
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: kZJjZ6vqoHZOAYFEu/OGOzDzeB55/3iY6SJAkPaWRCI=
Subject key identifier: FF:97:9A:5B:90:7D:1D:A0:EE:00:43:96:B1:54:7E:1C:E8:5A:91:B3
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 0199FBEC225E5276E58367129F5807FBEF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 042E
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: akszvrtIryVl+aQp/j/cIFtu6iNwsGcF1QGZW5sOuvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:22:5e:52:76:e5:83:67:12:9f:58:07:fb:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=ff979a5b907d1da0ee004396b1547e1ce85a91b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:c1:71:d0:64:d8:d0:40:65:f9:74:38:39:
a1:a6:e5:70:fd:c7:fc:46:7c:d3:3a:ef:b9:35:81:
ec:34:cd:c6:c7:d2:f2:7e:e1:07:ed:6e:bb:3c:2d:
54:e0:f3:da:69:ac:e4:c9:a5:19:80:d5:51:e6:b8:
0d:3b:fb:80:ec:5e:1b:69:43:da:7d:88:a8:0a:36:
78:d9:ed:a6:33:00:82:d4:6e:e1:d2:ac:78:52:b8:
10:31:21:b2:04:b7:5e:6e:35:89:4e:e2:71:d2:9b:
7f:12:b5:cd:16:8c:5f:40:8b:b3:0d:7e:8b:42:ee:
f2:d8:e0:24:8e:0f:f7:4b:71:51:ef:22:41:96:b7:
da:70:e3:8d:99:12:d1:7b:fc:98:18:7e:71:75:a9:
c3:f6:d1:0d:18:a4:d1:8f:3b:29:a1:8b:01:b9:94:
9c:c7:61:e6:b7:fc:9d:ae:b5:5d:19:c9:7b:d8:14:
0b:db:0e:b5:cd:11:50:b3:4c:7c:ed:93:c1:55:07:
cd:f4:d3:ac:2e:32:97:da:7d:f3:0e:60:e1:ef:d5:
82:46:fa:58:ca:86:e3:7a:0f:7a:a8:b0:6f:d8:72:
41:17:dd:07:45:4e:20:88:00:1d:11:7e:bc:18:4c:
d2:5b:63:d9:5f:94:e0:06:ac:75:a5:db:13:bf:b7:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:9A:5B:90:7D:1D:A0:EE:00:43:96:B1:54:7E:1C:E8:5A:91:B3
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:5f:72:15:c0:ed:94:66:a7:97:ee:6e:99:08:7b:ab:21:
dd:96:ff:e1:11:7b:1d:83:74:98:fb:16:69:54:69:85:f4:a6:
b2:03:5b:69:14:84:25:3b:ae:f6:64:f1:b8:57:17:52:48:e9:
c4:2b:ca:3f:ae:4a:52:f7:62:c4:75:ca:f2:83:7f:7e:c9:57:
86:22:52:0b:c5:3f:5d:dc:1d:06:3a:a1:48:27:f7:96:07:ca:
34:3b:26:86:d4:4b:01:ea:b4:f8:eb:da:f2:34:56:33:41:b9:
9a:f1:13:ec:1d:0c:7b:a0:22:30:18:cd:92:89:26:4d:08:8b:
ef:7e:49:1f:e9:b9:56:8a:2d:e7:f0:a2:e7:36:ed:12:67:ec:
a6:a7:80:c6:a4:eb:73:84:2b:14:e0:95:3f:51:72:50:e9:57:
de:a3:d0:d6:31:c8:30:3d:a4:34:4f:3f:6f:9e:f7:f4:b3:bb:
0b:e8:f7:0c:25:55:30:4b:9b:32:6c:44:1c:3a:5d:70:ab:de:
a5:a5:5c:23:31:62:87:cf:0b:73:82:f0:c4:73:cc:03:d3:c1:
20:35:e7:84:46:14:c8:ce:41:3b:69:21:91:8b:13:60:69:8f:
00:48:12:43:9b:63:fa:8a:68:30:8e:3c:65:9f:8b:10:25:ae:
58:31:13:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:13 2025 by rpki-client