Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: jQvP8ddlsERT/jyJqpZQZ9vebAYIM43L9h62bxrlQZc=
Subject key identifier: E3:36:CA:58:45:A4:23:B3:B4:33:5F:46:F7:F4:F5:0C:8B:17:8D:6E
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 0199FCC6BEE1A7A6B4A76766E32E0CBA2152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 03BD
Signing time: Sun 19 Oct 2025 14:01:47 +0000
Manifest this update: Sun 19 Oct 2025 14:01:47 +0000
Manifest next update: Mon 20 Oct 2025 14:01:47 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: wWTWczuY4f8aa8oE74ogGAhtttIC78MXRyUSJcJEHrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:be:e1:a7:a6:b4:a7:67:66:e3:2e:0c:ba:21:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: Oct 19 14:01:47 2025 GMT
Not After : Oct 20 14:01:47 2025 GMT
Subject: CN=e336ca5845a423b3b4335f46f7f4f50c8b178d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:04:08:fa:1f:bc:df:31:5e:56:e7:f0:d2:
57:de:a3:44:47:c8:a5:9a:50:24:2b:a2:8e:39:3c:
9a:f2:17:b8:43:76:48:cf:c8:73:7d:c6:7a:b2:ba:
ab:9e:65:df:81:ec:94:6e:75:03:df:55:7a:86:58:
3b:f0:ab:c3:d6:a7:f4:b8:2a:bf:21:7d:ae:d9:80:
88:24:0b:c6:5c:03:01:22:43:97:fd:76:8e:6c:11:
95:b8:aa:de:f8:26:66:98:90:06:f0:63:27:bc:96:
04:9d:01:09:f1:6e:4d:c0:c3:0c:5e:de:94:d1:05:
23:1a:fc:fa:bb:8d:fa:0a:fb:28:bb:cc:7a:46:b8:
1f:93:11:01:4b:a0:e9:94:99:be:d1:59:3f:00:06:
74:4d:e1:13:64:d3:6c:ba:70:fe:63:1e:fb:9b:1e:
2f:88:b2:c7:af:71:b4:45:e1:35:05:9b:2e:1f:7b:
ed:6f:77:f4:f7:ed:be:55:56:7c:b5:87:a6:e3:c8:
6b:b4:f0:81:21:28:7a:0b:7a:65:4b:a8:3b:29:66:
96:28:94:78:6c:83:5c:b9:5c:d1:15:63:f5:41:de:
ef:2c:c4:41:1b:84:5e:4b:f3:6c:82:ea:45:21:2a:
5c:8b:00:03:37:67:ed:c6:c2:de:d2:67:3d:a6:a2:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:36:CA:58:45:A4:23:B3:B4:33:5F:46:F7:F4:F5:0C:8B:17:8D:6E
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:eb:74:22:94:ae:e4:cf:af:bf:ce:44:12:cd:84:1b:17:18:
9a:fe:73:dd:b9:0c:b9:97:52:db:3b:58:76:73:a8:ca:ec:b0:
64:c2:31:ea:ed:c6:5f:16:37:0f:dc:09:6c:37:39:c4:57:ae:
1b:2d:c8:47:1d:3b:a9:06:5c:b0:68:cb:1c:9c:a3:b3:cf:50:
69:1c:0d:35:8f:ed:74:62:31:28:1a:53:a8:ce:65:81:cb:cb:
cd:5e:3c:ae:90:7c:c1:60:55:f3:c3:f9:83:ba:28:dd:76:3b:
10:fd:39:8e:86:6b:3c:56:0b:34:13:33:db:6a:41:fe:12:f2:
58:3f:e8:c9:cc:5f:6d:d6:4f:06:d0:35:24:cc:8b:a0:9e:82:
07:aa:88:d6:7e:77:24:d7:60:97:bc:ec:60:53:5f:bf:28:f0:
a6:85:e1:65:52:33:93:99:f2:bb:89:05:17:b2:76:9b:1a:b7:
d0:64:a2:40:77:2f:ca:e3:0f:c9:76:8b:e7:b4:06:95:04:ab:
64:72:e2:33:44:d1:c7:b1:28:65:a6:b2:b7:cb:49:5a:ec:90:
c2:99:e9:f4:1a:c2:ed:67:49:5c:b7:24:8f:09:19:11:5f:37:
de:df:94:87:7d:65:10:40:ad:54:d1:ac:71:ca:e5:17:5c:7a:
30:1b:d0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:22 2025 by rpki-client