Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: 694NnObaHApNMmgMCcVKewDBLznrjCDfLe7MOMu6D6I=
Subject key identifier: 63:66:7B:60:2E:F4:C1:93:9E:B5:40:D8:93:70:5E:5C:D9:51:B3:A3
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 0199FC8F8B55E616242A7F9A3614A574B13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 04C7
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: UBaJ3qXKkPgQzSLsfrTO3x3VvDAmaMeIJmDNreEJXsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8b:55:e6:16:24:2a:7f:9a:36:14:a5:74:b1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=63667b602ef4c1939eb540d893705e5cd951b3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:80:03:19:52:e2:b8:1c:28:f0:b9:41:10:
d5:0e:a4:24:13:44:76:47:ad:3e:0e:4e:00:a7:6e:
d2:9f:a9:b3:bb:5c:77:3c:3a:04:44:02:36:af:cd:
65:3a:60:93:82:fe:0e:0e:70:9c:ae:26:17:65:1d:
ba:25:13:12:70:3d:9f:0d:ef:85:80:10:df:53:f4:
1f:73:2b:13:b9:12:de:f8:58:18:ba:42:79:fc:30:
3d:0e:fa:85:d9:59:d5:a2:08:4b:ce:46:f8:c3:0a:
3e:1a:37:2d:31:7c:56:7d:28:93:43:26:68:2a:7e:
5d:3f:40:95:c5:e3:6f:ed:a1:32:22:eb:d0:21:35:
d2:fb:a1:51:58:b9:1e:7d:a7:b0:46:69:3d:e1:df:
de:30:43:c9:ad:7f:e9:12:3c:62:83:a7:3f:28:b9:
42:af:2c:74:cf:49:65:2b:8c:85:43:71:4c:f6:f6:
21:b5:1c:d6:c4:b7:96:25:a5:36:40:2d:f4:d7:c3:
32:05:18:e2:87:1d:8d:17:06:97:8a:66:8b:25:48:
87:9d:48:dc:06:59:85:67:46:c6:60:c4:39:ca:59:
82:7b:a2:f3:36:09:b4:5e:9f:a6:74:7d:4f:2d:d8:
8d:0c:a2:25:52:b2:33:f2:30:b9:b6:78:cc:50:ab:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:7B:60:2E:F4:C1:93:9E:B5:40:D8:93:70:5E:5C:D9:51:B3:A3
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:36:5f:ef:e2:1d:87:30:3f:65:f6:a1:66:43:84:2f:e5:4a:
0c:9e:51:42:6c:ca:af:a0:f2:76:85:ee:6a:f2:4b:d8:13:23:
c5:89:50:75:b1:0f:25:76:11:18:5d:49:10:01:27:39:f5:7b:
1b:9f:4a:65:a9:df:78:80:fb:a4:ee:88:28:aa:71:1f:61:9c:
43:8a:53:6a:5c:3a:f4:e2:a0:75:47:9f:da:64:d3:4f:54:60:
ec:9b:c3:aa:6c:17:7e:53:0c:9d:31:fd:6b:ce:82:5e:3e:25:
7c:83:4d:ef:8c:0b:d7:8d:bb:4c:64:c9:f4:28:f4:fc:28:ac:
ce:96:c5:74:ce:80:02:a2:a9:30:46:71:10:c1:92:8c:78:54:
ac:b4:43:30:bd:ac:c4:96:a1:6e:04:a3:c7:8e:3d:67:cb:a0:
c4:e9:5a:f8:52:6f:21:6d:43:61:5c:99:40:16:71:9e:98:08:
b9:8e:06:0c:6b:ff:19:2a:34:31:81:12:6a:0c:05:45:11:06:
96:79:da:a6:2f:78:e2:0a:96:c7:de:89:cf:70:76:4f:eb:16:
9f:37:e0:03:7d:95:a0:73:12:ba:3a:bb:21:86:50:1e:3f:53:
fd:c1:9e:34:21:2a:a8:33:d9:84:0c:db:48:21:a0:a5:b5:f2:
a0:51:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:38 2025 by rpki-client