Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json)
Hash identifier: CNsRM1DpnZFoEvQ3IFfkYX6Mmsq9UbdeIL9aZ5GWyMo=
Subject key identifier: 7D:FE:07:22:9D:E4:F8:3D:E7:8D:FC:11:77:DC:4A:79:39:48:62:9D
Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Certificate serial: 0199FE7DEDC51E4C57070E189B0BFE0BC735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
Manifest number: 08B9
Signing time: Sun 19 Oct 2025 22:01:29 +0000
Manifest this update: Sun 19 Oct 2025 22:01:29 +0000
Manifest next update: Mon 20 Oct 2025 22:01:29 +0000
Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: 7/e3pJ6G8LtPmykwo1B9e8BDfmkQyol03Zv1WmEUu7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:ed:c5:1e:4c:57:07:0e:18:9b:0b:fe:0b:c7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Validity
Not Before: Oct 19 22:01:29 2025 GMT
Not After : Oct 20 22:01:29 2025 GMT
Subject: CN=7dfe07229de4f83de78dfc1177dc4a793948629d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:fa:6d:1c:f2:d6:e2:4e:e3:d0:23:d3:cf:
df:ab:c1:d1:5c:73:1a:99:4b:4a:6a:d7:af:17:3d:
20:85:06:86:dd:07:b6:bd:71:32:a0:a8:82:fb:27:
ff:53:cf:63:a0:35:d5:fe:a9:95:02:68:96:80:01:
ee:c7:b1:b0:5a:91:ee:46:ac:ca:3b:06:2c:86:ab:
86:d0:de:25:e2:4c:ac:9c:14:e2:bb:69:ac:c0:dd:
2b:bc:c8:1f:29:2c:32:e5:b2:47:33:79:be:58:40:
70:f0:f7:4a:08:fa:9d:74:6f:75:ef:84:f1:74:26:
a6:4e:c7:14:8c:2e:6c:fd:fb:7f:83:38:3b:4d:ce:
14:a6:d7:67:63:93:66:8a:9b:e6:28:41:0c:89:90:
ef:23:ea:39:3a:6d:97:cd:25:10:6b:d0:30:38:52:
99:de:bd:54:fd:5a:95:50:4e:bd:7c:0e:77:46:83:
fd:cf:d3:da:bc:14:03:fd:7e:e0:53:1b:5a:ab:28:
f5:6a:0e:24:06:8a:4f:cd:53:2d:be:13:34:51:f7:
3b:cc:1c:c8:44:78:e7:01:eb:ce:62:5e:69:32:46:
9e:15:52:f0:40:55:d0:a3:f4:46:b8:13:4b:9c:65:
51:2a:19:95:c5:f2:de:54:b8:ae:71:ad:de:1b:bc:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FE:07:22:9D:E4:F8:3D:E7:8D:FC:11:77:DC:4A:79:39:48:62:9D
X509v3 Authority Key Identifier:
keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a1:54:03:f2:92:91:54:b6:c3:09:3d:13:e2:58:fa:4f:c6:
b0:17:ee:88:3b:08:f2:ad:21:3f:43:e0:d3:9f:5a:01:9e:8f:
0f:9a:7d:de:b3:62:29:9f:f1:75:1c:2a:09:0d:17:10:13:61:
42:a9:bb:df:ca:b7:48:72:2e:41:30:27:9a:34:bf:db:ab:5a:
1e:03:83:5a:79:b6:1f:2a:e4:38:59:ed:31:02:6e:57:bc:73:
60:3f:a3:0e:1a:84:cf:7e:ad:88:2a:d9:16:31:1b:2d:5a:3c:
f9:d9:08:49:17:95:dc:ce:a2:94:a8:d7:83:ba:e4:9d:2d:c3:
89:99:40:9d:2d:82:6f:4c:ae:33:d3:97:7f:cb:9b:92:ce:df:
98:ac:c8:59:a1:7b:0d:3c:63:4f:92:46:ec:34:f9:ff:16:43:
0a:71:92:2b:a6:2f:76:9b:eb:6e:91:66:49:61:0e:ef:7f:59:
7d:82:38:6c:a4:5e:64:d8:37:5b:ee:b2:e5:95:f5:b1:cd:09:
8e:91:e4:04:7d:cd:15:75:a5:11:76:d4:0e:fd:cd:03:20:c6:
65:ce:7d:f9:71:fa:e8:23:4b:82:92:87:9d:7a:d0:40:12:81:
d9:d9:ea:f8:91:9e:5e:16:e4:db:3e:85:54:eb:cf:4a:5d:0d:
5c:df:36:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:31 2025 by rpki-client