Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d25a1b-1137-4d59-bf60-e0b7cf41b527/1/XborxkAZK24FLkdzrfU0AseAN_A.mft
File: XborxkAZK24FLkdzrfU0AseAN_A.mft (raw, json)
Hash identifier: rAupZflezzQd1Y+eL1Xf7yKNeThHAJ+br3RYXM5RkMU=
Subject key identifier: 9D:56:31:43:8C:3A:04:0E:91:15:F2:3E:1C:7D:84:C1:63:0A:85:50
Authority key identifier: 5D:BA:2B:C6:40:19:2B:6E:05:2E:47:73:AD:F5:34:02:C7:80:37:F0
Certificate issuer: /CN=5dba2bc640192b6e052e4773adf53402c78037f0
Certificate serial: 0199FB7C819DCD1D4D4E1542C700A9446F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XborxkAZK24FLkdzrfU0AseAN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d25a1b-1137-4d59-bf60-e0b7cf41b527/1/XborxkAZK24FLkdzrfU0AseAN_A.mft
Manifest number: 0D
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: XborxkAZK24FLkdzrfU0AseAN_A.crl (hash: 8ZArJZ9ygRZydJFgWsOTv0ISqgtG2TCmAFWBf4DKZGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d25a1b-1137-4d59-bf60-e0b7cf41b527/1/XborxkAZK24FLkdzrfU0AseAN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d25a1b-1137-4d59-bf60-e0b7cf41b527/1/XborxkAZK24FLkdzrfU0AseAN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/XborxkAZK24FLkdzrfU0AseAN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:81:9d:cd:1d:4d:4e:15:42:c7:00:a9:44:6f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dba2bc640192b6e052e4773adf53402c78037f0
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=9d5631438c3a040e9115f23e1c7d84c1630a8550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:f2:24:57:41:a2:5e:a6:a8:20:20:84:42:
ee:36:d9:4c:6b:ca:f3:0a:ff:d1:96:b3:bd:26:de:
e4:c9:4b:49:fb:e0:ea:cc:9f:08:77:78:e9:8e:f7:
e8:89:52:81:11:9f:a2:bf:06:5f:16:db:d0:8e:0b:
ce:9b:4d:70:6f:a8:7a:9e:37:33:7a:24:ed:bb:82:
55:5f:84:ce:01:e4:83:4f:df:d9:6d:08:67:4c:db:
3d:8a:00:bf:fc:a0:b6:d3:5a:3d:91:38:06:57:83:
cf:48:8e:55:e3:51:f0:f5:a4:d1:29:5d:80:fd:0f:
de:46:41:9d:33:8e:01:79:7d:35:22:98:66:e4:32:
f6:b6:3c:85:4d:3f:c4:96:65:be:d9:84:ae:34:c4:
03:86:0a:8d:5c:76:c4:1b:48:82:42:35:2b:cc:c4:
40:d7:2c:f5:98:17:5c:13:89:34:f7:0d:bd:e6:6b:
9b:90:49:ea:81:76:3c:b0:1b:cd:36:3f:ee:d7:0b:
42:80:f2:39:d6:92:54:4c:a9:0e:d5:da:20:7a:59:
21:b4:b4:bc:2c:31:95:cd:87:6d:24:15:1f:a3:97:
28:37:b3:8c:d4:17:cc:99:f4:08:be:03:b4:72:96:
2d:6f:4b:72:6f:76:89:45:d7:a0:be:1d:af:c1:8a:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:56:31:43:8C:3A:04:0E:91:15:F2:3E:1C:7D:84:C1:63:0A:85:50
X509v3 Authority Key Identifier:
keyid:5D:BA:2B:C6:40:19:2B:6E:05:2E:47:73:AD:F5:34:02:C7:80:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XborxkAZK24FLkdzrfU0AseAN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d25a1b-1137-4d59-bf60-e0b7cf41b527/1/XborxkAZK24FLkdzrfU0AseAN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d25a1b-1137-4d59-bf60-e0b7cf41b527/1/XborxkAZK24FLkdzrfU0AseAN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bd:06:ad:45:dc:f9:69:a8:43:48:06:dc:c5:4d:e6:3b:9d:
f0:86:7d:99:20:8a:05:73:1e:63:01:6c:26:63:69:c6:13:ee:
e6:1b:08:9f:1c:5d:e2:9f:c9:08:16:bf:22:03:3e:76:bf:62:
d8:c5:e9:b7:15:f4:5d:a9:02:b0:b2:0a:54:66:3e:53:0b:5c:
4a:af:4c:04:ab:57:97:b1:c4:cc:63:01:a4:09:5a:84:fe:0f:
f5:5a:9a:f3:e0:c4:bc:77:b4:75:86:41:92:93:91:c7:43:2b:
82:d2:d3:bc:ac:c0:46:e3:d8:92:ab:df:72:f2:73:e1:7b:84:
48:12:31:07:eb:2b:44:83:3f:dd:dc:69:7b:23:81:db:59:8e:
2c:af:5b:03:3d:8a:eb:f0:27:cd:cd:e7:c1:4a:5e:9c:2d:84:
42:a5:45:1f:bc:56:60:66:5c:6c:df:1d:54:23:ee:75:91:4f:
3e:9d:25:c7:e5:e4:a8:69:4b:71:67:ee:37:1f:09:93:9e:78:
66:64:43:10:2c:f9:b7:44:02:7b:f6:70:a3:4a:86:5b:16:d3:
2c:67:03:ad:df:87:f6:ba:a2:63:5e:5f:36:32:9f:1b:cf:c0:
09:64:9e:e4:5f:7a:e7:4d:d5:ed:26:4a:89:b6:d6:3e:b2:6c:
e9:79:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:44 2025 by rpki-client