Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
File: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json)
Hash identifier: FTs6Gzqv7qGsAK4c1Yk5FkAlI44esblj98dq/ZvqVTM=
Subject key identifier: CA:3F:44:A6:83:10:22:64:39:D1:0F:E8:F2:43:0C:42:75:91:09:5B
Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
Certificate issuer: /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Certificate serial: 0199FBEAB26E43A4C5CA9132F399EC1B6D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: 2/3zSm3ANQIafZj8BCBqDbUFIR3LVvKXL6x2SqqybJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b2:6e:43:a4:c5:ca:91:32:f3:99:ec:1b:6d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=ca3f44a68310226439d10fe8f2430c427591095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:5c:ac:55:c1:42:9e:07:94:a2:d6:b5:fa:
63:4e:1a:74:b5:88:85:cf:c9:b3:ca:0c:3f:f1:e7:
c0:60:97:95:b5:66:8a:23:db:aa:5b:6d:fa:c0:44:
d0:7d:9a:27:ae:8f:86:c9:b6:f9:ac:ed:a2:64:5a:
a0:bb:0b:83:6b:98:42:f9:9f:e7:77:25:1f:4b:3d:
f5:a4:cd:03:01:22:97:03:8b:7a:80:19:87:5c:37:
2b:cf:9a:f4:13:b2:73:1a:b5:4d:1d:93:68:ba:03:
58:1d:b3:3a:82:8c:22:6c:b8:0e:92:13:22:a2:05:
2b:4e:df:16:0c:17:a7:00:46:de:9a:0a:35:00:dc:
6a:87:a1:de:53:c7:0d:6e:5c:f4:a6:d2:76:ef:e0:
f8:86:cb:7a:41:70:4d:8e:71:d9:65:b1:5f:6a:39:
1f:2e:4d:9d:97:39:4e:22:8e:cd:85:4b:fc:a1:10:
10:25:71:1b:2c:9d:00:7e:f4:18:f1:0f:2b:89:b7:
f6:b2:37:f6:a2:bf:1d:16:80:32:4a:c9:f0:47:75:
1b:14:f8:bc:f8:b3:d3:3a:bd:95:2a:11:4e:02:b8:
82:a1:6d:2f:9f:99:4a:e1:53:99:7d:18:c7:3e:47:
45:d9:09:a3:e7:67:41:57:4d:19:8f:80:2d:39:4a:
4d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:44:A6:83:10:22:64:39:D1:0F:E8:F2:43:0C:42:75:91:09:5B
X509v3 Authority Key Identifier:
keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:74:ac:2c:3f:81:6b:2b:02:ab:27:4b:0c:52:96:3f:0a:44:
8d:5c:7b:d6:0b:1e:c8:d5:c2:78:2f:42:fa:bf:ac:d2:09:0d:
b4:6a:c7:6d:cc:4d:85:3e:06:2b:7e:10:50:0b:4a:e8:d9:e0:
e0:bc:20:87:1c:67:cf:a0:1b:e6:75:3e:dc:67:1d:78:30:b9:
01:a6:5d:86:a3:e6:73:b0:56:ad:00:ef:79:1d:98:b8:84:f0:
e3:25:39:e0:65:0f:ed:4e:61:f4:65:ac:3f:ad:9d:46:2e:4f:
ed:65:f2:2f:bc:dc:1b:46:ba:fb:fd:84:d7:b8:45:58:69:ca:
00:1c:83:07:b0:f5:86:35:99:93:29:28:ef:0d:de:04:6c:e9:
03:53:c1:e3:17:8a:88:9a:f4:b2:39:24:32:8f:82:d9:fd:a5:
6d:c6:d7:a0:2e:8c:21:49:f1:b4:0b:a7:64:81:39:b8:43:3d:
58:41:29:59:a0:73:de:34:31:33:cc:1a:a2:f8:71:83:c0:2c:
37:79:84:7c:a4:e0:f3:83:f2:92:96:3d:9b:3e:dc:1e:f5:14:
a0:39:3b:1c:9c:b8:23:4f:d4:af:7e:b6:09:98:c1:7b:58:2d:
a3:ab:d3:fc:85:df:67:6f:4b:4d:69:18:2c:b9:f7:15:9f:89:
d8:31:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:01 2025 by rpki-client