Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier: gfWsIS8V9YA+WwqjyhiGAY3qokYMJTqjyoT9aHiAfEs=
Subject key identifier: F3:2E:03:40:32:2E:40:C7:B7:BE:49:75:60:A3:CC:52:2C:4E:97:C2
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial: 0199FE46F8A5156B85681744F08B26FB3E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 21:01:28 +0000
Manifest this update: Sun 19 Oct 2025 21:01:28 +0000
Manifest next update: Mon 20 Oct 2025 21:01:28 +0000
Files and hashes: 1: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: PhxMwgpckrHeyvVdpfqJHcVklgY2c/tzsPyDBF/Y3O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f8:a5:15:6b:85:68:17:44:f0:8b:26:fb:3e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Validity
Not Before: Oct 19 21:01:28 2025 GMT
Not After : Oct 20 21:01:28 2025 GMT
Subject: CN=f32e0340322e40c7b7be497560a3cc522c4e97c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:b2:bf:29:4a:08:e7:16:9b:b7:5e:f3:f7:
47:21:8a:82:9c:63:03:cf:d5:59:62:e1:59:99:e2:
20:b8:5f:e4:46:d8:22:ab:aa:4e:a9:19:ae:61:ab:
5d:6d:56:df:8c:63:b7:b1:46:ae:16:8d:fb:7a:e0:
4b:7a:d5:97:37:26:e4:43:91:40:74:66:e5:78:e4:
2e:3a:eb:44:ca:9e:b2:e2:5f:4c:e6:8e:2b:3f:53:
b8:cc:e7:33:e3:23:75:a9:1b:30:cd:91:e1:bd:fb:
a2:54:d5:ba:78:c4:ef:73:2f:63:91:2a:d1:a4:56:
9c:94:92:21:cf:7d:57:8c:cf:f5:35:68:75:a3:5f:
a4:21:80:e3:d3:ac:f4:9a:f5:cf:70:e9:37:8d:e7:
fb:5e:8d:7b:f1:6d:e9:3d:f0:c5:a5:6c:93:60:50:
ce:b3:f0:9d:10:2c:d6:41:83:8e:78:6b:b7:4c:6e:
14:83:c7:ce:16:e4:41:6e:b6:b3:f7:ea:3b:1a:c0:
33:a8:49:12:3f:6f:91:b2:f7:1c:42:aa:26:cd:8f:
00:6c:5b:34:98:c7:48:0e:e4:29:38:05:e9:79:4b:
1d:dd:fe:ed:d6:44:31:13:99:17:01:4f:96:14:44:
a6:6a:cf:02:5c:65:0c:ab:67:e1:77:cb:39:f2:d6:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2E:03:40:32:2E:40:C7:B7:BE:49:75:60:A3:CC:52:2C:4E:97:C2
X509v3 Authority Key Identifier:
keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c9:be:53:07:3b:ba:0c:64:21:a1:69:d0:ba:8b:13:d9:38:
24:88:3d:6c:03:0f:be:2d:53:a5:4a:33:92:01:2f:59:8c:f6:
ce:ba:b4:e4:24:2b:0f:db:34:d7:30:7a:86:04:40:44:1a:9f:
04:e0:46:34:9d:b3:1b:96:1e:4a:55:6c:a3:29:fc:e7:12:7b:
ea:b6:d6:85:23:d6:c1:a0:0e:8b:4a:f7:42:13:ae:5e:8e:1b:
a1:d0:c4:ea:ea:1b:d2:b1:42:df:19:99:b3:88:b1:9a:0d:77:
4e:03:ec:ab:43:0f:d9:79:05:9c:0f:06:7e:bd:75:a5:3c:9c:
2f:fe:9e:49:c8:31:99:21:8f:29:3e:41:9b:0f:44:38:d3:43:
1a:25:23:45:09:d2:d4:41:03:50:84:0b:02:a8:75:f9:50:d2:
7c:16:63:1f:18:62:eb:8c:71:8b:f4:6d:b0:f8:f2:27:ea:97:
28:dc:2e:0c:e2:87:f1:f4:01:59:a3:26:07:84:9e:28:98:ba:
b5:34:e1:0c:b4:b0:5c:fd:29:94:0b:2f:db:02:cb:64:77:64:
a4:0f:70:80:7f:e3:6a:e8:62:14:35:6c:af:8d:2e:b4:c7:64:
03:d2:b5:21:10:2b:f9:e3:dc:df:54:97:e9:e5:8a:c5:67:2c:
df:23:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:01 2025 by rpki-client