Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
File: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json)
Hash identifier: 7TjwwCuvYEr6/s0fax17OV7VWRUETF3e+oOvzm5qwck=
Subject key identifier: E5:48:C5:BF:61:82:E2:C8:AD:F6:99:3C:5C:46:F8:94:AE:82:C1:71
Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
Certificate issuer: /CN=c618f03f9874370653aa3a026f6707c2e0e74764
Certificate serial: 0199FCC68BEB9610C58603CEBE7F0340A598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
Manifest number: 07C7
Signing time: Sun 19 Oct 2025 14:01:34 +0000
Manifest this update: Sun 19 Oct 2025 14:01:34 +0000
Manifest next update: Mon 20 Oct 2025 14:01:34 +0000
Files and hashes: 1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: W63320JM4OpPDxEzyQ1yVvp38O5xkRMVLyOTZvBeuyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8b:eb:96:10:c5:86:03:ce:be:7f:03:40:a5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764
Validity
Not Before: Oct 19 14:01:34 2025 GMT
Not After : Oct 20 14:01:34 2025 GMT
Subject: CN=e548c5bf6182e2c8adf6993c5c46f894ae82c171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:1e:85:c3:ae:3e:af:a3:e6:82:59:ce:00:
c7:7f:a6:45:5a:2d:1b:2f:98:a6:90:87:5a:d1:47:
ac:41:b6:9b:a3:34:53:0f:16:c1:85:ef:e6:94:ed:
8a:bb:09:61:5b:92:48:60:27:a3:d3:25:d6:2c:f4:
3c:79:29:16:b6:0e:6f:e8:fb:a2:58:ed:66:c1:e8:
00:40:3c:6a:5f:9a:6b:3f:e8:24:9d:06:58:09:27:
2b:8d:14:b8:17:99:50:f1:eb:93:42:1e:5f:2a:a5:
41:73:62:ce:ff:24:65:67:70:b1:a2:a9:93:bc:98:
7c:59:47:01:83:5a:36:00:c2:0b:ed:d8:ff:92:0d:
ee:58:4c:86:11:08:27:77:4e:4b:5a:6c:65:7d:da:
52:8d:e1:09:0c:19:4d:c6:c1:b2:d8:8c:40:9f:89:
29:02:65:4a:1b:1c:ef:43:a9:43:2d:02:fa:46:d9:
89:6f:ad:61:0a:df:19:9b:68:2d:c2:ea:a5:d5:f1:
6b:a5:46:48:2d:3a:b8:6b:23:cb:5a:f2:75:60:10:
78:b6:69:97:68:f3:00:3d:52:fd:37:8c:bf:8d:d0:
b0:8c:8c:97:a4:17:dd:28:17:3a:69:0d:7b:b3:32:
8a:cf:4d:53:1c:4d:17:67:97:87:69:1b:56:46:9b:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:48:C5:BF:61:82:E2:C8:AD:F6:99:3C:5C:46:F8:94:AE:82:C1:71
X509v3 Authority Key Identifier:
keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c4:f7:34:6d:41:c2:61:d3:ff:84:33:a4:70:69:1b:ef:31:
17:b2:e2:b5:d1:03:91:10:b4:61:7a:98:47:08:2b:13:78:8a:
2b:fe:20:bc:95:e5:b4:ee:d1:10:d5:d9:1b:23:7a:59:b2:d3:
76:56:cb:36:7f:32:7c:1c:e8:c3:3d:60:26:51:91:b4:86:a3:
7b:b3:f7:bc:1a:01:e3:b5:f4:3a:da:06:05:9d:7b:16:1b:50:
04:33:b8:a7:aa:8a:60:b4:fe:52:44:ac:d7:2b:5b:84:04:73:
cd:43:3c:06:c0:82:6a:ae:eb:46:07:fd:f0:59:5d:37:7f:b3:
5e:07:5e:40:f3:13:e7:fb:19:44:b3:be:95:8b:79:60:3d:6e:
39:16:87:15:30:4a:83:0d:f4:64:a1:9f:ac:91:6f:b2:d2:4d:
5e:ed:e5:30:95:d6:59:18:60:a6:9d:73:3c:8a:4b:52:57:b8:
3e:86:f7:66:c6:b6:94:e1:b1:e1:4e:99:4c:51:2f:c6:1a:82:
36:fa:10:df:97:a7:0b:74:5a:e0:ca:8c:00:21:ad:ff:23:7a:
f6:b3:87:53:93:87:8d:bc:0e:bf:88:72:25:2c:e9:60:71:96:
73:aa:db:a0:27:1d:1c:25:e5:4d:cb:2d:61:92:da:9a:cd:3d:
38:93:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:25 2025 by rpki-client