Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
File: xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json)
Hash identifier: M35Faoowia26M/CQgTZbyR9/9GSFGhtgGwVmNisZFhw=
Subject key identifier: D8:F8:82:BB:31:1D:C5:B3:EE:CC:24:CB:7A:1D:21:0E:9B:35:57:D4
Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
Certificate issuer: /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Certificate serial: 0199FBEBCF6BB4D9AE92749DDE2B31C9B632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
Manifest number: 0E40
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: m/S8ZpLS4wmzvcJSdoDPHkzPMCcJS+9ViZgAhmrVgc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cf:6b:b4:d9:ae:92:74:9d:de:2b:31:c9:b6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=d8f882bb311dc5b3eecc24cb7a1d210e9b3557d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:c0:01:7d:d2:83:8c:c2:59:b3:6e:91:61:
10:3a:c4:b0:a2:1e:29:43:e9:a5:90:fb:ba:ff:7a:
cb:d6:a4:50:75:91:82:b0:6f:77:e9:a6:d8:c9:38:
da:d7:53:d3:93:34:5f:0a:8b:09:df:9a:52:89:e6:
d6:b9:15:c7:62:27:f3:92:23:3b:c4:61:39:ba:18:
8d:1a:8f:ed:67:cd:d7:5e:a8:03:93:4e:f0:de:c6:
5d:e6:a6:61:61:cf:70:1c:cd:61:70:15:2c:13:37:
a4:bc:69:71:12:d4:34:cc:7b:a7:c1:a9:c3:87:58:
e7:fc:ec:f2:a6:6d:73:3b:a0:98:c7:a7:e7:a6:7c:
2f:3c:e7:c9:2a:0c:97:5f:28:40:56:60:1e:62:8e:
99:02:96:7a:35:95:fd:30:e7:07:e5:d5:0f:c5:2d:
c7:a0:fb:3a:98:5f:45:3b:9b:aa:21:56:71:9e:af:
cf:31:52:18:93:5a:36:cc:54:d1:28:39:98:34:de:
2d:d1:37:ab:12:89:48:3c:d9:18:24:df:ac:1c:5f:
4d:1d:14:70:b2:c5:90:d8:bd:00:3a:44:3b:44:2e:
21:09:05:62:21:44:29:ef:4d:8c:a4:11:72:1d:74:
e0:6c:72:ab:0e:58:e7:9f:28:39:30:53:d4:6e:94:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:82:BB:31:1D:C5:B3:EE:CC:24:CB:7A:1D:21:0E:9B:35:57:D4
X509v3 Authority Key Identifier:
keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4a:b6:e8:06:21:59:67:ba:82:e2:bf:c7:e2:5b:c4:9c:78:
5c:57:72:94:d3:c3:07:a7:72:9f:01:aa:39:f0:17:a9:83:22:
20:8f:fa:e3:56:6b:9f:94:23:33:43:0e:86:0d:f4:91:ee:ad:
79:22:2d:14:00:75:74:55:31:6d:01:48:2e:62:a0:8d:a7:8a:
c1:70:ae:3d:c3:a4:40:73:03:a5:d6:26:4d:c9:c1:48:6c:3d:
88:cf:57:76:12:91:ed:58:3f:c0:9c:2d:37:c9:df:19:7a:47:
34:ce:0e:f4:17:d1:ed:e2:3b:90:0d:c3:76:51:d2:b5:a6:8f:
8f:18:98:85:17:1d:d0:96:c2:73:0f:6a:1e:5c:bd:b8:dc:44:
33:61:52:cd:13:ec:75:b5:a1:dc:e6:94:41:93:64:cb:53:0d:
9f:fd:d4:13:3f:07:e1:77:e8:43:49:55:d1:77:1f:85:9b:47:
94:56:6c:12:d5:d2:39:24:49:3b:40:bb:38:ad:fd:ef:16:1c:
55:43:0e:13:0b:6e:cb:22:b9:4f:a3:9e:a4:d8:da:0d:7b:19:
42:56:d8:1e:9b:ee:ca:e0:eb:eb:0a:4b:9a:8a:f8:9e:45:4b:
ec:61:58:04:dc:98:d7:4f:cc:fe:f6:e8:aa:f2:09:d1:18:55:
34:74:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:45 2025 by rpki-client