Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier: Gy0X2NC9VhIVQaXeMODWlFqhlzX1HWSO66X1FXcRqYM=
Subject key identifier: B5:3D:DA:5A:DE:00:2A:D4:28:A4:A6:B7:CF:58:64:4C:FE:ED:36:93
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial: 0199FCFDBE02FA472282A119BCABF3F85252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number: 02AB
Signing time: Sun 19 Oct 2025 15:01:51 +0000
Manifest this update: Sun 19 Oct 2025 15:01:51 +0000
Manifest next update: Mon 20 Oct 2025 15:01:51 +0000
Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: URb0Yf2E+xVd/Vxwz3OnXNvHIJLRdG+P3rKMPYGWzcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:be:02:fa:47:22:82:a1:19:bc:ab:f3:f8:52:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Validity
Not Before: Oct 19 15:01:51 2025 GMT
Not After : Oct 20 15:01:51 2025 GMT
Subject: CN=b53dda5ade002ad428a4a6b7cf58644cfeed3693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:56:39:a5:1e:33:ae:8d:bb:85:9f:f9:36:
33:2f:e3:fc:f6:0c:13:f0:a6:a5:1d:86:d6:3a:96:
ed:45:72:41:32:33:11:dd:28:b3:61:3f:77:cb:b7:
df:d1:4d:d1:6b:ee:80:0a:ea:cc:7e:2a:2d:72:5b:
2d:de:40:e4:8d:72:2d:75:bf:c3:b7:c5:ef:f6:37:
ec:70:23:62:e7:e3:fb:85:a7:e4:ad:c8:01:d1:7e:
2f:dd:45:43:27:6e:36:5d:20:a8:7e:6a:42:4f:15:
25:d6:bd:0d:98:7f:43:7f:c8:d2:28:09:c0:06:e4:
12:90:43:e6:b8:8b:e9:a4:a9:20:41:89:25:73:96:
8a:8e:3b:84:2a:43:b0:c7:e3:ec:41:1f:e1:58:72:
45:63:aa:9b:ef:90:33:0b:d8:c1:6c:1b:3d:07:86:
d5:96:25:30:03:b5:90:6f:18:15:59:77:79:fc:e4:
33:53:60:54:4f:61:5a:4e:4e:43:f7:20:e4:8d:45:
43:f5:68:97:45:6d:21:bd:31:8a:d3:68:95:cf:db:
ee:87:d6:78:57:35:a8:78:1a:bd:6f:bb:7a:1c:0b:
f1:95:ab:dd:ae:c9:8a:2e:c8:9e:32:a4:fc:6b:d9:
4e:97:7a:14:ab:5f:de:87:98:f0:db:a2:08:5b:04:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3D:DA:5A:DE:00:2A:D4:28:A4:A6:B7:CF:58:64:4C:FE:ED:36:93
X509v3 Authority Key Identifier:
keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ce:be:2f:bf:43:a8:f5:ab:76:11:27:1e:b8:8d:45:2f:78:
0c:02:21:d8:1b:fc:e9:db:a6:7f:1c:aa:38:02:c2:a2:78:26:
4c:b3:2b:93:16:33:ea:3d:40:83:7c:fe:07:87:ec:04:6e:94:
e3:d5:bf:80:23:d0:4a:78:6e:6f:bd:35:ca:c7:c4:5a:48:82:
92:12:67:6a:9c:b4:3f:b0:8b:f9:d8:73:30:8b:9e:c9:2d:f7:
42:d1:6c:28:bf:88:08:a1:14:f6:80:2d:9c:16:d5:aa:63:66:
e1:ea:22:02:69:45:9d:28:19:bd:9e:4b:2d:55:70:fd:73:1f:
2b:79:a0:1e:70:92:50:06:b8:cb:9d:3c:9b:f4:8b:c6:bc:3b:
88:b0:4b:6a:4f:52:55:89:ce:ec:91:f8:83:74:4b:8e:17:d4:
75:3e:dd:55:ea:97:72:2b:d4:70:bd:fd:1c:7d:1c:f9:c1:8e:
f1:80:35:dc:de:58:39:fe:ec:bc:72:9a:10:97:6c:a5:97:7a:
be:39:d0:c6:54:0c:25:31:eb:8c:23:94:0b:58:a5:2a:85:3b:
ab:91:e3:a9:0b:36:80:07:8a:fb:7c:d4:1e:cb:3a:43:7a:44:
9d:d7:6d:da:92:28:90:08:57:1e:f9:60:73:86:9c:6b:2d:6c:
73:77:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:31 2025 by rpki-client