Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
File: xLxp1Co7FePOy5HHcrpkM8URvpk.mft (raw, json)
Hash identifier: lMlyT5CAnholV0oxgBknUQY5cbGBfEw4w7kDNF5pqwA=
Subject key identifier: 80:CB:3C:0D:C5:4C:AD:51:8E:B5:91:F9:8C:68:65:91:6C:9B:59:AB
Authority key identifier: C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99
Certificate issuer: /CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
Certificate serial: 0199FEEBB3ECAB0E48B839C1F53E0A5AB6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
Manifest number: 16DF
Signing time: Mon 20 Oct 2025 00:01:23 +0000
Manifest this update: Mon 20 Oct 2025 00:01:23 +0000
Manifest next update: Tue 21 Oct 2025 00:01:23 +0000
Files and hashes: 1: xLxp1Co7FePOy5HHcrpkM8URvpk.crl (hash: SNc4ACfiDQDnW/ii76MFuVJtkZJLP3O5XG4WL4CBtUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b3:ec:ab:0e:48:b8:39:c1:f5:3e:0a:5a:b6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
Validity
Not Before: Oct 20 00:01:23 2025 GMT
Not After : Oct 21 00:01:23 2025 GMT
Subject: CN=80cb3c0dc54cad518eb591f98c6865916c9b59ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:8d:ff:a3:57:24:2c:ec:2a:85:b9:7d:ca:
67:f5:b7:13:df:d9:32:df:23:6d:97:6f:87:e3:b1:
a7:c4:51:be:a9:a1:59:88:9f:ff:f2:e4:96:60:6a:
27:e8:d8:f4:e4:18:04:c1:69:f8:2d:94:62:9e:f3:
b6:21:02:88:6e:3b:00:51:4b:34:2f:bc:ad:b7:ea:
4f:bb:c9:33:b4:09:f4:4d:c1:9b:0b:e6:2c:40:23:
4d:f4:af:9d:a3:de:ef:29:48:1a:6b:07:7b:d2:6d:
17:0e:8d:e0:9c:80:f9:f1:2f:5e:c6:41:44:3d:e6:
9b:39:8a:68:7d:84:a7:ca:b5:a3:7e:d8:e9:11:6f:
14:ab:0f:57:94:18:a7:f0:08:ca:2f:e8:0a:54:7f:
6b:81:24:f1:93:14:92:3c:f0:95:c5:d8:34:f6:fe:
29:24:62:2e:ed:34:28:8b:e4:a2:5e:13:57:1b:22:
17:14:4a:7a:cf:f5:5b:96:02:6b:b9:37:b6:33:36:
20:63:00:8e:d5:9e:ae:20:ac:11:88:9b:34:4f:38:
9f:05:84:6d:8e:a3:d3:ec:f1:17:ed:5f:e1:28:8d:
37:a2:fd:85:f1:16:72:c8:92:ce:40:1a:2e:57:77:
14:bf:00:ff:6f:98:5e:08:e9:be:0d:9e:99:1e:dd:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CB:3C:0D:C5:4C:AD:51:8E:B5:91:F9:8C:68:65:91:6C:9B:59:AB
X509v3 Authority Key Identifier:
keyid:C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:86:1f:b9:1f:a6:1f:26:74:25:70:ec:e2:91:bc:d9:ab:d8:
11:8c:ec:ed:c4:48:34:54:b5:58:91:e8:b2:8d:11:36:ce:37:
8f:d5:ba:22:5e:7f:3e:f8:e1:d1:59:a6:1c:65:b4:18:66:25:
61:43:3e:be:26:a0:d8:fb:f6:2d:53:ad:43:6f:47:83:cf:a3:
a3:ae:5c:6a:fb:b4:02:50:19:18:bc:9b:21:59:07:94:59:22:
8c:50:4d:ec:07:4f:39:ea:53:3c:c1:20:74:b3:4b:10:96:b2:
da:ec:c5:35:82:75:d5:9d:e9:f2:c5:77:22:be:cf:2d:fe:86:
c1:62:23:bd:6f:a6:a6:27:1b:01:b8:0c:33:b5:a4:f8:3b:73:
46:c9:33:13:3c:bb:27:d7:f9:ea:26:e8:71:a0:63:d7:08:6b:
77:31:30:fd:c9:fe:f9:61:82:3b:c6:4e:ec:e4:2b:40:a8:e9:
99:e8:07:3e:b5:0d:b8:21:13:56:03:1a:fb:72:47:56:2d:c3:
a2:e0:2b:9d:b7:02:29:1c:75:28:11:14:ab:7c:aa:74:32:6d:
dd:bb:38:1a:49:67:7f:22:49:31:bc:79:2c:26:ad:a0:17:29:
85:40:5c:dc:55:35:12:9a:8d:5a:6d:cf:f6:66:66:e0:ab:d3:
43:d0:73:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:39:05 2025 by rpki-client