Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: H4e16ybgsRBP8qzdbBxwf7ByHa2We3ynoF2n/y4ejmI=
Subject key identifier: 65:C6:CB:EE:18:81:C9:1B:05:19:CF:70:18:87:1D:63:E5:F1:9A:FB
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 019923A1052148F5A88BDAB151D0CF299925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 1643
Signing time: Sun 07 Sep 2025 10:02:59 +0000
Manifest this update: Sun 07 Sep 2025 10:02:59 +0000
Manifest next update: Mon 08 Sep 2025 10:02:59 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: qn/dhNbwsI6EXxNOtWGAKuOgT/p/Px+9Ayoc4pSAp28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a1:05:21:48:f5:a8:8b:da:b1:51:d0:cf:29:99:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: Sep 7 10:02:59 2025 GMT
Not After : Sep 8 10:02:59 2025 GMT
Subject: CN=65c6cbee1881c91b0519cf7018871d63e5f19afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:d7:ff:51:8d:43:36:c2:f3:f3:ce:e1:bc:
35:da:4f:d5:e8:9a:24:07:68:21:03:4b:de:1d:a9:
55:58:a3:fa:93:f7:18:97:3b:ad:f8:2a:94:96:05:
bc:fd:1a:b7:30:c1:ac:7e:6b:6f:30:c4:b4:25:19:
0c:49:20:94:7f:55:24:e8:47:81:21:78:71:47:b4:
ce:36:7d:fb:b0:4a:ce:e3:ca:c9:0c:d6:34:a2:76:
fd:d9:38:83:21:8e:48:62:ef:fb:d7:64:0a:c3:c6:
29:7c:67:ab:70:32:d8:0e:7e:20:be:2b:c6:b7:a1:
41:66:a0:39:93:a0:04:78:3d:18:34:2a:72:3b:fe:
9c:2f:a5:a7:b1:82:4b:5d:cb:15:29:71:22:3a:61:
d4:88:e2:f4:68:22:70:60:62:66:98:82:62:99:06:
31:a5:e3:06:0c:41:cd:a4:c6:e3:13:6a:b4:24:45:
4a:0a:8d:41:22:f4:38:f2:4c:e5:f4:d2:33:75:76:
6d:bc:19:12:ba:e6:31:b3:08:6d:80:9b:7e:f4:21:
3b:34:b3:0e:7b:a3:e1:46:83:a5:58:67:a7:4a:11:
0b:72:22:89:61:95:6b:29:94:9d:11:d0:17:8f:cc:
3d:b0:39:da:a3:77:69:01:68:4c:47:4b:79:80:9f:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:CB:EE:18:81:C9:1B:05:19:CF:70:18:87:1D:63:E5:F1:9A:FB
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:40:66:fe:61:f8:48:a2:8e:60:ba:76:64:b6:42:47:9f:31:
b5:26:ea:fd:bc:4f:39:25:32:8d:54:d6:a8:f9:0b:f9:6f:28:
01:de:b6:d7:47:18:08:a6:aa:9f:78:5f:ad:4e:64:d7:9b:8d:
b0:13:ff:fe:3d:19:75:74:f5:3b:2b:1f:e7:41:f6:7a:1f:2c:
88:11:30:80:4d:1d:55:06:be:f0:4d:a7:9c:70:b0:97:26:56:
4e:62:b9:2d:fd:5e:16:1a:19:07:dc:e3:33:8f:86:ec:35:6c:
bc:87:85:37:12:c4:5b:a7:2d:88:80:85:53:4a:1d:1d:ce:32:
48:11:4c:a5:ad:88:85:5f:6c:9a:32:0c:0c:44:3a:08:92:a6:
02:a4:5c:de:bc:a2:ef:9e:c0:ac:25:a5:ad:87:0b:d6:79:70:
12:15:c6:bd:2d:b0:d4:c5:6b:85:f1:3a:2c:3c:7b:2b:28:0f:
fe:b8:4c:3b:96:e6:c2:c0:3c:53:87:1b:f0:9f:9c:61:30:83:
e5:d2:0d:bf:1c:5e:b9:26:a5:a2:19:6f:58:bc:a0:40:60:d3:
47:7f:07:61:90:c1:5f:c8:9a:0c:3a:fc:fb:36:15:b8:df:3a:
ab:71:31:9b:c9:99:67:e2:9c:45:99:37:22:57:8e:1b:94:08:
1f:ab:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:06 2025 by rpki-client