Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier: AdZ5i3YW8bnjfx0qaITSJCkvYeyir9cdRkbOld9N+0k=
Subject key identifier: D9:8E:0F:C3:83:D7:70:CF:4A:2A:37:C8:BF:7A:3B:4D:45:88:FB:A7
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial: 019A72CA5ED24946ED3141B734565364FAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number: 02E8
Signing time: Tue 11 Nov 2025 12:00:56 +0000
Manifest this update: Tue 11 Nov 2025 12:00:56 +0000
Manifest next update: Wed 12 Nov 2025 12:00:56 +0000
Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: XmgBeV9kVFTnXLLnqEvR1Dx+vK9mR9nkTolyBbMzrsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5e:d2:49:46:ed:31:41:b7:34:56:53:64:fa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Validity
Not Before: Nov 11 12:00:56 2025 GMT
Not After : Nov 12 12:00:56 2025 GMT
Subject: CN=d98e0fc383d770cf4a2a37c8bf7a3b4d4588fba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:c1:b9:3e:cb:37:e6:89:f8:4d:e2:3a:0d:
d7:9a:7e:7d:81:37:0f:a3:d0:36:09:04:21:91:75:
3f:62:60:c2:14:5e:b4:d8:d0:51:78:01:85:c2:ac:
d5:27:85:91:37:27:0e:76:2e:d4:56:72:64:9c:ed:
27:7a:2d:4a:57:46:34:0f:d9:ad:75:c0:be:6a:ef:
5c:84:30:70:fb:f0:91:6a:c2:45:08:ba:76:4b:c7:
84:87:62:b9:64:c5:1f:3f:9b:25:09:4a:ff:4d:e5:
bd:d5:83:c3:35:bd:60:c3:34:ce:63:0e:ae:61:2b:
9d:15:4c:13:c2:77:83:a9:7b:13:6c:10:6e:1d:0e:
41:40:24:17:6f:94:f8:d5:a1:ae:52:f0:ca:cd:04:
2a:10:52:76:c2:b6:9d:3a:5f:dc:9d:e0:6c:92:c6:
16:79:1e:b9:67:da:d0:cc:5e:ca:08:4f:33:09:56:
be:a7:87:0e:3a:b8:ed:e9:3e:44:6c:fa:af:83:c2:
96:bb:35:3c:15:cd:d1:9e:c2:3c:30:93:55:45:1c:
55:2f:66:a0:88:14:66:f8:b6:22:af:e0:b4:8d:b7:
ce:e6:44:aa:77:37:fd:fd:72:3e:20:74:21:ef:c6:
5b:76:9f:c0:01:16:92:dd:b1:69:7a:72:5a:29:6c:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8E:0F:C3:83:D7:70:CF:4A:2A:37:C8:BF:7A:3B:4D:45:88:FB:A7
X509v3 Authority Key Identifier:
keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:15:1a:de:d5:85:42:78:47:6e:0f:ee:cb:80:86:71:77:f0:
45:59:21:a7:fd:80:6f:dc:13:20:b1:6f:23:24:1c:bb:eb:d0:
11:4e:62:c8:75:fc:e0:07:84:97:e4:05:45:d1:a2:46:28:63:
ad:db:50:83:4c:73:53:d9:b2:45:15:c0:45:d6:11:45:22:18:
4b:06:35:3f:ee:10:a4:6d:eb:2f:2b:da:ab:ed:3a:8f:60:1f:
11:b1:1a:38:28:04:a3:6b:a0:50:b4:c0:be:91:a8:fe:d3:46:
56:3c:2b:6f:99:94:56:2d:be:36:1f:93:dd:a5:9c:41:34:30:
4b:1d:bb:8d:65:42:08:bb:21:eb:13:1f:19:df:c8:ad:64:44:
9d:c3:26:4c:3b:69:ae:d8:c3:30:0a:60:11:c2:f8:29:bd:db:
cf:bf:e3:30:17:f5:93:5b:6e:77:8d:b8:e3:8b:99:9c:5b:ff:
21:26:21:df:bf:c4:39:39:9f:d9:5c:33:f1:4d:c3:87:df:f5:
30:6c:e5:55:ba:b3:44:b2:d9:02:6b:5d:19:8a:a3:04:cf:0b:
8a:94:5d:06:cf:9c:7f:3b:c0:4e:0a:44:97:ad:bb:0e:42:90:
d0:75:61:7b:49:0c:90:0c:85:f3:2e:48:99:7b:5a:28:3d:1a:
47:02:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:23 2025 by rpki-client