Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: 2ji9jAGRzmXUntW8O5FHh/tMzSOXqfEEqa30OuJ0dq8=
Subject key identifier: E4:30:CB:5A:EC:25:53:D1:67:0E:E5:DD:6A:48:C1:38:E3:35:0C:99
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 019A71B88362D9193B7A59191C2C57443534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 1719
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: OD1PUDZjXnB0C7iKw+l7S4GtDx+5rHk3djYrlkPsOF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:83:62:d9:19:3b:7a:59:19:1c:2c:57:44:35:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=e430cb5aec2553d1670ee5dd6a48c138e3350c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:a1:cf:e9:fc:40:16:89:49:22:51:0e:d4:
1d:ae:da:01:24:28:e7:cf:7a:15:3c:8e:62:bc:e8:
ee:cd:4d:d7:3f:ca:f3:af:e2:37:28:98:5c:6e:97:
8f:17:02:c2:64:41:ad:e5:2f:62:de:22:8c:1a:9a:
a5:ae:5a:88:cc:86:27:5e:a6:ff:53:b1:28:8d:74:
49:0c:54:09:fb:3d:41:d3:53:be:78:c9:cc:97:22:
de:06:49:60:be:27:30:fa:ec:21:94:03:ef:58:3e:
cb:c7:98:21:15:b9:e0:b3:90:fe:8c:bb:b7:41:f5:
1a:30:17:40:5b:9b:1d:8d:a1:eb:64:ee:9d:8b:0b:
30:0d:76:e1:e4:ea:c7:38:a2:7d:fb:a5:46:77:fe:
d1:03:b5:38:55:81:e5:33:5c:9d:0c:5e:09:ff:8e:
70:9b:76:c4:66:67:52:1e:1b:90:e7:82:fc:43:94:
cf:ba:43:31:66:57:7c:9d:27:98:2e:de:6d:91:9c:
eb:3f:fd:6d:4d:bb:15:87:48:41:23:5c:e6:3b:a8:
a2:9c:c5:ef:87:0e:64:87:b9:d9:3a:ee:65:ac:5f:
fc:26:97:7c:f1:7a:b0:6e:04:c1:d9:a4:11:55:15:
bf:4e:9d:18:bc:02:04:cf:f5:2e:22:1b:ed:24:e1:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:30:CB:5A:EC:25:53:D1:67:0E:E5:DD:6A:48:C1:38:E3:35:0C:99
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b3:61:91:c3:0e:44:23:9d:8b:da:a1:f1:9b:fb:b5:38:0b:
ea:b5:0b:79:d5:bc:10:65:f9:09:7d:24:56:03:76:58:3e:dd:
34:01:b9:b9:7c:1f:73:23:8d:bf:28:cb:d2:b7:77:22:40:b2:
a7:db:4d:d8:b5:48:7a:25:37:4f:22:d8:ae:82:1d:69:50:6b:
71:30:1c:8f:61:f2:08:3d:eb:2d:a6:bd:36:1b:05:96:08:8f:
78:81:25:5e:b4:ee:d8:40:86:38:e2:c2:28:6d:96:4d:d3:22:
49:74:ea:ed:93:94:ff:74:75:e3:e4:81:67:59:92:e1:a0:cd:
fd:78:f6:4e:8d:7d:51:7e:f5:8e:62:4b:6c:5a:35:38:d6:b1:
6f:1e:13:35:aa:6d:5d:5a:d5:53:2f:0e:ce:14:7a:4d:12:de:
e8:3a:6e:be:f7:c1:79:59:33:97:e5:52:ab:16:1b:8c:04:91:
e1:d9:b4:f6:48:5b:7d:67:08:63:17:95:42:e5:78:78:5d:ed:
34:8a:d0:62:8d:c2:a2:78:93:8d:45:e0:97:b0:c0:37:b0:b0:
f8:4a:7b:d5:9f:fe:b6:3c:59:02:40:77:74:1b:54:7b:46:8f:
62:92:8d:e6:55:a7:08:40:ca:93:4f:41:d5:4c:2e:2b:9c:77:
0f:83:f9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:59 2025 by rpki-client