Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
File: xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft (raw, json)
Hash identifier: e2B7W2Jy3ktgft6W6F2LpH+9SihCpnVswJLzZWFuK2k=
Subject key identifier: C8:04:90:63:4C:49:24:FE:4E:13:13:48:BD:4F:65:5B:19:1A:F4:01
Authority key identifier: C4:13:D7:A3:76:5F:F9:A2:2B:BC:22:99:E0:49:69:1E:29:40:CB:82
Certificate issuer: /CN=c413d7a3765ff9a22bbc2299e049691e2940cb82
Certificate serial: 0199FA6AA17005953838CBE894FF187A2F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
Manifest number: 1452
Signing time: Sun 19 Oct 2025 03:01:55 +0000
Manifest this update: Sun 19 Oct 2025 03:01:55 +0000
Manifest next update: Mon 20 Oct 2025 03:01:55 +0000
Files and hashes: 1: xBPXo3Zf-aIrvCKZ4ElpHilAy4I.crl (hash: P6qgFlBpW/7AfFYyesoL6s3d2y0YWFCuQLD7LdJ2dlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:a1:70:05:95:38:38:cb:e8:94:ff:18:7a:2f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c413d7a3765ff9a22bbc2299e049691e2940cb82
Validity
Not Before: Oct 19 03:01:55 2025 GMT
Not After : Oct 20 03:01:55 2025 GMT
Subject: CN=c80490634c4924fe4e131348bd4f655b191af401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:3e:46:7e:f5:f7:ba:da:23:5a:f3:08:19:
be:5d:12:c8:65:9b:aa:72:41:10:af:57:ac:65:6e:
e9:7b:7d:62:d4:c0:dc:6f:ca:9f:9e:7b:49:fa:81:
7b:fb:2b:41:c2:d5:bc:d7:83:48:e9:b9:b1:32:3e:
ed:e8:58:9e:00:c0:97:92:88:e7:f8:53:db:ff:10:
4e:ed:12:01:0b:38:b8:a4:5f:45:da:27:e2:20:87:
87:39:a8:25:8f:1d:25:e4:ad:8f:c2:5d:51:d8:ce:
45:fc:87:f1:19:c3:f1:71:6a:83:9d:da:bc:b1:f7:
a5:e8:22:c7:39:9d:15:d1:ba:5d:2d:1a:4e:bd:b5:
7e:90:67:48:9d:3b:2f:fe:8b:35:d3:84:62:e7:86:
b1:23:b6:53:86:a8:81:06:58:c7:b9:d0:43:58:cb:
ea:3e:34:03:fb:8b:f5:a1:af:70:64:89:26:13:df:
fc:2c:80:84:1e:3c:4d:ec:e9:ad:84:b2:fe:f9:b4:
d4:58:33:1b:11:21:1d:a1:e2:ad:e1:92:26:c3:12:
88:99:49:89:85:55:59:24:ad:33:1a:c0:4e:ef:5e:
7e:64:91:54:04:9b:f8:f0:f2:71:0d:01:3e:83:4d:
7e:6a:90:d2:91:3f:63:b2:07:90:08:92:d2:9b:86:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:04:90:63:4C:49:24:FE:4E:13:13:48:BD:4F:65:5B:19:1A:F4:01
X509v3 Authority Key Identifier:
keyid:C4:13:D7:A3:76:5F:F9:A2:2B:BC:22:99:E0:49:69:1E:29:40:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a7bc86-0955-468b-9eb5-e860be7e7c54/1/xBPXo3Zf-aIrvCKZ4ElpHilAy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:57:a9:fd:11:e6:ee:88:f0:cf:c3:cd:ca:48:a0:ab:f6:28:
11:52:9a:56:ef:e8:4e:72:ba:e8:f9:d7:06:f5:95:d6:bf:e3:
91:9c:46:df:82:08:fd:e4:b1:72:5d:ec:4f:4a:39:5b:0f:82:
d6:62:cf:e6:73:af:d8:90:e3:da:32:cc:33:a9:ff:04:74:5b:
41:5c:7f:86:64:fa:ed:78:9a:ea:f1:58:03:e2:08:f9:60:30:
f1:aa:2b:5e:30:90:9a:23:50:7a:f7:0f:ba:45:e6:53:ed:84:
0b:4d:21:c7:65:22:49:8f:0c:c6:7f:37:76:09:82:71:62:11:
fb:29:d8:09:d4:3d:3d:9d:da:d5:93:d8:05:e9:f4:b8:43:83:
0c:4e:1f:dd:4b:c1:30:bb:26:83:95:58:e3:94:cd:6d:7e:ee:
a2:db:f9:de:49:f8:ec:2c:66:df:45:fb:2e:b5:90:0e:75:92:
5f:72:45:d2:2d:2a:3c:e6:3a:86:75:d1:a0:a1:f0:61:47:fe:
32:5d:f8:86:b7:52:96:c7:41:42:33:02:ed:1b:a3:ff:fc:a8:
ca:2f:04:ea:fc:cf:b3:63:79:2a:1b:1f:22:a9:0e:d9:02:9a:
4e:5f:36:db:8e:9f:2f:70:8e:17:85:e6:ca:76:87:08:46:d8:
57:4d:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:55 2025 by rpki-client