Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: piUd3sHjQyU5K51aLEvbNqXQ5xccmtOzVw5ozOG3vrk=
Subject key identifier: 3A:10:A8:67:AE:6D:DE:B7:1C:0D:89:D2:CE:EA:94:F8:6C:10:21:4E
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 0199FC58B15AE60FD83E060CF7417866E6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: dnYIWg5qdtfvCvYMSrqdV7AwsJsaMpoiSiUp0v8ejHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b1:5a:e6:0f:d8:3e:06:0c:f7:41:78:66:e6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=3a10a867ae6ddeb71c0d89d2ceea94f86c10214e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3b:c4:c4:1c:21:7b:79:fe:a0:d5:7a:ed:df:
40:78:13:98:66:05:5a:a0:98:a3:66:8d:c9:6f:7d:
bc:9c:4d:82:12:63:1d:fc:32:c5:bc:82:b1:4a:44:
48:7b:a8:59:3e:8c:46:f1:2f:10:49:57:27:13:c4:
86:25:d2:3e:91:1d:e7:04:3e:69:4d:af:9d:68:8f:
57:52:8e:5d:76:1e:49:3f:7f:42:9c:97:d1:02:7b:
20:c6:98:7a:02:62:27:ab:51:02:b2:e5:5c:c8:f1:
47:80:d4:42:68:e9:cf:27:55:54:29:06:86:fd:eb:
a1:ce:56:f4:ce:35:16:22:60:29:c6:66:8e:e3:d5:
fd:05:d8:48:2b:11:13:5b:49:5b:dd:35:1f:58:84:
06:6b:76:e5:5b:3c:60:91:34:4f:5d:7e:56:9d:80:
b7:8b:36:d6:bc:81:44:19:d3:a6:87:97:b3:d4:34:
07:19:f7:63:04:80:87:2f:77:30:63:19:96:d8:74:
34:7f:e0:32:be:e4:9e:62:38:74:97:3c:41:41:86:
e1:a8:f0:9e:e3:fd:dc:55:c5:32:40:b3:34:5b:fb:
13:62:ef:00:f5:0e:4c:05:8b:60:87:92:bf:3c:f1:
ef:7b:bb:d3:38:26:3a:19:89:cb:77:b5:8f:99:8f:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:10:A8:67:AE:6D:DE:B7:1C:0D:89:D2:CE:EA:94:F8:6C:10:21:4E
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ef:2d:bf:db:1b:62:7a:b3:ab:07:bc:96:55:f1:9a:66:55:
13:45:07:9f:75:df:c4:d1:33:71:54:c9:59:4b:ec:a4:34:f6:
d9:50:5f:66:05:b2:b9:19:81:9d:e1:f3:82:7a:21:3f:e6:ff:
d6:cf:f9:56:48:b4:55:ca:3f:18:d0:f8:95:ba:27:43:8c:50:
81:5d:13:13:e9:78:dd:ea:f8:66:88:84:a2:3c:10:76:a6:f8:
c7:a2:79:9c:b0:4b:53:92:6a:c4:3a:11:08:8d:7a:72:21:14:
36:91:24:a3:ac:11:bf:b9:31:51:f6:5a:6e:2c:7d:dd:ca:7f:
68:10:a9:17:5d:2c:6f:c6:8a:c5:e8:30:e4:a4:aa:d9:6a:95:
7d:e4:e0:eb:25:de:da:91:75:b8:4b:50:c9:53:a7:85:f4:b8:
58:0d:92:1a:19:3b:ac:5d:3b:7c:56:dc:d3:dd:7e:f5:e9:81:
bb:11:2f:a1:1f:13:05:5a:89:99:83:1c:60:93:4d:25:5e:b5:
b7:47:10:ab:68:0c:a8:42:76:b6:cb:38:c1:2f:9b:e6:41:f9:
3f:06:fd:77:e2:0a:92:a5:a1:7d:ea:c9:62:c5:79:ef:4b:92:
13:dc:05:0d:25:66:d6:62:c4:ff:98:61:f1:0a:a5:6a:41:fb:
c0:60:f8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:59 2025 by rpki-client