Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: bRqP8aV5GAu2Ral6tV/waJg2EioE31aNUJfME4aAIk4=
Subject key identifier: 8D:73:DE:CA:E4:A1:64:1D:42:CE:44:92:80:2A:E1:26:31:18:EE:10
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 0199FE4747DC5CF7720C1494E8AD09578696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 03FD
Signing time: Sun 19 Oct 2025 21:01:48 +0000
Manifest this update: Sun 19 Oct 2025 21:01:48 +0000
Manifest next update: Mon 20 Oct 2025 21:01:48 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: 978LoOTkc6Hgd3qoMt9r4WEF5x/lpZkMpLAaCav45xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:47:dc:5c:f7:72:0c:14:94:e8:ad:09:57:86:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: Oct 19 21:01:48 2025 GMT
Not After : Oct 20 21:01:48 2025 GMT
Subject: CN=8d73decae4a1641d42ce4492802ae1263118ee10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e0:00:86:c1:0d:5b:46:e3:1f:ab:71:81:cb:
2a:67:27:59:3a:df:45:29:76:8c:00:a1:b0:23:32:
ec:95:ad:f2:8d:e0:7e:f2:54:8a:91:d1:f2:9e:13:
0a:83:d2:a0:9e:8a:71:53:37:66:13:f0:c1:cf:cb:
db:5f:c3:99:63:d5:55:68:a4:f2:ed:1a:1e:7e:5a:
ba:f7:c0:4a:ae:40:fe:34:aa:76:b4:66:ca:6b:5b:
8a:67:df:dd:1c:fe:32:0e:87:1e:a7:24:5b:63:a8:
cf:62:97:a5:c0:86:ef:1e:42:b9:21:2d:10:d1:40:
1f:20:86:b1:f4:6a:6d:64:a5:2b:0f:40:e6:06:3b:
f9:21:17:83:f4:99:2e:71:b1:cd:74:4e:e7:6d:32:
b0:0d:43:8a:90:e3:01:e8:70:7c:e3:c4:8a:0b:11:
f2:c6:f1:4b:78:88:a7:38:bd:8b:43:bd:95:b1:06:
f0:74:2a:d7:be:8e:b1:a0:d5:e5:fb:51:9c:0c:1f:
02:6f:de:af:cc:52:11:db:2a:78:2a:6a:25:2c:49:
da:4e:61:40:c5:f1:85:3a:cc:1c:e1:34:e5:5e:cc:
ef:05:55:02:1c:9c:18:e3:f7:9e:e9:95:a8:f0:dd:
7f:76:7f:ae:73:fb:27:7a:63:56:3a:2a:6d:3c:cf:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:73:DE:CA:E4:A1:64:1D:42:CE:44:92:80:2A:E1:26:31:18:EE:10
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:15:ed:97:40:63:db:da:b6:24:dc:83:76:62:49:78:54:5c:
84:71:50:ea:40:ac:25:31:d6:8a:1d:24:1b:fe:14:b7:a8:32:
5d:fe:6c:af:00:83:5b:16:ab:57:db:ea:eb:cf:74:d9:f9:ab:
95:b3:15:ac:8c:a1:b5:46:47:26:96:a8:16:9f:86:c8:81:0a:
6d:41:e4:06:c7:99:46:86:eb:74:41:d5:48:e5:4a:95:69:cc:
4f:9d:d3:0a:22:4f:b2:58:84:2a:42:44:83:7c:5d:94:f7:ec:
a9:b8:a4:b0:e1:95:d3:70:bc:da:66:32:a9:5c:01:1d:94:e4:
65:f9:ba:74:eb:29:15:9c:9e:4b:9f:89:f2:ce:3c:8f:a4:dd:
0f:aa:1f:4b:d4:41:b8:8e:49:18:c7:54:4c:b4:c9:8c:5a:a1:
fe:d6:54:30:87:ca:c2:60:84:7f:28:00:85:04:e4:db:66:6a:
f3:45:82:45:01:32:0c:d4:64:ff:7f:e0:46:5b:59:db:dc:fe:
ba:b9:c1:60:72:ac:58:49:d5:f0:3c:04:2b:3d:6e:cc:ce:3c:
1d:9f:de:d8:2b:bb:c2:1d:c8:37:87:cb:74:78:c1:fa:e8:f4:
ee:87:15:91:74:89:38:74:87:74:e3:26:a8:50:9e:9c:5c:ac:
6b:90:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:12:12 2025 by rpki-client