Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
File: XwNIeIMukX__nNPIbA-h5WX4IdM.mft (raw, json)
Hash identifier: ha0b7UI/Rf0UCSr4yoCqFO5NFeDT0yyJ+vrAwWuw104=
Subject key identifier: 46:70:9C:55:E2:D2:FD:10:60:ED:F1:83:96:46:A9:77:98:21:5D:6B
Authority key identifier: 5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3
Certificate issuer: /CN=5f034878832e917fff9cd3c86c0fa1e565f821d3
Certificate serial: 0199FD342088C812763D7E4F3C42048BF057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
Manifest number: 1230
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: XwNIeIMukX__nNPIbA-h5WX4IdM.crl (hash: Ii58rwoDeHw3H6ZLuA15eeNclq91R+osELYz/q3pakI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:20:88:c8:12:76:3d:7e:4f:3c:42:04:8b:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f034878832e917fff9cd3c86c0fa1e565f821d3
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=46709c55e2d2fd1060edf1839646a97798215d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:36:c2:42:1c:86:39:bf:bb:d3:54:b1:c0:
f9:aa:2f:0f:8e:01:f7:9f:bf:15:4b:96:ae:8b:6a:
91:e9:c7:55:6e:80:c5:cd:b2:f2:fd:3e:1c:b2:ba:
dd:d9:64:47:0d:a5:3b:ba:ef:66:9c:a7:a8:4d:c9:
3b:f3:70:78:50:21:9a:df:2e:25:d6:ef:d2:15:94:
b5:48:b6:fc:d4:83:c5:6d:f4:e2:99:b4:9c:c0:cc:
b0:b3:b4:53:87:16:d0:b3:cd:c4:e9:3f:b9:dd:4f:
cb:73:05:ca:25:cb:6a:33:ac:0f:b1:53:05:ca:a5:
ee:b4:c6:ae:44:5c:1a:c5:36:e3:d8:fc:13:12:31:
87:4b:4b:bf:d2:bb:1a:6c:88:eb:90:45:12:ea:f6:
5b:41:b3:ba:e1:d7:00:e1:d3:63:b1:a1:5b:93:06:
a5:f4:69:c4:29:20:4b:fa:18:f6:3d:26:b1:5c:b4:
a9:8f:ce:35:26:13:81:dc:03:1b:f5:95:e0:3f:c5:
17:77:74:dd:ca:3c:bc:02:2d:a9:1d:cd:05:62:21:
5b:cd:5f:e0:64:fd:e1:5d:67:94:90:f8:23:a7:f1:
7c:c7:dc:24:c4:29:e3:be:b7:18:ee:58:5b:43:4f:
dc:ed:72:c8:50:38:c5:2b:35:c1:47:22:f8:bf:cf:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:70:9C:55:E2:D2:FD:10:60:ED:F1:83:96:46:A9:77:98:21:5D:6B
X509v3 Authority Key Identifier:
keyid:5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:14:26:3b:21:13:ba:dc:9a:67:43:28:f8:9d:d5:b6:c5:c4:
0c:76:ad:ab:76:75:36:8d:3c:01:8d:69:53:1d:41:ec:c7:31:
6a:ba:f1:4b:1f:a7:6e:40:4c:ff:53:01:98:2d:21:c5:2f:13:
65:91:cb:59:e8:41:74:a6:87:7a:f0:1a:b4:8d:65:a9:e7:89:
72:46:ad:82:85:94:42:fe:dc:b6:9b:f4:1e:91:2b:43:82:9b:
de:d4:5b:ca:1a:04:3f:90:32:48:df:28:df:83:1f:78:5f:6d:
77:0b:78:39:79:1d:78:f0:1e:c8:73:ef:4d:31:b2:ce:77:47:
2d:fd:df:97:22:a3:d2:45:28:ee:2e:2a:a8:d3:5d:37:66:98:
2b:d3:a9:1f:80:f9:32:25:2c:1a:64:39:ff:41:f5:85:c0:d6:
fd:ea:c1:ad:83:e4:87:f2:83:97:7b:2d:c7:ce:d1:04:e1:ea:
5f:41:74:12:50:88:33:77:8b:23:b7:16:35:ef:f5:64:98:6a:
70:da:45:d9:88:4b:f8:d3:ae:b8:9a:cf:7d:84:34:fd:e2:1f:
4f:e1:0b:08:af:40:8b:3f:75:d4:84:b0:0b:45:a5:1f:0f:c2:
cb:d8:99:a3:21:0a:f5:1a:6d:02:42:ed:23:53:2b:8f:9b:b5:
c8:89:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:08 2025 by rpki-client