Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json)
Hash identifier: 8fdKyTgLrymcEgw0G/6zt2reLe8nIDnPTrUNWVjPEFA=
Subject key identifier: 06:7C:BF:74:E5:0C:7E:F3:2B:52:2E:16:FA:A3:2D:BF:FD:94:2B:4C
Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Certificate serial: 019A7225ACBE36CA94634E3E80F081ED77F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
Manifest number: 1306
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: D5XRM8hE2RNFhe2y+wYAkbe9gi+oAPfG5XiWTpe2Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ac:be:36:ca:94:63:4e:3e:80:f0:81:ed:77:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=067cbf74e50c7ef32b522e16faa32dbffd942b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:59:d9:87:60:60:ba:54:11:8c:2e:13:be:
49:1d:6e:4f:90:f8:e5:89:36:5e:17:30:ad:b7:26:
ff:fd:1a:d1:02:32:33:c4:f9:a1:c3:c0:87:c1:84:
f6:38:1c:a9:4c:42:2b:02:3d:ae:2a:f4:0b:4b:b6:
0a:0e:5e:dc:66:e1:7e:89:5e:7d:5a:2d:e4:7b:a9:
72:80:f3:c9:6d:c7:11:4a:95:98:74:5c:71:df:d7:
54:45:6b:44:3b:22:33:4e:87:df:4b:5e:32:a4:35:
80:5a:44:1d:12:41:15:f5:45:06:d6:3b:8f:1d:f4:
91:9b:c2:4a:9c:a6:fa:c2:b5:60:a8:90:44:4d:5f:
b9:8c:fb:d7:5f:26:a0:86:c1:6e:00:4d:e6:0f:ed:
5f:d9:95:95:37:ac:bc:10:b9:54:2b:3f:cc:f2:fd:
e9:10:59:35:f1:78:16:77:3e:ae:cc:4a:39:72:5a:
3c:a9:5f:d8:9b:78:b5:f8:4d:0d:4e:40:c1:ca:61:
5b:19:b9:5e:3b:28:2e:a1:1f:a5:7d:8a:55:f7:7a:
ca:29:bd:13:9b:17:f0:02:35:44:38:96:c0:bb:0f:
cd:15:5a:1a:0c:7d:c4:97:09:7d:4b:63:66:e4:be:
8e:87:af:70:8d:c4:a4:17:fb:5a:23:ab:2d:2b:ed:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:BF:74:E5:0C:7E:F3:2B:52:2E:16:FA:A3:2D:BF:FD:94:2B:4C
X509v3 Authority Key Identifier:
keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ff:61:80:1b:e1:15:67:2b:dd:ab:00:2e:ed:11:82:7f:12:
a8:07:96:d3:af:d4:de:bf:11:e1:da:c4:85:c8:11:92:84:ad:
41:e9:20:c3:96:51:7f:5d:fa:5e:8f:89:3a:7c:c9:aa:a4:46:
c0:30:62:a0:75:16:f5:ef:07:f3:4d:04:05:88:45:72:44:27:
b6:8d:ba:93:8e:2f:44:7b:82:7c:25:d8:e1:8a:49:8e:87:82:
58:7d:11:26:66:df:47:2d:d4:84:b9:70:34:66:9b:40:c7:8e:
83:4d:88:ad:9f:66:b6:7a:50:96:48:5b:d4:aa:a1:44:fb:d5:
1d:09:ec:27:7b:bf:f2:1b:7f:67:97:b6:ce:39:46:ae:c5:b9:
53:e8:de:1d:08:3a:24:30:bc:aa:db:a3:e8:b9:4e:81:ec:12:
2f:e6:ce:97:23:1d:db:a5:92:03:71:43:d3:75:10:93:bd:e8:
96:57:64:95:63:48:c3:ce:fb:a3:36:74:5a:f2:94:77:51:ed:
1b:12:48:34:a0:17:87:42:0f:4a:2e:40:e6:67:3c:cf:00:16:
8b:53:ec:ab:fa:8b:5f:2e:0a:98:3b:96:1b:ff:69:4f:4f:03:
ca:63:3d:51:5c:0c:21:a0:0a:1f:e3:9b:fa:71:4c:64:0d:ca:
79:14:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:35 2025 by rpki-client