Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier: lgxtrqqLq7b2zrfnhBwmITiVNh1Dy6m4Z/0WiEbPeW0=
Subject key identifier: 41:DA:A5:B8:19:58:76:62:21:73:D9:49:95:DF:0C:4B:17:BD:9D:35
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial: 019A71B9214A56FA84CBDFA86837C5D4448D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number: 0320
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: j1nXA2qsl1IgfItlyC4NBU6Q9jJDAwilbUxeOKgnniU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:21:4a:56:fa:84:cb:df:a8:68:37:c5:d4:44:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=41daa5b8195876622173d94995df0c4b17bd9d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:d8:fc:1f:9f:21:01:97:5f:99:46:a3:75:
29:81:d7:b7:a5:5b:d1:54:a8:75:34:31:6c:4a:7f:
7a:5b:3f:5c:c6:48:8b:80:e4:c0:11:8f:cf:9a:2b:
b0:ed:4e:69:82:3a:b8:f0:32:ea:28:ef:7b:f1:37:
05:f0:dd:23:d7:35:cd:40:23:d4:a0:98:7b:3e:fd:
b8:50:0c:5c:d7:7b:dd:c2:2a:3b:e7:ac:0f:78:dc:
26:a6:a8:71:47:aa:c6:72:df:1b:09:d1:45:77:84:
e1:1b:51:09:55:d8:a5:37:de:2f:c9:da:90:b1:d0:
22:c8:d8:b1:12:d8:6b:ab:2f:b3:82:63:03:d3:81:
92:14:da:4e:8d:87:ec:ee:94:02:d7:bd:f2:8d:68:
7f:db:2d:44:d2:ad:dc:8e:e3:a8:13:8a:65:55:3e:
2c:e7:6a:4f:66:cc:12:d8:8f:b1:59:bf:cc:e9:7a:
de:a0:56:5f:7d:fb:cb:72:29:cd:4d:b3:25:c7:ed:
9f:cd:b2:39:ed:6e:63:74:34:db:db:be:e5:27:10:
48:45:d5:f9:b1:c6:87:27:cb:a1:35:4f:78:21:f2:
24:78:98:30:b1:b5:c3:93:6c:79:b4:9d:8b:ce:50:
6d:58:50:75:53:82:fa:c4:9f:2d:e5:78:35:d1:be:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DA:A5:B8:19:58:76:62:21:73:D9:49:95:DF:0C:4B:17:BD:9D:35
X509v3 Authority Key Identifier:
keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3e:92:30:c4:e2:a0:76:3a:be:30:5b:e4:d7:cd:62:11:96:
72:ce:ac:6a:b3:06:b9:b5:22:28:26:71:3f:f0:97:bf:96:0d:
bd:2d:d6:bb:d8:05:7c:a7:cb:50:ba:5f:19:19:af:b7:f0:f3:
28:3b:3b:1b:90:0b:8e:8f:2f:07:a7:e0:c2:b6:28:53:52:84:
92:86:03:9a:9e:13:0c:56:b6:47:86:95:0f:af:7b:cd:c2:10:
2a:dd:00:3a:26:ee:27:e5:49:23:1a:6d:4a:48:8c:72:b4:9d:
a8:24:87:be:29:55:36:38:90:4a:44:f7:a5:5a:98:4c:6a:11:
47:d4:7a:7e:68:39:1a:62:94:ab:17:50:1c:d9:ea:42:3b:44:
77:63:40:a6:4a:ab:18:3c:a1:2a:aa:eb:13:76:16:8b:9b:3d:
5a:ba:b5:01:e5:d6:ff:e2:95:ad:47:c8:8c:36:cd:62:6e:a0:
05:0b:ba:dc:7e:29:48:49:8a:17:0c:c2:58:a2:71:66:8c:62:
c9:e9:4f:13:2d:1e:80:b2:e1:dc:97:27:5b:e6:09:df:a7:99:
50:1a:f7:53:39:ea:7b:5a:3a:16:84:4b:4a:c3:6a:37:54:84:
77:a8:dd:7a:0b:35:3c:b9:92:33:aa:2d:a0:b2:0e:cc:18:86:
54:bd:b7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:24 2025 by rpki-client