Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
File: xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json)
Hash identifier: 6WbwPYgYd+RBPZ5o6Se78Nu2fYaldy0MUWmo5z1rFDI=
Subject key identifier: 37:80:1E:C3:75:16:D6:DD:89:51:35:3E:B4:95:17:6F:4C:38:23:22
Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
Certificate issuer: /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Certificate serial: 0199FCC6566B97E911118C6D79AB6EF1DB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
Manifest number: 04DF
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: zywo2mPb9Gu4LF6RNNA7oJ8uiom6UhNR1UmcfmtzKYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:56:6b:97:e9:11:11:8c:6d:79:ab:6e:f1:db:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=37801ec37516d6dd8951353eb495176f4c382322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:42:d6:53:dc:61:ab:dd:98:fd:33:7e:78:
4b:74:1c:5c:ed:89:de:42:b1:5c:7f:07:df:ab:3b:
4e:6d:ed:3e:c0:64:2f:02:53:8c:51:49:11:f0:35:
cb:4e:a7:66:1e:39:c2:26:cd:57:8b:47:91:e9:fe:
8a:4b:aa:03:52:67:b5:a3:3a:2d:06:b9:90:e2:c3:
a1:61:d2:79:36:93:52:a0:63:ff:ef:62:07:47:b8:
2a:5a:f7:31:8a:5c:22:a2:7f:f9:1a:3a:88:e1:bd:
18:c2:5d:13:bf:ec:b9:d2:27:fa:48:26:5c:95:98:
a7:6c:b7:f3:a9:fc:07:d4:4a:32:6e:df:d9:36:87:
6c:c3:1f:e2:08:c5:30:11:19:4c:d8:d7:ab:bd:e1:
dd:dd:70:ee:20:4a:be:fb:c0:a9:ce:70:40:04:33:
c4:4b:78:97:0d:b6:03:f7:37:64:a1:be:1e:fb:6d:
38:75:32:3e:86:9d:8c:cb:a0:f5:97:db:00:1e:77:
3a:db:eb:fc:76:64:5c:6a:ed:40:3d:aa:8a:4b:67:
c4:dc:41:23:91:98:08:e1:1e:a8:87:3c:aa:71:b2:
3c:9f:91:e5:38:07:0e:d3:b0:5a:89:5f:cb:6a:c8:
36:32:1b:db:43:fe:44:73:71:3f:c9:ac:d4:12:a5:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:80:1E:C3:75:16:D6:DD:89:51:35:3E:B4:95:17:6F:4C:38:23:22
X509v3 Authority Key Identifier:
keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:52:85:de:80:eb:67:2c:de:38:26:2e:d1:d0:bb:15:92:56:
fe:19:c5:95:60:ed:54:f6:bc:d3:8e:55:25:81:e7:3b:b9:0d:
21:3b:51:cd:03:fa:97:5c:d2:10:dc:3b:b1:54:a0:08:4f:94:
1c:e9:26:37:5a:49:41:63:6c:d6:4b:56:70:97:24:3f:78:e1:
d4:d8:e1:6c:26:9a:c4:83:6e:d4:68:da:3e:2c:7e:9c:6a:b8:
cd:6f:1e:62:36:5d:0c:fd:f4:30:92:60:74:1d:38:75:d9:93:
2a:27:f1:6b:65:96:47:df:37:77:85:28:29:8b:d0:7c:25:f1:
8a:d7:37:e0:5d:02:14:79:b2:7e:15:b0:cc:a9:fa:ec:dd:57:
28:c9:98:08:c8:c1:bf:9c:51:43:6b:02:2e:45:81:dd:0a:f9:
48:53:36:9f:6b:1f:79:94:e1:9c:c1:b1:ea:b1:d8:ec:95:ae:
87:15:a1:cb:0f:b5:8f:95:d0:4a:a0:e0:89:c0:50:89:97:23:
b0:b5:8e:c4:0d:80:3d:64:66:41:c2:d1:aa:97:b9:4f:81:b6:
61:32:69:83:cc:2d:f9:2a:c4:62:8d:e3:d5:cf:19:f7:be:aa:
58:b1:c1:d5:ee:c4:43:17:6e:93:4d:4a:fe:5f:60:a2:22:33:
23:9a:2b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:49 2025 by rpki-client