Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier: CZVvfZAiVKG6+5izU+Nc3PhswmAgeWTjdPqk0li+4yA=
Subject key identifier: 94:82:37:7E:CB:10:66:2B:20:6B:08:19:A8:88:32:15:5C:18:D0:20
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial: 0199FDD975D1DBB39AD64CB4AEBA23152599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number: 143B
Signing time: Sun 19 Oct 2025 19:01:51 +0000
Manifest this update: Sun 19 Oct 2025 19:01:51 +0000
Manifest next update: Mon 20 Oct 2025 19:01:51 +0000
Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: w1rL0s6xSHZxEsUU3GQuD45pEdceefEiAUbO51Wdvlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:75:d1:db:b3:9a:d6:4c:b4:ae:ba:23:15:25:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Validity
Not Before: Oct 19 19:01:51 2025 GMT
Not After : Oct 20 19:01:51 2025 GMT
Subject: CN=9482377ecb10662b206b0819a88832155c18d020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:c4:3d:de:3a:4a:b1:6b:5b:67:99:d7:24:
02:ea:5f:73:7d:41:0c:3e:b2:8a:b9:66:aa:40:17:
30:c4:f0:52:3d:08:92:da:b1:4d:d5:8f:1a:e6:dc:
42:b2:ae:6a:be:b6:19:cb:73:59:4f:42:eb:57:bb:
8f:2c:29:b1:48:d3:e5:52:57:6d:c3:4a:dd:8d:6d:
64:92:3b:99:0b:e1:30:50:17:c6:0b:01:8f:7a:44:
67:a4:91:4b:b3:8e:d0:7c:2e:76:bc:8f:df:12:1b:
e7:69:f9:36:06:74:1a:9c:70:79:e6:c9:1b:7e:ce:
b8:5f:2b:70:8a:91:ee:64:20:68:b7:99:88:32:47:
46:78:ba:42:66:95:51:c4:ca:b4:e4:8f:ae:c6:5b:
be:d3:36:64:87:b7:d5:89:ae:84:86:94:43:cf:8b:
17:54:a2:72:78:e2:20:05:0d:b7:89:4d:96:55:60:
f6:7c:00:ba:82:b4:48:09:83:01:a1:79:50:9c:b3:
a9:c7:a0:fa:74:b6:f6:3f:41:f4:2e:0b:63:ad:64:
6a:dc:3b:95:fa:44:81:1b:e4:14:db:76:d5:9f:dc:
85:83:99:b9:12:64:f5:66:da:01:6d:5d:67:dd:88:
ec:cf:c4:51:64:aa:c7:72:49:25:54:cd:67:ed:b6:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:82:37:7E:CB:10:66:2B:20:6B:08:19:A8:88:32:15:5C:18:D0:20
X509v3 Authority Key Identifier:
keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3b:46:50:1e:66:77:30:81:e0:8a:f7:36:01:b1:71:4a:b5:
71:4d:a8:a3:38:c3:9a:df:60:43:ec:39:d6:33:a8:13:89:bd:
80:33:94:50:a2:80:70:5b:f5:de:a4:b5:5a:4c:d7:1f:55:07:
f1:08:a9:f9:32:e3:a9:b3:9b:01:6d:a9:1b:ec:c9:0e:b8:b2:
da:af:0c:52:5a:fe:c5:3a:83:3a:a3:09:dc:b8:87:5e:62:18:
97:cb:ff:67:d6:cf:c5:c6:87:8a:a6:7c:60:b8:12:1d:44:9f:
cf:38:05:21:90:80:b4:ac:5f:bb:a3:92:3a:92:18:f2:8e:e9:
73:4d:f4:1b:3b:5f:63:6e:ac:e1:a8:4c:6f:e2:2f:45:7f:70:
7c:ed:a6:fa:0c:00:2c:a5:af:f3:b1:7b:b3:73:b7:be:c7:e2:
f3:41:8a:f2:70:c5:d3:09:f2:9f:1b:b2:1d:53:20:ba:38:39:
c0:0a:1c:a1:53:38:b4:d5:75:21:91:06:68:92:90:16:30:a5:
55:b0:0d:2f:85:3f:37:a9:ee:08:40:7b:51:12:ac:75:01:ae:
80:a1:a4:2a:f7:61:17:28:7d:54:5f:97:66:ab:68:e1:d1:49:
cb:ac:a4:c3:9a:36:b3:f9:7d:e1:3e:73:11:c4:29:e7:f8:02:
36:af:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:12 2025 by rpki-client