Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
File: xIzPWOSy4trdSoSDPAZ87iuXRek.mft (raw, json)
Hash identifier: dqebKi0uo/w0FpSD5dnHIYCnl84+Uqd26eUMBPJUHno=
Subject key identifier: D7:63:FC:65:C4:D0:CE:4E:74:4F:A2:2D:47:3D:8C:A4:0C:88:F9:42
Authority key identifier: C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
Certificate issuer: /CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Certificate serial: 0199FD346A36D67757D0532E8D4F7A89ADFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
Manifest number: 0912
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: xIzPWOSy4trdSoSDPAZ87iuXRek.crl (hash: j0gk5uhJoRVuXd79SX3Ess39myp2FIMs7AlQT8HffI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6a:36:d6:77:57:d0:53:2e:8d:4f:7a:89:ad:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=d763fc65c4d0ce4e744fa22d473d8ca40c88f942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:33:32:72:a9:b3:f5:2d:73:c5:e9:68:9b:72:
26:c7:9b:9b:cc:60:51:1e:0d:e0:38:3a:6c:1a:3b:
db:34:04:f1:6b:9a:84:64:69:a7:38:a8:92:48:0d:
27:09:5e:08:72:5f:ee:31:3b:d0:36:cf:c3:f7:45:
9c:c0:98:5b:ac:bf:38:f6:4c:59:08:b5:41:5b:11:
43:e9:ab:f6:4b:95:e1:24:88:2f:96:12:96:6d:97:
6c:04:03:5e:13:3d:74:41:ba:28:95:93:33:a4:4f:
61:0a:de:46:a9:e1:58:e2:04:7a:cf:70:b7:20:00:
0b:35:c7:f3:e8:43:44:06:99:51:f3:5f:9e:66:43:
da:74:96:cd:a8:58:77:08:6e:58:69:86:97:dc:1a:
1d:bc:67:4a:2f:7c:51:f9:78:e8:3d:a8:ee:c5:cd:
6c:76:c1:1a:73:4b:0d:75:51:a8:f5:3f:24:2b:f4:
36:56:6a:be:f0:7c:8d:f6:6e:a1:b0:f7:72:eb:54:
31:98:b4:2a:d1:bd:0c:18:d1:ac:63:9a:91:16:f7:
af:46:5a:cc:0e:49:a2:4a:74:08:54:04:ca:df:29:
88:20:11:23:de:e0:24:ea:0c:53:df:ef:11:69:83:
c6:b6:92:db:df:b4:d2:2f:54:34:ab:8e:7d:d8:c8:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:63:FC:65:C4:D0:CE:4E:74:4F:A2:2D:47:3D:8C:A4:0C:88:F9:42
X509v3 Authority Key Identifier:
keyid:C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bd:08:98:76:00:30:e7:c3:23:f9:fc:79:3c:c1:67:cc:a1:
0f:5b:65:f9:ee:74:8d:18:8c:6b:ad:65:b1:9b:aa:d4:b9:ec:
a9:38:92:18:2c:6c:72:0a:2d:42:76:cd:0f:63:28:38:dd:4e:
b7:60:0b:a5:95:e5:f1:b0:9a:0b:e5:6b:39:c1:28:5c:ac:71:
5c:1f:1b:1f:16:59:38:0e:3f:bf:02:af:1b:f4:34:45:b2:a4:
90:f6:90:f6:d0:f1:36:9f:8f:1a:b0:81:ac:e9:b2:d7:43:03:
8c:58:09:05:49:c0:4c:9d:0f:bd:79:fe:35:ca:20:14:96:e5:
8b:09:b9:ed:23:71:11:4b:7b:f1:85:15:54:f2:af:c3:a2:80:
08:76:aa:cc:68:b1:51:5d:5f:df:54:cb:6b:db:28:5a:29:96:
2e:2b:9e:86:b7:01:f0:4a:f5:b0:1f:cb:ce:4f:39:59:45:48:
2c:e4:0c:2b:a8:34:0b:86:78:7b:09:2b:5e:6b:5f:f1:07:70:
38:78:33:6b:0b:68:1c:f1:f4:72:a5:83:b9:53:24:13:1f:15:
18:e9:25:d7:45:37:b2:91:56:d7:2f:01:cc:4d:94:7a:71:41:
2c:1a:e0:2b:e5:94:db:88:82:e2:fa:1a:ba:e6:bf:ab:23:86:
8f:8b:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:57 2025 by rpki-client