Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier: UogcXN3e/faNcVhqmp8Aw32rRHukIw9Kn0513IuXDP8=
Subject key identifier: AF:DD:EC:1B:62:1F:72:C1:B2:C1:6C:2F:1C:AF:05:E5:7A:C1:AC:33
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial: 0199228D29143B6D85EB803E6C0AB074B406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number: 1172
Signing time: Sun 07 Sep 2025 05:01:40 +0000
Manifest this update: Sun 07 Sep 2025 05:01:40 +0000
Manifest next update: Mon 08 Sep 2025 05:01:40 +0000
Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: 07lz0SoZvmC4osWEq7REQYeFQMHLilr3yWbAGw/otVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:29:14:3b:6d:85:eb:80:3e:6c:0a:b0:74:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Validity
Not Before: Sep 7 05:01:40 2025 GMT
Not After : Sep 8 05:01:40 2025 GMT
Subject: CN=afddec1b621f72c1b2c16c2f1caf05e57ac1ac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:b8:ff:19:11:c5:c0:47:b3:b6:9c:22:7b:
5e:20:c5:f5:a3:dd:9c:05:1b:65:6e:ed:8b:18:1f:
16:75:6b:cb:15:49:ff:6e:8a:7d:d7:71:e3:18:74:
5c:87:33:1e:e8:0e:20:42:4c:bb:31:55:b4:a8:ae:
7e:34:16:67:d2:a7:8a:f0:6f:3d:2b:52:c5:b5:88:
57:e7:a8:c6:f9:af:10:46:27:45:ad:4e:1e:51:ae:
dd:35:16:2f:35:63:ce:90:70:c3:b7:3b:00:3c:ea:
ad:90:05:0f:3b:18:f3:3b:4a:5a:28:91:ec:fc:32:
5a:04:b7:d7:61:96:41:a3:9a:90:a7:f2:16:68:61:
f5:ce:cf:39:9b:9b:0b:0e:86:7e:1c:42:14:de:99:
96:83:52:7e:d6:9f:26:9a:48:20:d3:e8:08:b5:8d:
7b:4a:ec:41:cd:c7:52:e8:76:ee:93:20:77:bf:5e:
69:15:fa:58:e2:37:4a:52:bb:fb:ad:bd:14:0f:21:
e8:bf:08:ce:ae:bc:73:ab:05:74:db:e3:20:29:2a:
0a:11:a9:20:f3:d7:e0:df:6e:10:7d:ef:f8:b4:17:
e5:72:12:83:d6:ba:6f:25:6c:09:05:3a:65:65:b2:
c3:60:f1:d2:81:66:45:f7:21:9a:28:e8:9a:f8:2c:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:EC:1B:62:1F:72:C1:B2:C1:6C:2F:1C:AF:05:E5:7A:C1:AC:33
X509v3 Authority Key Identifier:
keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f4:f9:eb:35:a5:aa:25:ac:e8:62:ed:da:08:30:ed:9f:6b:
20:03:df:a3:eb:b2:72:6f:1d:e9:79:f3:c6:e5:5e:1d:55:e7:
49:5e:b0:54:50:81:cb:59:d6:89:0c:a4:c0:57:46:fe:0f:05:
93:54:bb:61:a1:50:31:d2:33:ef:09:21:d0:09:7b:2c:07:bf:
f9:4b:8f:69:5f:06:ed:08:ca:44:f5:2b:17:30:2e:3f:eb:1a:
4a:b3:43:70:10:db:40:7f:f4:41:f3:01:aa:5e:f0:0c:95:83:
e5:fe:a6:d0:78:4a:61:68:31:18:6e:ab:50:ec:e7:2f:c6:1a:
52:be:b7:79:bf:c4:d1:3b:28:70:cd:54:66:29:68:06:bb:15:
8d:21:f2:9b:6e:5b:eb:55:06:15:52:57:87:8e:99:8c:6c:9d:
6a:a4:5f:97:d2:3d:27:b7:d3:8d:8a:28:39:a0:d0:25:4f:a4:
7c:fd:a2:35:87:49:55:73:11:5f:0c:5f:fc:ef:0a:1e:3f:01:
0b:61:2d:29:51:e7:a1:5d:63:c5:68:62:94:08:41:d7:96:2c:
c4:7a:78:fa:52:4e:2a:59:42:a4:5c:3b:11:3d:ba:73:9b:c9:
c8:66:cf:13:38:a6:0b:f3:01:b7:45:5c:9a:a1:a8:da:22:6c:
8f:ae:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:00 2025 by rpki-client