Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File: xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier: TgLfOZdl9kE26oPP9gRw5kz9YPJ6r04iz+pW8H2d+Tw=
Subject key identifier: 98:09:1C:80:07:46:01:31:A5:8D:23:1F:80:E4:61:63:F0:0B:66:7B
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer: /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial: 019A006C474FE5EEC274D470C82A2113C46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number: 0DF0
Signing time: Mon 20 Oct 2025 07:01:27 +0000
Manifest this update: Mon 20 Oct 2025 07:01:27 +0000
Manifest next update: Tue 21 Oct 2025 07:01:27 +0000
Files and hashes: 1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: HsmOVkN/CCO7euHQtjXtT8DbABJcY1zyRbeH4p2TVdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:47:4f:e5:ee:c2:74:d4:70:c8:2a:21:13:c4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Validity
Not Before: Oct 20 07:01:27 2025 GMT
Not After : Oct 21 07:01:27 2025 GMT
Subject: CN=98091c8007460131a58d231f80e46163f00b667b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1a:e6:39:30:34:b6:c4:8e:02:3b:c5:86:43:
3e:2a:52:f7:57:e1:6a:d2:97:fc:7c:5b:56:b4:7b:
b7:24:62:95:5b:47:41:ea:8c:7f:5c:8e:d8:e3:c9:
92:d1:15:d6:7d:27:b0:79:f8:47:f0:46:62:0d:9e:
65:fd:14:5d:34:ce:d1:a4:94:eb:2e:7a:28:28:ec:
fa:4e:df:b1:1b:57:29:bb:49:e3:fd:ae:25:ea:94:
41:6a:d5:4d:7e:1e:e0:cb:38:1f:37:66:1d:9b:93:
b2:1c:e8:37:04:5b:ec:49:14:82:4f:4f:08:82:e9:
dd:f2:80:3f:2f:9e:f7:f1:5c:2e:eb:66:7b:9b:de:
61:76:e1:33:d8:b2:45:ea:89:1b:76:56:52:58:99:
4d:16:93:58:2b:44:89:48:16:fc:ca:e4:17:3d:9c:
c9:b1:b8:83:61:9a:3e:31:5a:df:85:06:e0:fe:a9:
ab:d7:7d:60:92:82:8d:49:d7:2b:99:7a:dd:3e:f6:
71:60:d7:94:f4:8f:b1:a1:9d:9d:6c:06:60:1e:2e:
f3:29:dc:6d:05:13:e3:5d:be:b2:3c:33:d0:f1:7f:
d1:a3:4a:a1:0e:58:6e:46:ca:97:6f:20:93:33:fe:
3a:d6:ab:85:9d:f0:21:9d:e6:33:f2:78:73:77:78:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:1C:80:07:46:01:31:A5:8D:23:1F:80:E4:61:63:F0:0B:66:7B
X509v3 Authority Key Identifier:
keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a2:ce:df:24:5c:f0:27:0b:5e:ea:7d:31:bf:f2:b3:1b:6f:
fb:9a:a7:77:5a:6b:92:a9:f9:b1:b7:54:27:a3:a1:87:1f:13:
c9:dd:fc:40:02:59:5d:0c:12:5e:df:44:16:1f:05:c4:66:51:
d6:97:3e:c1:d0:18:54:14:09:70:23:20:62:57:ed:bc:b3:68:
7b:9d:f3:43:55:52:a2:8d:4b:01:ec:50:1b:e4:51:47:a9:0c:
ef:94:ea:7f:44:2b:96:7d:30:ca:a6:8b:29:9d:a1:b4:4a:66:
b7:f1:2b:be:63:88:a6:d2:c0:24:cf:d1:ea:5c:a7:68:f9:e7:
c6:5e:78:73:c7:e0:94:7c:17:c7:f4:88:00:7d:41:23:36:8d:
e5:3b:14:88:9c:ea:ee:3a:7d:50:51:47:f1:39:fa:91:bb:3c:
ad:08:b9:94:84:6b:d1:29:91:5d:27:ea:1c:b0:51:0a:28:75:
d2:56:b4:8e:d3:76:ba:2c:c2:89:00:55:60:47:7c:d6:76:0e:
62:7e:e6:c0:53:2c:41:b0:06:14:87:fc:85:58:eb:9c:8d:fc:
44:cf:4c:02:f1:21:31:b9:4d:24:88:66:06:34:9a:79:27:6d:
5d:4d:54:1b:dd:94:82:4c:fe:53:27:0f:0a:2e:78:05:d6:3f:
2f:9c:e2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:56:06 2025 by rpki-client