Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: y781QnmkkObkDi1Dyi+1Bndkjf19WhBm/JcSP8aQn2U=
Subject key identifier: 9C:AC:29:FD:58:2E:0C:38:72:20:8A:97:2D:F0:0C:40:DF:E9:23:12
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 0199FCC647DE1CD89E8B88B0D7931E7F52F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 11D4
Signing time: Sun 19 Oct 2025 14:01:16 +0000
Manifest this update: Sun 19 Oct 2025 14:01:16 +0000
Manifest next update: Mon 20 Oct 2025 14:01:16 +0000
Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: Rit2zeRlxv6Vz0FIw7wfePogciY5re2Z7XxEKclW9w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:47:de:1c:d8:9e:8b:88:b0:d7:93:1e:7f:52:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Oct 19 14:01:16 2025 GMT
Not After : Oct 20 14:01:16 2025 GMT
Subject: CN=9cac29fd582e0c3872208a972df00c40dfe92312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:ac:9b:1f:a1:dc:30:77:27:49:60:11:28:
48:4c:59:75:b4:5a:d5:e1:b3:6c:f8:11:a0:11:80:
ee:70:ff:a0:61:cd:64:32:79:9e:e4:46:4f:f6:a5:
4e:74:6c:89:e9:2d:6a:15:f3:43:93:b1:c5:1c:90:
4f:f3:c4:e3:58:db:21:47:58:c4:37:38:3a:16:57:
c9:28:21:b1:36:54:e8:60:02:6b:26:b4:36:97:f1:
eb:65:fa:17:09:28:b0:91:37:6a:20:3f:ec:d0:4d:
c6:5c:ec:83:f1:a5:69:53:42:9f:b7:a2:e8:c0:ef:
3d:4c:02:a2:93:c2:51:f3:9b:75:d8:bf:48:e7:6d:
d2:77:ed:d1:90:da:7b:c1:ea:7e:8d:b7:33:d2:95:
25:4e:64:7c:6b:c2:8e:2c:b1:5b:98:6a:84:9d:31:
48:fe:af:42:84:89:90:10:44:71:6b:9f:cd:40:6e:
ed:12:b7:85:d8:2c:e5:f6:bd:fd:7a:c1:b1:64:ed:
f2:2d:df:f0:ee:60:5c:d7:5a:c6:e1:02:d2:23:d0:
e4:8d:75:c5:e0:16:ae:f1:4d:cc:b2:f8:29:61:af:
c3:3d:9e:94:c9:ad:1e:27:77:b6:f3:97:4e:ff:52:
8e:e6:8b:06:4a:d1:cb:2a:cf:44:c2:7a:75:b9:c1:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:29:FD:58:2E:0C:38:72:20:8A:97:2D:F0:0C:40:DF:E9:23:12
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a8:df:f5:85:a2:65:4d:60:ea:35:85:15:b0:53:67:a0:35:
04:c9:ee:c3:6e:36:e5:41:3f:6c:3f:87:5c:6e:f1:2c:0e:fc:
a4:34:d0:80:ce:a0:dc:77:0f:09:26:1c:fe:d0:a3:9a:35:53:
7b:40:46:f7:d4:03:39:ea:5d:b5:20:7b:a2:2d:07:a1:b7:19:
4e:8f:19:79:93:74:94:5a:56:88:ad:75:d2:6b:d3:af:8e:83:
98:40:aa:fc:70:42:47:8c:7d:ce:f1:42:6c:56:ea:f6:91:d5:
ed:84:eb:50:55:bc:62:c6:5a:0c:a2:97:79:bc:15:9c:36:7b:
e9:af:fe:7e:2b:93:e8:b3:03:15:50:1a:d5:0b:53:a8:23:5f:
5f:4d:4b:63:1a:3f:95:1d:a6:df:60:61:59:56:32:80:46:8a:
62:c1:b0:5b:b9:1f:6f:6f:f9:37:49:89:6b:9d:2b:3b:52:5a:
ba:4e:3a:8a:d8:54:83:74:a5:ea:39:76:17:cc:1d:6c:a2:50:
5e:b0:1b:88:44:51:72:a8:2e:7f:83:9d:dd:b1:d4:06:6f:99:
d9:a5:5f:01:cf:01:ad:21:bc:57:ca:3c:7e:31:c3:4c:35:1e:
0b:b9:73:19:b0:62:ca:09:f3:26:76:5f:ae:de:f3:25:4b:28:
3c:cd:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:51 2025 by rpki-client