Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: 5Bv6fpvVCHbStCkSb8jvCfGwUOXxu1dsSDoHhrRr10Q=
Subject key identifier: AD:B2:E7:F8:F6:C9:B0:67:3C:1A:A2:A9:A6:3C:1E:06:8E:03:04:E8
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 0199FC8F1F20871B48E55DD7A9E5790B0666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0AF4
Signing time: Sun 19 Oct 2025 13:01:01 +0000
Manifest this update: Sun 19 Oct 2025 13:01:01 +0000
Manifest next update: Mon 20 Oct 2025 13:01:01 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: XMxFpEU1bPWmklci3CqJK7kd+6rkMhg+plf4icGePU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1f:20:87:1b:48:e5:5d:d7:a9:e5:79:0b:06:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Oct 19 13:01:01 2025 GMT
Not After : Oct 20 13:01:01 2025 GMT
Subject: CN=adb2e7f8f6c9b0673c1aa2a9a63c1e068e0304e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:13:42:93:e3:65:cd:3a:ba:57:45:e4:c3:
ac:4d:cd:aa:24:8a:43:80:a3:75:17:79:77:8c:77:
81:fd:c4:3d:b2:f8:ed:74:40:cf:57:87:0c:6c:eb:
87:98:96:86:09:da:dd:c4:06:d9:9c:4e:b9:fb:fa:
22:61:6b:b9:3b:72:16:03:a8:1c:83:9a:d8:c9:8e:
e0:55:f6:df:8b:74:e6:61:b1:61:bd:8c:e2:00:27:
85:12:ad:e0:18:32:f9:6e:bd:af:b9:f1:b4:fe:06:
be:02:61:b1:52:23:49:19:cd:ce:31:a2:cb:61:9a:
61:f7:6b:7e:1c:4b:e5:d8:86:4f:5a:f2:8e:13:37:
b8:11:2d:4f:1e:08:7d:fd:bb:8a:c2:f2:11:76:3d:
49:0c:46:c0:55:8a:ee:e6:68:c8:c3:88:d1:aa:5e:
90:c7:68:16:f5:2b:5f:26:f8:57:0f:3a:77:b0:5c:
b8:7e:8a:3a:73:57:80:62:62:86:9e:72:fb:3f:91:
0a:fd:1d:a9:f1:c9:ca:a7:aa:ab:65:6c:e5:30:eb:
c1:a5:ac:f1:f0:f5:48:18:20:24:77:88:f1:6b:9c:
ee:5e:75:95:cb:c0:30:66:09:ee:f3:b0:71:23:4b:
75:e8:1d:f9:1f:58:b3:91:c2:38:cb:6d:cc:95:8f:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B2:E7:F8:F6:C9:B0:67:3C:1A:A2:A9:A6:3C:1E:06:8E:03:04:E8
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:69:88:51:85:80:a7:00:91:46:a2:15:e9:c7:41:03:44:ce:
be:7f:9f:ae:d1:9b:ca:50:98:f9:b0:e8:93:d8:96:65:f2:7a:
71:9f:c7:97:d4:fb:41:54:74:36:b2:fc:ae:87:d8:da:ec:bd:
dc:95:ce:f9:53:3f:24:4e:71:69:68:08:cd:8f:1a:94:80:c4:
03:7b:33:3a:b9:c1:25:ac:e2:4f:0c:26:bf:79:e0:c2:80:5a:
02:f1:23:e2:be:a0:91:4c:3b:f4:05:26:60:ff:d4:6c:ff:f0:
55:8e:b4:e0:58:60:84:f9:50:35:d1:80:d2:19:9b:f7:ec:a9:
d8:f4:21:3b:d9:d2:20:65:c5:26:ee:75:56:3d:41:36:90:b4:
6c:ee:9a:73:ac:ac:30:2e:b4:56:5b:8c:c3:6e:97:0d:a8:f5:
8d:52:64:61:75:d2:40:1a:77:25:84:2d:dc:97:d3:d1:06:48:
02:30:6a:30:3f:bb:35:90:bb:b4:cf:9b:80:05:74:89:ba:ab:
a3:95:14:1d:57:2f:7a:ba:77:f6:b7:b0:ce:75:d4:4a:a9:52:
24:f1:48:d4:c9:97:45:d3:69:89:95:df:6d:e8:93:61:80:d8:
57:88:36:a6:f0:e6:8d:86:7d:19:a4:3b:e7:4e:95:0e:0a:15:
a3:c8:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:58 2025 by rpki-client