Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: 8Yi+oOzqT/MEM/dMh5cSIdURYdig7LXLOpdbbAXi7Ew=
Subject key identifier: 45:F7:0A:93:51:83:23:78:F9:62:81:39:8B:B7:E4:BA:FE:38:8E:BA
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 019A725CBC0A634752C8483338678CD504C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0B31
Signing time: Tue 11 Nov 2025 10:01:11 +0000
Manifest this update: Tue 11 Nov 2025 10:01:11 +0000
Manifest next update: Wed 12 Nov 2025 10:01:11 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: r03qk3TaMYqsZeUkZPCvuacMIAdmYV3t7yHXQ/1HKUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:bc:0a:63:47:52:c8:48:33:38:67:8c:d5:04:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Nov 11 10:01:11 2025 GMT
Not After : Nov 12 10:01:11 2025 GMT
Subject: CN=45f70a9351832378f96281398bb7e4bafe388eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c0:e9:46:36:81:ba:d7:d6:4e:e1:71:5d:e2:
d7:b2:40:04:a0:a9:ba:cc:af:95:b0:a0:0d:c1:ee:
52:34:b6:cc:00:1a:86:0d:0c:0c:5b:dc:67:80:3f:
75:0a:57:dc:01:df:c5:12:00:c6:12:35:29:f0:55:
f6:25:f6:cc:b1:f8:b7:78:0f:c7:ce:6e:c2:12:40:
d8:73:6d:92:d4:4a:42:af:04:9d:08:9b:68:54:23:
be:62:2d:9f:f5:71:d8:7b:5a:06:2d:c0:55:02:f1:
21:bc:24:5e:40:72:91:a3:c6:c2:9c:c9:c8:8d:3c:
4d:81:02:78:73:f1:81:bd:88:19:84:78:a0:c8:46:
14:07:c5:64:87:e1:3b:f5:c3:4e:7d:e9:23:6e:85:
b5:b4:f3:14:76:67:93:8c:24:05:b2:69:e8:1e:13:
70:eb:49:a7:5f:74:0d:6f:d0:42:68:e7:11:b1:32:
ab:3a:2e:79:59:a2:ff:74:43:83:9f:96:50:0b:0d:
ab:4f:7d:ae:e3:a4:85:73:84:ec:54:d4:6e:d6:4c:
ff:c1:0e:e6:4c:e2:76:1d:98:bf:b9:72:a2:da:9c:
6a:02:46:1e:10:90:5a:50:92:75:30:1d:09:61:a7:
e7:73:9b:09:5f:46:38:ce:65:7d:b1:ef:5e:c1:09:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F7:0A:93:51:83:23:78:F9:62:81:39:8B:B7:E4:BA:FE:38:8E:BA
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:a7:6a:40:81:82:5a:d1:83:15:f7:34:0e:33:df:6e:c0:
92:32:97:26:32:2c:30:41:7b:d3:46:e3:7c:2f:3b:dd:5f:2d:
e0:67:34:29:2f:e3:25:bd:ed:a0:6b:17:cb:dd:96:b5:38:0e:
96:92:60:d1:58:85:0b:1d:e4:2f:db:63:e2:e1:dd:00:85:64:
33:a3:5b:6e:08:3e:e8:62:47:d1:4d:a8:77:05:14:27:24:f5:
35:3f:f7:5a:1a:29:c6:74:a3:b3:80:5e:89:cf:b7:00:0a:41:
56:99:02:ce:3d:51:35:87:96:e9:31:3b:45:d7:e0:b2:68:b4:
87:90:3c:ee:fe:83:25:60:51:83:3f:50:1c:d6:2d:f5:56:e5:
63:12:91:9b:c8:57:7f:9b:bf:6f:e6:fe:2d:68:46:c0:b8:54:
38:51:15:a8:e4:29:1f:bd:05:15:44:98:9f:cd:72:27:62:b2:
77:c6:e2:45:35:d7:4a:97:d0:ea:54:b2:3a:f2:64:42:fd:e7:
f7:58:25:4f:fd:a9:76:e2:35:3a:c1:2c:95:22:0b:7c:ad:50:
c6:ae:0f:73:bf:c4:dc:b7:3e:58:1a:f7:54:0a:56:b4:6a:cf:
ca:b7:e0:b8:13:da:93:48:17:dc:da:c9:e2:45:a2:53:19:50:
6e:9a:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:13 2025 by rpki-client