Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: pbGdu4Uxg+LS2KUCo6Ed4DCeWRM5HU7H8yw+c0gu57E=
Subject key identifier: 17:6B:06:00:B6:8F:B8:C9:4F:3E:1F:1D:D3:2A:13:95:8B:94:3A:0D
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 0199FC21BA567673954D2AE0091C668EBAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 0631
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: ekJ34m6QChqlkQt/H7dCYzZD/2pL/tRIq1Uk4GlFz0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ba:56:76:73:95:4d:2a:e0:09:1c:66:8e:ba:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=176b0600b68fb8c94f3e1f1dd32a13958b943a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:cc:64:4e:a8:9a:a6:eb:51:40:bc:86:96:
5d:18:58:cc:7d:14:3a:3b:ae:71:a0:86:7b:cc:b7:
0d:7d:03:31:1b:d6:13:c0:a9:f3:0f:40:f1:e2:97:
2c:20:07:72:d0:ce:63:55:11:bb:db:93:1d:4d:64:
93:b2:62:4c:46:be:ca:4f:cc:ac:36:77:77:1f:84:
63:90:c2:2d:9f:b4:29:e9:f6:ce:a6:74:c9:71:ec:
7d:7b:0f:37:a4:43:e6:88:f7:dd:44:67:d5:44:d6:
a3:ce:0b:79:d2:0e:9c:40:1a:c1:64:d3:23:e6:46:
ef:ea:5a:9a:aa:c5:69:89:f4:94:8f:3c:ec:21:22:
27:0e:b5:e2:1c:09:80:7b:24:5a:5d:1f:03:b7:1b:
a3:13:50:f2:91:4c:52:2c:e0:5b:86:8c:a1:86:cc:
18:23:63:86:f0:28:4d:bb:d9:36:a1:85:14:67:1d:
6d:d7:63:95:4f:ae:3c:b6:13:ee:a7:bd:86:fd:75:
63:38:c5:d8:b6:33:97:e5:f7:8e:16:4c:4d:a5:11:
db:58:e3:84:79:58:e5:a6:bb:00:e0:85:8c:03:90:
bf:ee:2e:15:29:84:45:b5:96:65:24:dd:f8:ac:bb:
b2:7f:91:3c:ac:cb:06:bf:b6:00:56:23:21:14:7b:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6B:06:00:B6:8F:B8:C9:4F:3E:1F:1D:D3:2A:13:95:8B:94:3A:0D
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ee:55:d5:8d:3b:40:58:b1:90:f6:05:e1:aa:32:b8:e0:72:
9c:b1:e1:00:fc:e7:a2:58:81:e7:33:7e:61:9e:3e:7d:f2:c1:
d5:59:05:85:29:7e:cd:87:ef:b1:e3:28:f3:2c:e4:66:f6:2f:
15:dd:e1:5a:e1:13:82:6b:50:18:e5:ab:20:3a:d5:ea:47:20:
d8:ff:a6:7b:62:4a:86:90:f9:7d:37:26:9c:32:e0:dc:a0:95:
cf:55:3c:6e:9d:e8:65:2c:4e:6e:25:dd:39:11:1c:68:d4:57:
e7:ed:5f:77:0e:ac:b8:00:6b:e5:c4:11:99:43:74:bf:71:40:
a7:fc:d9:a5:70:37:48:44:eb:29:70:5e:ce:e3:c3:2e:ce:f3:
bf:43:b8:16:f0:01:1d:e9:60:f5:a3:77:d4:05:fd:24:d2:cc:
2b:63:57:7f:03:9f:84:9f:e1:54:03:02:5b:97:3b:be:df:6e:
00:e7:83:08:bc:90:a2:f0:a4:49:6a:59:a1:29:86:fe:98:e2:
cf:28:e8:98:b5:34:83:85:d8:41:9c:03:e8:b1:14:e8:bc:fd:
88:9b:74:1c:c8:10:8d:99:2f:fa:6e:26:82:4a:d2:b6:26:a2:
ec:97:8a:50:01:14:5f:db:7f:58:3f:60:c1:10:90:ac:c3:5f:
ab:34:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:59 2025 by rpki-client