Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: hbHiy98EA1670f3QOtpiwysoN6noJZ8qhLWQ7kn7aos=
Subject key identifier: 61:D8:AF:4C:F4:60:23:B7:66:4C:23:16:F6:F5:11:F5:CD:DE:5A:B1
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 0199FB0EE8BA3CBFE6FA53588712B387C327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 06:01:22 +0000
Manifest this update: Sun 19 Oct 2025 06:01:22 +0000
Manifest next update: Mon 20 Oct 2025 06:01:22 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: osz++4NjhEtwfrtMhy2a1aNTVK0w2HYwjJJ+K0iwHI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e8:ba:3c:bf:e6:fa:53:58:87:12:b3:87:c3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Oct 19 06:01:22 2025 GMT
Not After : Oct 20 06:01:22 2025 GMT
Subject: CN=61d8af4cf46023b7664c2316f6f511f5cdde5ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:2f:e5:fa:bc:84:c4:af:db:a8:0b:1e:c8:
d0:12:c7:af:ee:49:0b:3b:8a:38:83:77:6a:4a:bb:
a6:2f:09:f5:b8:de:d1:15:5c:34:ff:4f:fa:0a:03:
73:59:e9:9c:dd:c2:a4:a9:bc:ea:4f:12:cd:19:97:
f7:3d:f6:a4:fe:3e:30:f2:44:45:45:12:8c:70:78:
e0:76:28:e3:ad:3f:59:ad:52:d6:98:a4:b6:a7:db:
30:03:ed:15:c7:6b:2b:b0:89:5b:84:d4:bf:18:30:
99:60:89:73:42:a8:9b:89:7f:f3:24:be:bd:d0:0c:
06:34:56:2a:04:83:83:fd:f1:a1:09:32:ab:af:83:
66:8e:fd:39:26:50:dd:a0:56:59:95:24:f0:4d:64:
b4:2e:9d:02:bb:74:39:72:9c:61:dd:71:7d:2a:01:
53:dd:70:fe:6d:27:64:83:09:d8:b6:15:5f:e1:30:
01:5d:13:b9:b0:93:bb:50:ef:29:47:cd:67:b8:a7:
d7:0d:70:f4:f5:07:bb:3f:5f:a0:4a:b1:1f:73:10:
c0:fb:83:9c:32:5d:56:48:c0:61:c5:da:21:04:83:
ad:eb:11:43:d4:cf:6d:f9:e1:b5:23:c2:3f:37:78:
f7:42:89:f5:65:3c:1a:08:f9:3a:38:10:1d:b7:35:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D8:AF:4C:F4:60:23:B7:66:4C:23:16:F6:F5:11:F5:CD:DE:5A:B1
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:81:0c:89:89:5a:a9:20:03:4f:9b:f8:09:76:1e:a4:97:ba:
55:2c:ba:99:53:58:b2:bd:ff:70:e7:8b:d0:c8:d9:19:98:7f:
70:34:89:ac:06:a7:89:cb:80:1e:c2:8e:30:5b:7e:0b:18:83:
a1:dc:d7:9e:ec:ca:28:69:f5:66:17:ac:29:25:d8:7b:f0:ff:
c9:bd:be:29:22:11:2b:e9:86:f8:c6:41:dc:ec:56:c5:60:5b:
e1:a3:ce:a8:a6:cb:b1:34:cc:f9:c7:e8:af:a4:c6:b5:20:0b:
19:a1:26:a0:43:ce:4e:3c:ba:da:e1:a2:38:5e:23:99:26:89:
6c:f3:2b:00:48:f5:bc:f7:e1:70:b3:11:76:4b:17:9d:a6:51:
e0:8a:7f:6c:cb:62:29:23:3f:68:46:84:e3:96:a8:48:31:03:
e8:7c:22:c1:34:26:7b:2e:fd:df:a4:f6:04:5e:c5:25:5e:42:
c6:16:0e:b0:be:97:fc:9e:14:f5:e8:3f:5d:b5:39:44:32:eb:
82:b1:2b:6c:d5:1b:3c:bf:71:0e:0a:dd:1a:9f:ac:93:19:17:
7e:55:98:42:3d:27:17:f5:9a:f8:dd:37:55:06:e0:6e:50:8f:
bf:67:66:6e:9d:77:be:f9:0d:77:ee:37:20:0b:d1:30:cd:50:
3e:d7:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:44 2025 by rpki-client