Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
File: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json)
Hash identifier: QXpSwaOFb2jcCZtrSpMrY8VEp9R7PIWrJuThfGUmxC0=
Subject key identifier: 1D:DA:FC:44:E7:51:44:29:22:A4:8B:42:B5:A6:7A:88:86:93:51:C4
Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
Certificate issuer: /CN=c68106f44957d194020335b0bfd6077ccbcdc878
Certificate serial: 0199FB460EF029F0EE176ABEE6E50D2B6D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 07:01:36 +0000
Manifest this update: Sun 19 Oct 2025 07:01:36 +0000
Manifest next update: Mon 20 Oct 2025 07:01:36 +0000
Files and hashes: 1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: pdjKBm38Jz02/8wMihjBVCpUBl6CtjbsiNFXfNsRbpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0e:f0:29:f0:ee:17:6a:be:e6:e5:0d:2b:6d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878
Validity
Not Before: Oct 19 07:01:36 2025 GMT
Not After : Oct 20 07:01:36 2025 GMT
Subject: CN=1ddafc44e751442922a48b42b5a67a88869351c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:ff:6d:98:e7:2b:8f:22:03:bf:f1:ac:b0:
5b:d3:3b:c0:eb:91:9f:31:c8:84:88:91:30:f0:0a:
1c:fa:9b:5d:2a:98:a5:9e:20:03:fe:d4:e4:d8:e4:
35:2f:56:85:2b:c9:c6:36:72:87:f9:17:e8:cc:2b:
74:26:2c:53:43:41:1f:ce:f7:68:f9:9a:86:af:7d:
41:a3:91:fa:69:8d:88:8c:a3:fa:fd:e6:a6:cf:f5:
db:2e:82:13:6f:08:9a:0b:4b:d7:2e:b0:74:9c:c7:
b5:af:d6:94:91:0a:56:bb:84:1f:b4:f2:57:5b:3c:
73:5d:e2:0e:73:70:d5:dd:89:6d:c2:cb:af:d8:90:
53:ac:1b:01:1c:b9:42:c6:87:44:e2:2c:6f:90:50:
68:8e:ea:ee:cf:dc:14:97:d1:ba:2a:8c:62:22:be:
a1:77:cb:73:ec:f7:69:f0:7f:17:8d:64:07:01:6a:
1b:3d:4c:b8:26:ef:bc:87:3b:40:1a:dd:22:dc:6b:
0b:46:6e:67:af:70:b6:5e:ae:43:d1:7c:d4:4e:aa:
b0:33:5a:6d:a3:8e:93:88:88:ed:4c:1b:16:d3:27:
3e:64:cf:5b:ab:31:ef:75:02:92:30:2a:45:7e:0f:
bc:ae:9f:d3:33:ec:3e:19:7f:28:9c:d2:77:44:45:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DA:FC:44:E7:51:44:29:22:A4:8B:42:B5:A6:7A:88:86:93:51:C4
X509v3 Authority Key Identifier:
keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8e:39:a8:3a:ff:e5:ed:bd:e9:74:09:87:94:7c:52:d2:c6:
d9:b4:42:71:3f:61:df:a3:d0:03:07:65:97:98:f3:3a:c0:4c:
f7:da:c3:14:c1:3d:7a:d3:43:50:73:70:e8:e6:35:ab:74:82:
ec:48:6d:47:df:cc:48:f5:64:b6:1d:e3:d7:02:3e:d9:b6:78:
00:a3:0d:a8:69:7c:11:53:67:4f:09:47:c2:3e:18:77:b0:8e:
bd:05:a8:ab:69:c9:e1:df:97:4b:2d:a2:6f:e3:ef:ac:c6:33:
e1:a0:8b:a8:c8:bd:b4:58:ba:0f:ca:8e:95:6a:69:f2:95:99:
83:0a:50:94:36:a8:5f:1b:78:70:40:8b:3f:14:0a:80:b4:6e:
66:1f:b5:a3:fe:1b:9e:bb:c5:c5:0b:0d:87:90:2a:86:6e:b4:
b6:20:27:b8:ed:32:e9:1a:ce:5e:a4:ee:a2:b3:b7:a7:07:86:
f1:d9:6d:49:9b:e1:6c:6c:f5:3b:c3:80:e2:98:08:27:e1:e4:
26:f4:b7:d5:cd:fd:ae:ec:a6:b0:37:1b:e8:9c:8a:a8:6c:45:
46:a5:eb:59:40:5a:4c:cf:7d:3e:fd:97:dd:26:ab:80:3a:5d:
33:66:27:c4:fe:b8:a6:b3:df:f0:2e:14:16:3b:c2:2c:25:32:
35:06:49:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:07 2025 by rpki-client