Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
File: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json)
Hash identifier: ijaKeHCUSSak45gl229YwFb21Dgh85jXaQG7OdqfWtw=
Subject key identifier: 03:B2:CA:29:E4:C5:58:82:D5:C1:72:87:3C:F9:4E:02:3D:40:66:75
Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
Certificate issuer: /CN=c68106f44957d194020335b0bfd6077ccbcdc878
Certificate serial: 019A7112C4D697E878AA3462377E1304B5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:00:46 +0000
Manifest this update: Tue 11 Nov 2025 04:00:46 +0000
Manifest next update: Wed 12 Nov 2025 04:00:46 +0000
Files and hashes: 1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: r/9Pb6tjPijljWD0+43//ZcD+NNMnfdJc1a4brHRRZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c4:d6:97:e8:78:aa:34:62:37:7e:13:04:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878
Validity
Not Before: Nov 11 04:00:46 2025 GMT
Not After : Nov 12 04:00:46 2025 GMT
Subject: CN=03b2ca29e4c55882d5c172873cf94e023d406675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:b6:21:e6:6c:21:97:f8:48:93:b2:8b:84:
53:99:46:05:3e:88:e2:48:c3:bb:d8:87:b2:27:b1:
4b:21:5a:0a:00:d5:1f:09:f4:9a:c0:22:9a:a7:20:
1c:64:e7:df:f8:bf:46:b1:28:eb:ef:a8:f2:53:1a:
67:a4:fb:1c:e1:8b:d7:53:fd:d7:9d:ac:05:06:c1:
85:7a:3c:dd:06:48:a3:35:d8:ed:7c:f3:35:cf:cf:
99:3d:19:7a:2c:86:8a:4b:07:19:1f:be:45:2e:85:
f2:52:46:52:8a:b5:24:f0:9e:ad:93:78:bc:77:b4:
2d:db:f4:d0:2d:f8:91:96:67:b9:67:f4:72:df:c6:
af:9d:46:5a:e5:58:2c:d0:65:d4:7f:67:2b:20:e1:
15:57:c1:0d:7b:02:5a:f8:4c:f6:a5:ec:e5:03:68:
33:20:33:b6:26:77:dd:2f:ae:cb:a3:be:c1:42:b4:
d5:5a:68:42:a4:3f:11:d6:57:82:0f:d0:e2:5f:b0:
47:5b:ff:69:eb:f5:f8:30:38:44:29:ac:9d:d6:6a:
55:4c:b7:cd:41:45:66:46:0b:e2:9a:2b:f7:9c:61:
fa:7b:8f:ab:49:8b:05:1a:0a:94:17:54:61:49:85:
62:96:4b:8d:29:f0:b1:b7:f6:42:12:29:28:4c:1c:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B2:CA:29:E4:C5:58:82:D5:C1:72:87:3C:F9:4E:02:3D:40:66:75
X509v3 Authority Key Identifier:
keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a8:34:a8:39:27:32:5c:08:47:e6:b1:74:59:6b:86:c0:39:
07:9b:93:88:0c:ee:7e:52:84:49:1a:11:d9:52:c1:71:85:e9:
e7:e9:13:55:61:37:37:f6:41:c7:a1:4b:38:9e:d7:af:20:e5:
16:06:5b:07:92:59:4d:a2:fd:03:a7:02:50:f6:45:b9:c6:fd:
27:b8:9f:3d:61:bd:ad:eb:7c:f2:ea:07:f2:d4:22:90:5f:80:
ca:0c:26:6f:01:05:13:0c:50:95:d4:59:b5:e1:71:c9:ab:fc:
6f:85:e3:12:1d:67:d7:68:61:25:fe:0d:6e:d2:b5:02:61:48:
d0:89:06:e4:5a:b7:a9:f7:8e:46:e3:b1:98:78:a2:26:5a:76:
79:da:73:ca:ae:68:c9:8a:d2:94:fd:7c:62:f3:e4:1b:f6:0d:
88:41:2c:c9:ab:82:f9:4b:62:05:8a:a7:21:98:c9:d4:31:74:
fa:35:5c:71:8e:bc:1b:8c:ef:bb:94:da:f0:f1:80:04:a0:8f:
3e:2e:a5:55:8f:7d:11:d0:b0:18:98:6a:5f:23:4a:35:81:eb:
27:a2:17:dc:de:29:ae:9b:3e:ed:2b:ea:92:7a:11:c9:a8:6f:
18:b5:2d:7e:7e:c3:42:bd:27:51:10:5a:63:8b:55:1b:ca:e5:
02:1d:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:12 2025 by rpki-client