Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
File: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft (raw, json)
Hash identifier: swY3ijccjy3Q8eDWn70RO75S8+8hunOArjM5I0Sx05M=
Subject key identifier: D4:F8:24:13:84:1D:E1:3D:95:3F:98:15:C7:20:23:4E:95:F3:F7:D2
Authority key identifier: 5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
Certificate issuer: /CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Certificate serial: 0199FBEBFE06BE0EFEB3A2B8D3A2663729EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:51 +0000
Manifest this update: Sun 19 Oct 2025 10:02:51 +0000
Manifest next update: Mon 20 Oct 2025 10:02:51 +0000
Files and hashes: 1: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl (hash: ZVLU9aodS/6mNlAp88GYNwRewRSlaRHuaY8vEQ6gudM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fe:06:be:0e:fe:b3:a2:b8:d3:a2:66:37:29:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Validity
Not Before: Oct 19 10:02:51 2025 GMT
Not After : Oct 20 10:02:51 2025 GMT
Subject: CN=d4f82413841de13d953f9815c720234e95f3f7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:ef:4d:4b:da:fb:70:3e:9a:3c:99:e2:9c:
e0:71:0d:eb:49:70:b0:67:43:56:20:18:4b:95:7b:
54:a4:63:58:e3:b1:86:03:de:47:12:11:8e:fd:3c:
69:86:60:14:9e:cf:ba:b3:a2:e4:0d:88:0b:4a:c4:
14:f4:33:f0:d0:25:78:77:f4:37:ef:3b:cb:1f:43:
49:7b:d3:0a:b2:d5:8e:30:db:e7:39:2d:f4:35:b9:
4b:a6:c9:bf:56:7d:ea:1a:7d:df:72:cd:ad:e5:74:
af:89:b8:d8:bd:5c:e9:a9:ea:d1:81:d2:68:0f:b9:
be:f2:f1:4d:6f:a1:7c:16:9b:31:a2:56:cd:05:5b:
fc:47:3c:a4:d4:cd:a7:02:67:83:f2:9c:a5:d4:1e:
13:e9:3f:ea:f1:60:b3:1f:49:f7:99:08:53:bc:f2:
e3:d7:7d:c2:bd:23:36:90:13:61:ec:9e:f9:ee:30:
4a:bb:34:90:27:5a:61:3a:d2:c1:d7:9b:a1:a7:41:
c3:43:59:98:16:73:04:2f:b9:81:2a:af:78:33:f5:
30:87:82:56:dc:95:57:e1:14:1d:2a:28:80:9c:b8:
df:19:23:dc:27:97:4c:7d:0f:d8:9a:0b:bc:3d:08:
94:32:6c:ef:d9:ec:c4:d0:af:2f:53:dc:91:5b:23:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:24:13:84:1D:E1:3D:95:3F:98:15:C7:20:23:4E:95:F3:F7:D2
X509v3 Authority Key Identifier:
keyid:5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b7:1c:75:89:a5:ab:6f:e4:9d:d2:2a:ea:5b:fa:d5:96:9f:
db:0d:9f:91:da:3d:34:c2:6e:64:51:17:72:21:a2:84:61:9e:
f4:36:4b:8c:13:a4:91:b7:fd:ad:07:c4:8b:e8:e7:6f:11:bc:
ed:f2:e6:fa:c1:0d:97:39:f3:5b:5d:d1:84:97:14:38:ff:29:
41:b8:9e:98:93:e1:b7:48:82:2c:fc:cc:ce:85:40:36:3a:5d:
2c:75:fd:c4:47:fa:cc:57:19:e7:56:43:2a:11:79:da:e8:97:
c9:6f:61:ff:89:ec:09:4b:dc:82:a4:08:ee:bb:46:75:92:79:
24:55:03:13:3c:98:cb:92:87:35:2c:52:21:5d:50:c8:c7:fd:
ef:7f:c6:19:99:5c:e3:75:0f:6c:e8:5b:ac:7b:a0:80:c2:55:
9a:0e:ff:78:74:34:d2:16:86:6f:01:55:76:a9:c5:be:70:d5:
64:04:73:c5:ed:20:43:c7:fe:62:02:a3:94:ac:94:6e:e4:60:
06:d9:af:66:5e:bc:77:98:14:43:6c:b4:39:33:30:e3:17:0c:
d8:e4:4e:01:2d:57:16:a9:da:89:8d:56:f3:da:ac:a4:d2:94:
24:28:b3:e7:c3:36:fe:8b:fe:dd:37:98:24:0a:40:1b:9e:c7:
e1:7e:2d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:35 2025 by rpki-client