Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: 3dkpAraqDs9JwcZyEc6mzyhJ0GeZ/bhMxKVqWMcrAE0=
Subject key identifier: B3:BB:68:41:51:32:92:61:69:7C:33:41:90:32:FE:78:7B:25:A2:9B
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 019A725CD0BFF024116863D025F398ACBC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 0A90
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: J0VLldQ8ZvKr0vw4uppHPF3OOLv47PpPS7qGoZ/CCRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d0:bf:f0:24:11:68:63:d0:25:f3:98:ac:bc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=b3bb684151329261697c33419032fe787b25a29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:36:c8:59:ad:b9:00:99:51:2b:16:f4:b3:
98:97:c3:44:35:68:df:50:88:30:af:e6:2f:f4:d4:
78:6a:33:8b:5a:63:2c:cb:8f:ae:03:8a:70:60:77:
89:e1:9b:6e:e6:1e:6d:27:fd:25:94:66:ec:ed:7c:
69:36:0f:5c:7c:f8:0b:5b:87:c3:f4:c1:d0:ad:27:
77:94:2d:43:38:7f:4d:2d:e6:69:85:a5:5e:44:c0:
5a:cd:ab:df:40:8c:47:ad:11:b4:04:68:91:29:b7:
a0:dd:59:81:3a:10:2c:f4:20:a2:b0:29:b2:bc:ed:
9e:aa:5c:93:7e:c2:85:ca:87:23:87:8b:dc:78:0b:
7f:a4:ab:43:16:1b:d0:d9:8d:f8:8e:47:c2:b6:e6:
33:ac:7e:61:bf:3d:26:80:76:a7:a1:71:52:c0:5b:
74:99:2b:51:d4:97:e0:a7:08:ca:91:64:db:fe:28:
8c:72:65:ce:98:ed:3a:9d:59:b4:d1:63:da:5e:fa:
65:aa:46:85:13:4d:47:dc:37:62:32:94:c0:20:5f:
da:2c:ef:c7:d4:bc:22:f5:65:ca:d1:81:a0:c6:b5:
d5:47:5a:e1:8e:62:c5:4b:c9:cc:d7:2f:61:42:a0:
09:28:5a:3e:29:51:04:c8:23:1c:64:5b:c4:01:57:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BB:68:41:51:32:92:61:69:7C:33:41:90:32:FE:78:7B:25:A2:9B
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:38:20:d7:4e:42:aa:b4:e9:8d:e5:32:91:76:f3:9a:49:10:
d9:dc:87:b8:7d:d3:47:51:78:73:0c:4e:7b:42:85:8f:29:01:
06:86:7e:a6:c3:23:e6:fd:69:83:0a:e1:be:4c:84:d7:23:82:
1f:bf:3f:0e:fe:18:1d:b0:e4:98:c3:9a:38:43:bb:3d:f2:78:
cc:0c:a3:ab:da:79:d2:b3:87:1f:de:13:54:9e:cf:c1:5a:c2:
ef:51:6b:ad:fb:7e:ee:a3:b9:96:98:c6:96:ea:f9:65:40:a0:
11:79:6a:2d:da:ee:70:1a:3e:57:e7:16:3f:ea:5c:c8:3c:4f:
58:6b:d8:a0:51:a6:3f:8d:00:c5:70:fd:6a:e1:62:95:5b:98:
c4:03:0b:0f:6d:aa:df:fb:0d:f4:9c:75:98:b8:33:6a:2a:29:
3b:4b:8f:e2:ed:98:ed:5f:5d:25:25:ee:9e:d2:23:9e:e5:2a:
57:ab:7d:b2:b5:8a:71:d6:e9:ab:f6:31:b9:19:de:2d:34:18:
d5:1e:1f:aa:ff:97:68:a9:91:8c:84:37:a9:9e:69:dd:df:8a:
c6:5d:d6:50:9a:e1:87:5e:d9:db:15:15:fc:2c:52:34:0f:d7:
f5:f5:22:04:5a:03:ff:69:10:ba:1f:0b:3d:3d:a2:0b:dc:b3:
05:95:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:40 2025 by rpki-client