Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
File: XHOCiOHdRuIcmgORGXJEtHjQqyY.mft (raw, json)
Hash identifier: Bf75gefFIFCWC7aSeUpn+jzgopJAoj0Sn1y8aOkpeDc=
Subject key identifier: A6:76:B8:26:86:4F:06:CF:1B:28:5B:F0:2D:E3:9E:1A:E0:D6:30:9F
Authority key identifier: 5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
Certificate issuer: /CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Certificate serial: 0199FBEBA397C78FEE041C01C51DA55285F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:27 +0000
Manifest this update: Sun 19 Oct 2025 10:02:27 +0000
Manifest next update: Mon 20 Oct 2025 10:02:27 +0000
Files and hashes: 1: XHOCiOHdRuIcmgORGXJEtHjQqyY.crl (hash: lkSOHn/4qrcw5vuVCXVOvO+DOmYa6uq3X6pqFkFszT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a3:97:c7:8f:ee:04:1c:01:c5:1d:a5:52:85:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Validity
Not Before: Oct 19 10:02:27 2025 GMT
Not After : Oct 20 10:02:27 2025 GMT
Subject: CN=a676b826864f06cf1b285bf02de39e1ae0d6309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:03:97:d2:c1:03:9b:22:05:b9:75:39:22:
8d:af:3c:1b:0b:83:10:96:f7:45:91:e3:35:8f:a2:
a3:f6:e1:9f:39:00:05:86:9c:a8:77:8d:c0:8a:7d:
b5:ab:85:36:1f:f2:9e:55:8f:2d:2d:17:50:b1:6d:
69:d1:99:2a:09:9b:32:a9:58:09:03:b8:8a:d5:1e:
34:35:a2:be:7f:e1:00:31:34:ef:63:00:e9:23:69:
ba:1f:f2:ae:8b:4b:00:bf:8e:18:d0:20:26:fb:70:
e8:2f:e2:b1:48:32:13:b0:40:a7:a6:ec:a7:78:ac:
bd:d4:06:1f:14:00:8a:32:33:26:00:b4:d6:56:74:
4b:d0:ba:c2:e9:43:2b:e5:d5:7b:93:e0:3a:00:d2:
ed:3a:ae:38:10:51:f7:f1:cf:70:1e:05:4b:4f:7c:
32:7c:be:e1:b6:9d:97:49:af:d6:85:39:7c:12:4e:
ac:d5:87:e6:99:1b:a3:fb:f8:97:de:d4:46:7a:7b:
71:b9:da:e1:aa:a5:b4:9d:b3:15:41:9b:ad:94:e4:
0c:77:d9:88:22:00:e1:63:4f:b5:03:3c:0a:22:11:
a5:4f:6a:02:50:1d:36:cb:fc:00:f9:2c:1e:f0:fa:
bc:b1:6e:8b:1e:eb:75:74:25:62:30:a4:74:89:d9:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:76:B8:26:86:4F:06:CF:1B:28:5B:F0:2D:E3:9E:1A:E0:D6:30:9F
X509v3 Authority Key Identifier:
keyid:5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:46:cc:c8:c1:d3:4f:66:20:f8:db:e1:85:35:8b:58:63:5d:
7e:35:da:46:2c:ce:63:a9:c3:0c:89:48:aa:d0:38:d9:b5:c3:
00:1d:30:62:88:b1:91:a1:6a:0d:d4:c5:54:cd:6e:cd:70:fe:
c5:93:7f:11:6b:63:74:4a:c7:ba:5b:2b:ed:33:04:7f:37:7c:
69:f9:cd:bc:8c:32:d0:cf:76:0a:51:b0:78:a9:22:ef:14:b5:
c7:71:02:6b:f8:80:e8:02:33:db:aa:c7:53:2c:78:d9:d4:df:
b0:de:68:02:11:50:76:b7:53:01:47:f4:6a:37:72:e1:d0:78:
aa:27:b8:bb:fd:14:12:8c:95:65:e6:5d:05:8c:f4:4b:9c:e5:
2d:60:95:af:46:73:8e:b2:94:58:54:5c:62:c8:22:19:79:d5:
28:4e:ba:30:c3:a2:71:2a:68:59:d2:df:f3:a6:fb:46:6e:22:
d0:15:66:c4:fe:29:6a:cd:62:d8:bb:21:ff:09:21:6b:bd:da:
28:3e:26:66:76:c5:d9:6f:e2:34:48:67:4d:15:4a:03:90:be:
0c:2e:f7:9b:3c:a8:91:88:35:2c:55:ca:cc:3e:80:38:d6:af:
29:c7:f6:26:16:c1:a2:64:3d:9c:47:a1:66:a4:cf:51:87:25:
be:2c:39:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:33 2025 by rpki-client