Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier: SRWmreaQwmAe9jtSb7p0H74FDblpwyVUF814Q+KhbHo=
Subject key identifier: 53:FD:AE:DD:6C:9F:03:8D:13:6A:55:21:FE:80:10:BD:44:4E:3B:3A
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial: 019A70A5197F8DB1F98788E3015B8005A9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number: 121F
Signing time: Tue 11 Nov 2025 02:00:59 +0000
Manifest this update: Tue 11 Nov 2025 02:00:59 +0000
Manifest next update: Wed 12 Nov 2025 02:00:59 +0000
Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: geRzykG0Jtt43pNWtFWo4jT0HEzz4mB+kuL5HjOxTT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:19:7f:8d:b1:f9:87:88:e3:01:5b:80:05:a9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Validity
Not Before: Nov 11 02:00:59 2025 GMT
Not After : Nov 12 02:00:59 2025 GMT
Subject: CN=53fdaedd6c9f038d136a5521fe8010bd444e3b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:b5:bf:11:6a:1d:12:0d:5c:de:2e:18:47:
c4:d0:cc:74:d0:db:61:7d:c4:4b:0c:dc:77:40:89:
96:35:e3:83:10:e4:8f:58:1f:fa:0d:20:fc:06:e3:
65:a7:01:ac:a7:ed:bb:b7:10:84:8b:62:38:da:62:
53:15:59:da:86:14:72:b9:16:c5:8f:20:35:bf:34:
78:f1:f6:a8:90:f9:5a:99:e9:a7:a4:c2:56:d2:fd:
5e:9b:fe:ad:21:9d:cb:2d:75:3c:50:a8:b4:d1:13:
04:54:d9:70:8e:02:59:ab:9d:6a:a9:6e:0a:be:d4:
97:ab:3b:38:01:87:32:99:9d:ad:71:ef:17:5e:40:
30:60:a0:6e:c9:b4:15:ac:11:c4:e2:61:5a:1e:d2:
87:32:4b:01:68:53:b0:83:fb:4d:b6:ec:2e:14:d0:
5f:9f:d0:cc:0e:63:dd:ea:b6:f4:0c:0a:ca:98:e0:
40:22:f6:22:02:bb:dc:ef:fd:5b:25:c5:88:0b:e7:
b3:cc:28:0a:21:47:bc:a4:35:af:62:91:66:53:b1:
ea:7c:75:fd:15:48:36:09:5d:3f:ed:fd:c2:d9:9a:
a6:7d:a9:38:c2:16:d1:17:4f:24:62:f1:52:14:02:
5b:78:25:10:6f:61:ec:35:df:ce:dd:42:e1:d3:37:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:AE:DD:6C:9F:03:8D:13:6A:55:21:FE:80:10:BD:44:4E:3B:3A
X509v3 Authority Key Identifier:
keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:22:6c:ec:e8:47:e2:d4:e5:4b:d8:37:34:05:18:8c:a9:91:
14:ee:5f:ac:5d:e2:53:08:fd:f7:02:8e:e5:05:c5:ce:1b:fd:
f4:e6:d3:e4:27:73:c7:a3:4d:09:ee:92:83:91:a6:49:4f:a2:
da:85:06:2b:ed:d1:14:ea:64:d3:f2:85:e5:b1:08:ec:88:f3:
b6:0b:14:18:56:d4:f2:b2:ab:a4:a1:86:e3:7b:dd:14:d9:f9:
fa:14:3e:e7:11:1e:d8:54:ae:90:75:17:2e:1b:94:cd:c8:8f:
7a:2e:f8:36:cf:b8:93:4f:39:c9:58:c8:7f:92:4b:ca:4c:60:
fb:74:ae:40:66:1c:e9:c3:a4:ae:3c:28:35:2f:9f:3e:40:2b:
b7:f3:0b:36:8d:cc:04:69:26:a9:18:3b:4f:05:14:e1:41:a3:
41:64:86:44:45:ae:c2:cc:49:e3:c4:3d:0b:71:64:2c:47:e2:
68:ac:54:47:90:f5:a3:7d:0d:65:d8:39:6d:45:5d:98:86:75:
83:55:61:b9:8b:a9:60:c2:ac:84:0b:bf:fd:5b:c4:4b:ec:e2:
91:39:fe:f2:6f:e8:e2:ec:05:18:d2:6d:21:22:db:ff:70:5b:
02:51:a2:cf:f8:fa:59:6f:9c:25:30:23:6c:f5:a6:1b:d3:36:
0d:2d:02:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:13 2025 by rpki-client