Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier: huIHaBMBLDAGHYQVXy8Y9p0ArKIdvhFPeUEuqHvqRA4=
Subject key identifier: 6E:20:E8:CD:85:36:6D:FC:0D:60:84:AE:B0:ED:49:C3:39:39:71:6E
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial: 019A28F9B203ABC5F9D8A56CEC113FFD490C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number: 0909
Signing time: Tue 28 Oct 2025 04:00:43 +0000
Manifest this update: Tue 28 Oct 2025 04:00:43 +0000
Manifest next update: Wed 29 Oct 2025 04:00:43 +0000
Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: A0uxaimCSdudZOCkuyNslSFU0amtAexBKsiF1+9BVhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:b2:03:ab:c5:f9:d8:a5:6c:ec:11:3f:fd:49:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Validity
Not Before: Oct 28 04:00:43 2025 GMT
Not After : Oct 29 04:00:43 2025 GMT
Subject: CN=6e20e8cd85366dfc0d6084aeb0ed49c33939716e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:6e:49:c0:96:5e:35:a4:82:f8:8a:e9:bb:
3c:b1:6f:b3:51:45:2d:51:44:8b:99:37:f2:cb:4e:
f9:3d:e7:7c:63:5c:cc:4a:ee:8c:70:5b:73:3a:c0:
fc:9d:11:bf:3b:63:13:ec:2c:9a:a2:a2:9b:6c:ec:
dc:b5:5d:40:f0:fd:35:be:2e:3e:a8:78:23:79:47:
a2:cd:61:37:e3:40:44:42:2a:78:40:db:85:2a:87:
fe:ff:19:13:e1:ad:88:ee:d1:68:a5:47:d5:3e:b8:
a9:f9:33:49:f5:45:d6:1c:7b:c9:bd:7d:9f:69:9f:
d9:5e:f1:92:f6:6e:60:05:5b:21:f0:79:e5:52:ba:
96:04:80:70:c8:01:5e:27:02:1d:c5:51:44:6a:dc:
a1:de:b5:3e:62:d8:5e:12:4e:77:2e:9a:76:65:62:
9d:f3:51:c3:5b:a1:04:89:3f:14:fa:13:11:17:98:
5d:4f:dc:67:89:37:72:dd:7a:04:00:d3:fe:57:f9:
07:17:a5:f5:3f:38:0f:a5:44:82:54:e4:61:d3:29:
89:89:f5:3c:fa:41:5f:96:49:c3:25:6d:b4:36:d1:
98:d6:3f:e0:cb:47:66:b2:fa:af:e9:a6:ab:9f:e0:
eb:6e:65:7e:20:9e:f7:5d:a2:35:d4:b2:53:9d:42:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:20:E8:CD:85:36:6D:FC:0D:60:84:AE:B0:ED:49:C3:39:39:71:6E
X509v3 Authority Key Identifier:
keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:46:e1:39:ee:b2:02:4e:d3:42:bc:2e:7b:7e:9a:cc:7e:bf:
10:df:27:cd:da:6a:e9:6f:6a:aa:26:55:69:87:ce:0c:6b:15:
f8:c7:ef:7a:ed:2d:f9:08:17:cc:ec:71:62:ff:3b:4d:ec:64:
4e:6f:96:0f:54:c2:bc:f5:1b:64:14:13:57:e4:ed:76:e1:75:
0b:6b:b6:f7:c8:c4:fb:a1:56:7e:8f:d1:ff:57:a1:c9:c0:4e:
34:ce:01:3d:2d:77:46:d4:4d:35:83:3c:dc:9f:85:b1:63:be:
6a:de:ec:22:09:1c:a1:b5:e2:57:5d:b7:e9:f4:88:4a:01:dd:
9a:88:1e:29:fd:20:b3:55:75:3f:92:b8:89:7e:e6:11:6c:27:
a9:0c:24:b4:c4:56:56:40:a5:1d:10:04:bb:03:72:5f:34:20:
a2:6d:15:d9:24:0e:c9:0a:ec:36:89:5a:56:8e:89:94:1e:72:
10:4e:ba:f7:cd:eb:e7:51:79:19:85:6b:40:8e:22:f5:47:32:
3b:c8:0b:c4:91:14:ec:d0:f0:f0:f2:41:4c:1f:d7:39:84:6a:
d3:b2:ae:85:aa:31:07:b2:95:20:9b:ad:8a:e5:03:aa:f9:e7:
c2:09:d3:ef:f8:a9:f2:e8:04:fd:c9:51:7f:dc:1a:94:15:29:
de:fc:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:55:41 2025 by rpki-client