Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
File: xsfkNpOlMtPW70EYbXDXpsVfut4.mft (raw, json)
Hash identifier: VTuhXVBQRDPEFc1Fz5vizAbG4zEtXLR/JcBNuK1o2+A=
Subject key identifier: 00:BA:6A:75:FD:F6:F7:AA:2A:1A:28:92:73:DC:6E:2D:6F:10:02:F2
Authority key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Certificate issuer: /CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Certificate serial: 0199FCC66BBB1DEC86C17E31A7F964825622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
Manifest number: 1270
Signing time: Sun 19 Oct 2025 14:01:25 +0000
Manifest this update: Sun 19 Oct 2025 14:01:25 +0000
Manifest next update: Mon 20 Oct 2025 14:01:25 +0000
Files and hashes: 1: xsfkNpOlMtPW70EYbXDXpsVfut4.crl (hash: Kg8lzrx/Y/rI/B5ckGeb4HPePi41v85kWlqJR9V423w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:6b:bb:1d:ec:86:c1:7e:31:a7:f9:64:82:56:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Validity
Not Before: Oct 19 14:01:25 2025 GMT
Not After : Oct 20 14:01:25 2025 GMT
Subject: CN=00ba6a75fdf6f7aa2a1a289273dc6e2d6f1002f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:e9:2f:4d:fe:03:1d:cc:8f:39:12:dd:46:
36:e4:66:df:2c:c1:ff:43:4a:e4:21:f5:72:95:ca:
57:d1:aa:be:8a:c3:5d:a3:03:35:61:83:9c:3f:1e:
df:7e:43:5a:b9:86:4e:01:5c:16:32:91:1b:cb:47:
f2:f1:55:33:9c:27:7f:61:b9:6a:39:1f:21:9e:4d:
2b:56:be:e5:1d:d2:bb:c5:39:6e:06:75:75:66:e1:
63:32:84:c2:e0:4e:8b:43:f5:cb:bf:3a:f5:86:57:
39:3f:da:a3:26:9c:44:cd:9d:a3:3f:75:09:50:a0:
9c:c4:21:c4:39:b8:8b:66:04:bd:3b:a4:87:56:c3:
bf:ad:f1:d0:ed:e8:3e:2a:d1:bd:75:05:3a:d1:62:
06:3e:b3:6e:f2:5f:98:9a:27:f7:9d:4c:66:3d:bf:
f1:d1:9f:91:2b:af:6c:28:81:56:9e:7c:d4:ce:42:
7d:db:8d:39:63:cf:f1:bc:a8:22:09:fb:39:1f:d9:
c7:2e:74:c5:62:c6:eb:39:b1:21:e8:6d:2e:b7:78:
2e:61:ff:77:9d:7f:b7:7a:65:61:a6:3a:95:26:47:
f1:4c:31:21:95:46:9d:eb:4c:29:68:b4:b7:df:a6:
ab:e3:d3:17:e0:27:14:e1:1a:25:60:df:79:03:69:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:6A:75:FD:F6:F7:AA:2A:1A:28:92:73:DC:6E:2D:6F:10:02:F2
X509v3 Authority Key Identifier:
keyid:C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:14:a2:88:d5:6f:69:12:fe:69:23:ad:c0:92:7e:fa:76:82:
5d:1a:cc:e8:dd:b0:7d:8e:5a:65:88:93:a9:65:a2:0e:19:f8:
d0:71:18:a7:3f:2a:92:d3:a3:a7:7a:1e:d0:38:75:58:6f:2a:
c1:e1:71:cf:af:80:4a:d3:19:e5:dd:5d:dc:77:82:40:b2:4e:
f1:45:15:ae:51:14:5e:e9:7f:05:2d:ca:4c:da:84:cf:a1:56:
87:c0:6c:5c:70:64:67:87:ce:b0:77:98:5c:81:e6:11:62:24:
f9:96:9a:39:4c:36:76:67:60:99:41:d1:55:a4:58:96:64:c5:
4d:3f:13:93:5b:85:e2:65:4e:48:ef:80:6e:ab:c5:44:4e:3e:
c1:82:4b:6a:72:4a:e8:9c:6d:09:a7:b6:73:8f:7f:32:13:8c:
47:2e:ab:2e:e6:6c:37:20:01:df:cc:94:0f:bf:34:17:31:e0:
7d:31:fb:8f:38:70:82:1a:33:92:f1:84:3a:ba:3a:72:ec:d1:
1c:0f:60:2b:9f:0a:c8:5f:00:9e:ee:00:37:68:95:42:6c:58:
72:64:f2:9a:d0:ba:d3:af:95:fc:27:bc:ff:c9:ee:ed:23:64:
8f:fe:04:26:5c:94:f4:c9:ce:05:56:36:71:6a:0b:ef:b4:67:
bf:b3:a4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:43 2025 by rpki-client