Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
File: XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft (raw, json)
Hash identifier: W6D1Gji+u5gnJc1mpOcbYzyslmmq7n22pbcvIQ1P7lQ=
Subject key identifier: DC:9A:D9:43:4C:38:CF:92:37:73:D3:70:11:A5:16:C4:DB:AD:CD:CF
Authority key identifier: 5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
Certificate issuer: /CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Certificate serial: 0199FD33E461F15B2D1B4C5386A45092D112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:00 +0000
Manifest this update: Sun 19 Oct 2025 16:01:00 +0000
Manifest next update: Mon 20 Oct 2025 16:01:00 +0000
Files and hashes: 1: XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl (hash: NTRsYK/yGJ5TxL4ESYjuAhxb6sK6V8phvOguxJomrLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e4:61:f1:5b:2d:1b:4c:53:86:a4:50:92:d1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Validity
Not Before: Oct 19 16:01:00 2025 GMT
Not After : Oct 20 16:01:00 2025 GMT
Subject: CN=dc9ad9434c38cf923773d37011a516c4dbadcdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:99:e5:b9:94:33:6f:18:ae:51:35:49:aa:72:
ae:89:26:55:3a:85:7d:70:71:44:bd:74:d7:08:d1:
8e:ae:f5:f8:0e:db:a4:8d:da:a2:14:24:a0:0e:a7:
1f:d3:68:90:47:d4:9d:0f:b4:2d:0b:ea:3c:b0:bc:
9f:1a:a5:0e:f3:51:07:ef:db:af:e1:81:0f:7d:68:
2d:24:89:ae:6c:21:24:68:9f:17:a6:3f:a5:f6:4e:
f7:7a:78:fa:54:20:1f:64:94:1c:0a:9f:7e:fa:4c:
07:65:ec:fe:78:d5:d5:23:be:a9:57:c5:f4:e1:40:
1a:a7:89:75:2f:05:29:c1:4e:ca:4a:22:d7:f4:f3:
fe:d8:db:e7:9e:1e:7b:38:e7:19:fc:b2:c9:4b:bc:
ce:ff:24:28:33:e1:39:fe:49:39:d6:f9:be:e5:87:
81:d2:af:df:ed:ff:fc:f2:e3:ff:e3:8a:a6:67:99:
ff:b8:53:ee:27:a3:29:2c:f4:3c:60:e9:a3:fd:a6:
10:af:11:1e:bc:c5:d3:47:86:d2:71:f0:d2:62:e7:
3e:c9:5c:18:e8:ad:fa:9c:95:9a:5f:1e:45:81:79:
d8:e1:17:2d:9d:c5:59:f0:a8:0e:b8:41:ec:c4:f2:
54:0a:e6:d8:7f:f3:d3:a4:44:a7:70:02:8f:ed:6a:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9A:D9:43:4C:38:CF:92:37:73:D3:70:11:A5:16:C4:DB:AD:CD:CF
X509v3 Authority Key Identifier:
keyid:5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:35:3f:37:b2:99:62:35:66:fe:32:13:20:b4:52:4a:17:03:
36:e6:30:a5:ca:a3:cb:4f:d8:10:87:66:de:97:52:03:69:88:
32:37:06:05:fd:27:ba:66:df:05:a0:7f:60:bf:4a:ec:7d:45:
57:b3:bb:4a:13:cc:38:36:57:91:e9:47:1b:65:18:fb:17:72:
fd:4b:87:02:71:51:16:94:e5:c0:b7:6d:ea:1a:e1:27:b9:25:
64:c6:0f:d5:6d:8c:e7:e0:aa:34:1c:a7:da:b4:64:4c:fc:7b:
39:7f:12:4d:9d:1b:b4:44:7a:b4:a4:d8:09:68:ec:e2:b9:c6:
c8:83:5c:2d:aa:c5:c8:72:15:45:bf:a2:6d:58:5a:d2:46:7b:
7d:e5:e4:da:02:2d:e9:3a:db:d7:7e:7c:03:08:c1:6f:8a:e3:
54:9d:46:5b:d1:34:cf:a0:16:e6:93:06:d8:cc:f3:c2:50:e4:
5a:bc:80:0e:56:93:24:4b:60:a5:08:68:0d:79:de:ba:0e:29:
b8:67:83:26:9c:1d:59:a2:c4:25:4f:b2:72:29:2a:17:fb:55:
d4:54:be:59:87:e2:17:b8:2a:00:6d:6f:f1:ab:39:fe:9b:53:
8c:e7:b0:0c:72:c9:5e:f4:9d:7b:91:01:c0:98:06:c0:e0:bd:
e8:35:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:41 2025 by rpki-client