Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
File: xwy87PJahmXDWnjIIdEes6ZCNiE.mft (raw, json)
Hash identifier: vKEQ3pyjGGQMw2oHwLuzUu+8dukV/ow2jDwO6ETTrdI=
Subject key identifier: AB:14:B3:08:13:45:79:20:49:39:E9:10:4C:8F:A0:1C:B9:5A:1B:73
Authority key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
Certificate issuer: /CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Certificate serial: 0199FD345BCEA8AA77766EE8FB4548E5BA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 16:01:30 +0000
Manifest this update: Sun 19 Oct 2025 16:01:30 +0000
Manifest next update: Mon 20 Oct 2025 16:01:30 +0000
Files and hashes: 1: xwy87PJahmXDWnjIIdEes6ZCNiE.crl (hash: InYxkzUmdSxWiulCf1TxdM8luS14z1DcOrgayrrGqgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5b:ce:a8:aa:77:76:6e:e8:fb:45:48:e5:ba:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Validity
Not Before: Oct 19 16:01:30 2025 GMT
Not After : Oct 20 16:01:30 2025 GMT
Subject: CN=ab14b308134579204939e9104c8fa01cb95a1b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:f4:64:bc:e3:40:a7:35:51:03:f9:3f:1e:
9e:86:97:68:9a:2d:55:dd:8e:a5:1a:bd:43:73:2c:
5d:0c:6d:91:39:d9:bf:54:20:2a:19:39:b8:f7:a0:
81:e3:51:de:f0:e0:96:0a:8b:fa:12:11:33:93:b9:
59:65:f7:d8:4e:38:d1:12:55:42:77:24:d3:19:b8:
87:0c:b0:61:f1:32:a0:9e:eb:dd:7f:5b:59:6d:39:
b9:b2:86:67:f3:f9:46:c2:85:db:48:90:04:be:b9:
69:05:94:03:62:f8:2e:d5:01:72:01:21:fc:87:a3:
ea:b4:10:5b:55:e7:06:ee:5a:ee:51:c1:8f:f6:ed:
a0:54:58:98:df:46:cf:00:c9:2a:f5:1b:e7:77:f7:
9a:9f:97:bf:dd:71:0d:5c:cb:d7:c9:f3:99:87:e4:
60:de:f6:19:8a:d6:ef:8d:5b:02:f1:f3:3c:e6:41:
13:7f:19:7b:e4:cc:6c:55:02:af:93:6b:28:81:23:
58:75:8f:5c:d6:63:e7:2b:25:a3:6e:2b:41:6b:16:
8f:da:8a:71:73:33:87:ca:44:64:cf:e2:67:81:14:
90:c1:73:9c:17:be:d6:17:71:67:2f:e7:a2:2a:33:
62:ce:ed:9f:81:e4:33:93:41:79:32:90:b6:38:9c:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:14:B3:08:13:45:79:20:49:39:E9:10:4C:8F:A0:1C:B9:5A:1B:73
X509v3 Authority Key Identifier:
keyid:C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:35:ba:29:0f:08:d6:02:01:59:54:9c:9c:d7:c7:36:4c:7f:
6f:6f:86:e1:ff:43:d9:53:f6:55:42:f5:39:3f:98:5b:a9:ac:
39:58:29:08:7d:3d:c9:5d:9a:01:6f:9d:85:7f:9a:08:03:d8:
45:31:cc:37:06:75:08:2c:77:5c:24:a2:c3:91:6f:4b:d5:1a:
6e:bf:14:09:b1:bc:26:27:c9:00:c9:04:c6:a3:b1:2c:4b:b0:
d3:d0:29:5a:f0:94:90:78:52:73:27:be:1e:a2:6d:45:a8:68:
8e:57:d5:a8:c3:39:21:cb:16:99:6e:17:32:30:0b:89:88:e5:
6a:5e:a4:70:ec:21:da:6a:e9:b2:a3:94:81:7a:c1:f3:4a:d3:
e8:f2:82:cd:4a:6d:0d:79:0b:40:ad:ea:6a:74:5f:b3:44:53:
6d:7b:04:15:c3:bc:ea:45:0a:e7:5b:57:db:2c:98:15:35:8d:
ee:d4:4c:24:0c:59:5a:b5:61:fa:19:8a:f5:ea:d3:8d:54:f7:
34:43:1b:b4:55:a8:94:62:30:5f:27:3d:50:5d:b7:e2:4c:b7:
e8:e3:56:68:3b:ab:41:c6:fa:d3:8b:47:46:a4:fe:46:71:6c:
4b:80:0e:c5:11:b9:fd:e3:fe:6d:6e:84:99:4b:cc:52:18:81:
8f:ee:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:40 2025 by rpki-client