Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: 2y4g5ls0/BWKnCenRtxrhDHr+oHhT73UXmKaiwYMRpY=
Subject key identifier: EF:8C:73:0B:DC:97:00:9C:CC:CE:5E:3F:40:D8:0E:CE:C3:C5:FE:B7
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 0199FBEBCB3D4941A2FE5822979F4F18D3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0C12
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: xvj2IJxw86od7GNcS27GDTSW+q4bp+M4hgaN0ov8xXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cb:3d:49:41:a2:fe:58:22:97:9f:4f:18:d3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=ef8c730bdc97009cccce5e3f40d80ecec3c5feb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:7a:1e:d5:b0:ce:e6:97:72:08:a6:8b:5d:
2c:1e:4d:31:ea:cd:80:dd:89:1d:7e:b7:b2:ba:5c:
1d:82:0f:52:b0:02:b6:f6:a2:e4:6b:d8:86:f8:8f:
59:db:23:ce:0e:53:60:8c:e5:8d:01:93:4b:1b:13:
19:a5:8d:9c:04:60:0b:c2:78:06:26:f3:e3:af:b2:
fd:26:ef:49:9a:3c:f6:e7:ba:44:0e:d8:31:c3:62:
c2:b4:9d:f9:eb:fc:2a:d3:6e:9a:8e:6d:39:f9:4d:
50:81:b2:c7:ee:b3:73:b2:33:80:cd:9a:5b:12:4f:
6d:87:4e:2d:40:9c:dd:66:84:2b:53:ed:e6:8d:8d:
ed:65:9d:15:99:95:c5:af:ce:70:47:b4:c6:39:47:
d4:0d:4f:70:d9:35:42:45:96:15:2f:cd:e2:0f:a3:
b8:9b:15:14:05:1a:c7:03:01:81:08:f0:0f:23:99:
9b:6f:7c:86:e8:00:61:99:7f:0e:05:5a:c0:61:7a:
2f:5c:61:92:d6:91:54:5e:0c:33:b8:8e:41:06:9d:
45:6f:02:0f:a2:94:46:6d:b2:a3:8b:1f:10:0a:42:
80:ab:2e:89:ca:0f:c6:a8:cb:cc:58:a8:6d:99:b2:
e1:5a:53:74:5f:be:1c:ec:87:51:5e:8a:ed:8e:53:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8C:73:0B:DC:97:00:9C:CC:CE:5E:3F:40:D8:0E:CE:C3:C5:FE:B7
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:35:7f:f9:b1:1e:66:03:8c:ee:b7:c0:85:d5:a9:44:98:26:
3f:d8:b4:1f:ff:66:14:27:2d:02:90:e3:d2:8f:db:52:b4:18:
0e:0c:be:59:d4:ec:af:24:14:f6:81:bd:a4:6a:ea:a5:1f:ef:
31:7e:17:36:fa:50:79:a3:36:6c:4a:53:cd:c2:bb:dd:ba:d1:
b4:c9:ee:01:87:7b:6d:4b:9b:5c:1e:e0:58:df:19:76:fc:9b:
97:4e:50:c9:79:99:50:6c:c0:d3:31:42:78:ae:51:0e:db:01:
5d:a1:fb:95:34:c3:7d:51:ae:fc:b1:12:eb:ae:73:26:53:02:
f3:d9:12:0f:c2:30:d1:0c:eb:49:24:91:6b:7d:f3:c1:3a:42:
a1:26:b2:bc:98:1d:c4:c5:c4:14:56:1e:ec:b3:e8:a9:11:68:
8f:76:19:4f:27:28:33:3e:17:79:99:19:78:8f:38:70:1d:13:
1c:99:bb:83:d6:a0:31:a7:0f:b7:83:df:af:f1:ac:12:2e:69:
ff:2b:e4:99:d3:41:6e:80:80:ac:33:0b:70:55:70:ac:10:b2:
fd:12:74:0b:fa:3d:71:c7:27:34:9c:d2:5c:fc:7b:bb:a1:ab:
28:5f:d6:3c:4a:c7:31:a3:09:6a:da:b5:f7:9c:15:64:8f:60:
08:7d:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:27 2025 by rpki-client