
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json)
Hash identifier: XElm7jVynfIxwDuGqv05N+QPF5ZR0JmEHf+BeX2NuCU=
Subject key identifier: A3:64:94:BB:38:13:47:0E:E3:3F:1A:75:94:AB:D0:3B:E4:3F:4C:6D
Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Certificate serial: 0199FAD7A520DE12C191155B71D76CBA9C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 05:01:00 +0000
Manifest this update: Sun 19 Oct 2025 05:01:00 +0000
Manifest next update: Mon 20 Oct 2025 05:01:00 +0000
Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: nAEC1l/jOdqi6ycKS/72DtdUz1F/6LOQe0BoazgOffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a5:20:de:12:c1:91:15:5b:71:d7:6c:ba:9c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Validity
Not Before: Oct 19 05:01:00 2025 GMT
Not After : Oct 20 05:01:00 2025 GMT
Subject: CN=a36494bb3813470ee33f1a7594abd03be43f4c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:92:f4:1d:d9:cd:55:f6:53:d7:ae:28:87:29:
dc:19:60:b4:c3:d3:9f:7e:b0:7d:c4:08:ec:76:94:
83:8d:3e:4e:2a:51:2a:c0:91:ee:b4:7c:25:4f:e8:
42:ad:9e:2a:fe:e4:41:d2:62:12:a1:f5:f0:cb:7e:
f6:f6:36:87:5f:4c:90:ba:bc:b3:ec:ca:be:1e:8f:
8a:8c:25:18:62:03:1d:db:50:08:72:56:82:c6:9b:
cf:d2:77:ab:fe:09:4f:7c:4a:c2:e3:7f:43:9c:1c:
ef:20:13:f9:96:4b:fe:07:ad:65:d4:3b:67:44:21:
6b:48:12:2f:a6:7e:8d:76:ec:46:b0:ae:ee:5f:5a:
77:5b:c7:85:80:2f:66:6b:66:f5:84:42:04:d9:02:
86:74:c1:da:78:22:8f:ca:91:26:66:be:6a:e1:fd:
8b:91:61:a8:b6:6d:79:56:e7:57:63:75:33:98:07:
df:ae:f9:26:09:38:ab:ad:0f:e3:5f:96:38:ae:5e:
36:f3:4d:30:cb:93:9b:db:a1:ce:2c:58:fd:d9:4f:
31:25:9f:4f:e7:66:7a:4d:3b:7b:ad:02:5d:1d:85:
15:d6:5b:fe:67:6f:17:8d:f3:62:ba:1e:ea:b8:1d:
90:91:5f:ca:25:0c:7d:75:e8:97:eb:db:6c:91:f1:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:94:BB:38:13:47:0E:E3:3F:1A:75:94:AB:D0:3B:E4:3F:4C:6D
X509v3 Authority Key Identifier:
keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cc:b2:9c:45:8e:02:04:3f:1e:52:38:f3:fc:e3:47:56:f5:
b2:65:fe:ef:a7:4e:68:93:ba:d9:b0:0d:15:82:c9:74:61:40:
8a:8a:7c:3a:66:b4:45:27:72:fb:c0:0b:09:f1:53:c4:d5:36:
68:d1:ef:23:96:97:ce:da:59:ee:4a:e1:9a:72:ce:73:c5:e6:
e2:ad:0e:a9:56:00:11:81:92:18:08:ac:21:7d:ee:c8:96:41:
c1:14:9b:a4:bb:bf:a2:00:0f:f4:3c:30:76:a0:14:1e:fb:cb:
e1:7a:2a:8e:3d:9a:ec:3c:d0:eb:75:05:c8:eb:78:fb:c3:a1:
bb:21:18:2d:a5:cd:d0:24:34:f3:fa:66:38:14:44:5c:40:5c:
dd:4b:35:ad:fe:6f:b6:9c:f7:54:fc:29:5c:a8:ad:65:e4:79:
e8:ee:57:08:3a:42:56:53:81:87:ed:d8:df:87:17:18:15:c6:
f5:3a:a3:e8:e6:5d:86:22:4e:73:80:74:04:02:ff:e3:4c:65:
8a:02:5a:1b:31:5c:20:1c:dc:fc:68:f4:0a:87:af:37:1d:20:
b1:2b:82:e3:11:ce:32:80:cd:14:c7:0e:6d:57:af:40:50:43:
36:36:0a:1f:7e:e5:95:01:8e:94:60:2c:e9:62:00:56:89:61:
ef:f0:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:47 2025 by rpki-client