4d:12:fc:95:87:f0:0f:33:fe:
09:0e:c9:1e:db:c0:68:09:ac:3b:f1:d1:f5:7c:37:
77:62:2c:b8:f5:eb:11:07:4c:cf:8e:5d:79:17:53:
66:c4:52:2f:36:95:af:a8:ff:44:cd:a0:f1:db:43:
17:0d:f3:c6:40:b1:46:23:63:a6:f5:2a:c2:2b:11:
e5:ad:19:90:84:64:8e:6c:2e:fd:f7:57:f9:57:6f:
b9:69:06:a4:b9:db:00:70:0f:9e:d8:bc:12:6b:b4:
e2:b1:dd:40:9b:1e:2b:ed:a3:46:9b:be:5d:ef:5d:
40:d4:97:ea:dd:c7:d2:dd:d4:4a:a2:0d:5a:09:c8:
5d:44:c5:3a:63:89:2a:75:16:56:cd:79:41:b4:cd:
89:f6:28:32:bd:d3:ff:6d:81:fd:04:88:15:5c:95:
92:98:7a:e6:2f:13:96:43:5c:a7:bc:6a:8c:ae:60:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:3F:D3:4B:44:59:2E:E3:32:5D:AA:8D:90:A2:CD:85:15:42:C2
X509v3 Authority Key Identifier:
keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:50:ba:dc:07:c2:eb:d8:1b:f4:87:36:87:cd:12:e9:8d:19:
0c:d8:4f:07:83:23:ba:b0:fe:6d:f0:27:a9:9d:9f:5e:50:bd:
dc:51:ab:cc:12:f2:80:52:4b:8e:e3:c4:c5:26:39:ba:5a:f5:
77:d8:8a:09:cd:84:64:95:8e:62:f6:e3:80:9e:3d:93:86:57:
1e:9b:7e:b1:b8:15:36:bc:b8:82:9b:bb:87:42:36:06:02:c2:
f8:31:68:5f:c5:0e:86:ad:0b:e4:3b:5a:0d:72:67:9e:11:fe:
69:74:34:e3:d4:fe:23:7d:62:de:f0:31:2d:25:6d:53:db:f6:
b8:38:fe:08:5b:dc:68:c3:f1:6d:1a:4d:db:ca:1e:2a:c8:86:
1a:8c:fd:5e:2f:4d:ea:20:9b:42:43:12:a1:d7:f1:d9:86:11:
41:6e:88:f2:a9:40:3a:83:15:9b:c9:13:67:b1:6a:72:1a:af:
49:c8:40:3a:c1:6f:c9:65:80:da:72:02:95:c4:81:68:16:a4:
ae:72:8d:49:70:68:77:8b:3c:c9:56:23:d0:1d:b8:de:6d:45:
0a:94:29:23:59:8a:87:bf:1b:fa:af:17:d1:8b:2f:01:a8:ba:
fa:47:38:ab:0c:ba:ae:e5:26:16:57:77:73:a1:0f:be:2f:00:
d4:5d:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:55 2025 by rpki-client