Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: lVgN2AD7ryRtwDo7bD/0CkKBfpaOCysB56OzWnbdz54=
Subject key identifier: 47:B9:EE:49:AD:29:DE:B7:15:6A:09:A9:63:64:7A:93:71:16:DD:02
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 0199FDD92231B01A25484AD4DD959C860CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 16B4
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: CXtqrU2GLGIn8QQtUaVcja7IMrpMyxSnjpdF29emyqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:22:31:b0:1a:25:48:4a:d4:dd:95:9c:86:0c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=47b9ee49ad29deb7156a09a963647a937116dd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:37:56:77:0a:b9:9a:96:8a:c6:f5:91:3b:
df:c5:d8:22:f5:a8:10:f6:44:45:7f:ee:75:3e:71:
55:5d:b2:08:fa:1d:7d:89:5e:39:76:32:33:12:aa:
63:61:5c:78:ef:f0:f7:35:42:a1:8c:1e:a7:db:42:
8f:3d:67:5e:6e:4e:ac:09:3a:85:c7:b2:40:59:88:
36:54:ae:be:20:9b:a3:0e:6f:4f:ee:3d:fd:cd:51:
5d:93:e7:41:54:96:7f:4d:d0:39:2c:52:e0:4c:2d:
40:7b:8c:aa:db:07:4e:d6:94:92:16:4e:89:5f:7d:
00:ae:f5:26:d7:a5:55:35:e5:78:95:8a:0b:9b:fb:
11:04:6e:7e:d1:44:75:63:ad:8a:21:be:d7:00:04:
5d:95:ee:82:0d:12:ff:44:f2:a0:39:c2:11:c8:3f:
0e:53:e2:1d:b2:5d:9d:50:6a:b5:51:58:5a:fd:3d:
c8:46:57:24:af:53:14:2a:dc:42:8c:4f:99:5e:e2:
32:e9:60:f0:46:73:eb:56:c4:f8:e9:a1:ef:02:5b:
5f:fa:13:13:6b:f5:57:2b:a1:d1:23:4c:d3:1f:19:
58:88:4e:99:1d:f9:3b:8c:f3:6d:b1:0f:3e:aa:bb:
ff:91:52:7c:f4:c1:80:41:7a:2e:0c:74:fd:90:e0:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B9:EE:49:AD:29:DE:B7:15:6A:09:A9:63:64:7A:93:71:16:DD:02
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e2:41:6c:c8:a8:1f:c8:ed:c6:81:21:8a:94:ec:35:75:6d:
1c:c8:2d:17:1a:c1:1e:38:c8:38:10:e3:ca:39:6c:3d:5b:19:
70:33:d3:eb:07:8a:3a:61:5c:f9:dd:33:d9:bd:e7:35:2b:ca:
05:37:67:2c:45:c5:e2:9b:1e:f6:c6:54:1e:bd:90:30:b5:4c:
c9:89:f5:ee:ff:ec:11:d6:e9:ac:42:59:26:45:f5:4a:32:3c:
0e:2b:2f:e4:3a:2d:48:f5:85:8b:93:77:69:6e:cc:05:0d:35:
3e:4a:bd:18:aa:38:c3:41:64:13:ce:08:ce:85:ca:20:9d:59:
67:8c:05:6b:90:90:0b:16:ff:99:ef:8c:9c:0e:51:52:e5:78:
49:a8:b2:78:b1:80:c4:0f:f0:8a:15:da:b7:82:6d:b4:25:08:
80:12:6a:69:4f:a5:6b:07:89:86:62:cc:72:7b:c4:ff:08:81:
a2:8b:a6:fd:c2:9a:e1:d9:4a:c7:ec:bb:7f:4c:7e:db:12:45:
87:b2:ef:6c:ad:72:d4:91:c1:4d:4e:cd:91:a1:52:08:ce:fd:
86:49:85:ab:4a:a7:33:c6:23:9b:fa:d6:16:79:70:75:d7:a7:
50:f7:4d:bc:33:89:8f:e7:22:6f:1f:b2:ed:a6:f4:19:c8:36:
ff:e1:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:35 2025 by rpki-client