Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
File: xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json)
Hash identifier: 9/Sq1Du4wjjlrU8V3Fz4gVn/WyDKf6GO9L6cPcTsZPQ=
Subject key identifier: 0D:00:9F:D8:12:9E:7D:69:95:81:51:0B:F7:99:BA:BB:FC:7A:B3:71
Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
Certificate issuer: /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Certificate serial: 0199FD343643329E6870DEDB9729B2CA81DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
Manifest number: 1002
Signing time: Sun 19 Oct 2025 16:01:21 +0000
Manifest this update: Sun 19 Oct 2025 16:01:21 +0000
Manifest next update: Mon 20 Oct 2025 16:01:21 +0000
Files and hashes: 1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: 9+DFTBA0nAsF3a6Zuz63eWB17bujQfV/CfBCOSBBTb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:36:43:32:9e:68:70:de:db:97:29:b2:ca:81:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Validity
Not Before: Oct 19 16:01:21 2025 GMT
Not After : Oct 20 16:01:21 2025 GMT
Subject: CN=0d009fd8129e7d699581510bf799babbfc7ab371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:33:7c:69:83:ba:4d:28:6f:60:4f:9c:21:
d2:ce:45:e2:0f:d7:af:07:41:7f:af:7e:a3:05:b7:
d1:23:5b:19:73:a5:d1:c6:83:88:ad:50:2a:4f:d8:
89:b3:00:ad:d4:4c:99:15:9e:7e:c8:54:ad:52:71:
da:73:a4:d4:8d:26:cc:94:24:0c:9f:65:77:da:8d:
66:99:01:dd:e8:33:aa:56:87:db:da:69:c0:c9:92:
2a:95:4f:49:0f:cc:df:fa:bb:c3:15:e0:fb:5e:ad:
30:dc:7a:e6:58:2f:0c:a5:1b:10:7c:83:af:67:53:
ea:72:ee:c3:98:c2:24:6d:aa:5d:7b:4b:13:e9:b2:
a0:89:d1:b3:a8:d1:79:7e:76:e4:9c:af:31:cd:ca:
58:c6:4d:46:14:c3:bc:6c:91:d3:a3:a9:62:31:7a:
9e:a9:54:3b:5e:97:5c:b2:5d:66:40:6d:05:70:08:
7e:52:8c:7e:6e:7f:3c:bd:66:d6:c0:39:f8:ce:87:
01:ee:6f:58:d6:d0:85:90:64:75:86:7b:87:b7:e9:
00:0d:10:d7:a1:13:ef:16:4c:d2:28:2e:7c:59:cb:
62:23:cb:f2:db:90:20:0b:14:81:9e:07:fc:cd:7a:
96:9b:f7:fe:ba:8c:c2:68:27:e4:92:92:57:c1:39:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:00:9F:D8:12:9E:7D:69:95:81:51:0B:F7:99:BA:BB:FC:7A:B3:71
X509v3 Authority Key Identifier:
keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:28:d1:0b:f1:b2:78:bc:93:09:e2:35:d6:56:b5:89:b4:2b:
1b:da:5f:e0:b0:95:29:aa:1c:ae:20:f2:83:32:6d:03:5b:17:
ac:68:1c:c6:ef:29:9d:01:86:ab:69:7f:05:17:8d:04:88:c4:
fa:f5:fd:ca:64:33:09:b1:c7:46:85:1f:e4:61:b8:02:14:7e:
df:7e:5d:80:c1:25:19:25:96:b1:8c:b9:99:6d:25:f3:e3:1e:
8a:d5:f5:29:04:23:6f:9c:db:23:68:4f:0d:b3:32:64:e8:3d:
9f:09:cc:f2:65:a7:13:b0:eb:89:56:a9:06:29:16:43:d0:88:
c3:a1:d4:33:1e:20:54:b6:3b:4b:b3:41:a1:6c:d2:02:31:54:
02:fc:ae:d0:78:7f:02:bc:2e:0c:8a:f3:ec:3f:6a:b8:dc:bb:
be:fe:e2:2f:b3:e4:c1:36:2f:d0:59:f8:4c:9d:74:c7:95:56:
15:15:c0:5d:31:88:c0:b7:68:a3:c4:64:ff:91:56:08:a1:7f:
4c:43:41:36:1d:c3:ea:94:e7:c2:e6:10:b1:ec:36:fb:b6:1c:
84:e7:73:a7:fa:3a:e7:0f:e1:7d:f3:5f:f5:61:52:46:5f:db:
52:68:96:a7:f3:5b:70:65:5b:1b:bb:21:66:f9:cd:8f:ac:b5:
b5:78:b6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:39 2025 by rpki-client