Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
File: xwy87PJahmXDWnjIIdEes6ZCNiE.mft (raw, json)
Hash identifier: drzQ/6rlw6R7gdE/nqDtLoOQh3gVVVHh1D5C2kF3jcA=
Subject key identifier: DC:46:39:1E:F7:DD:32:62:45:E5:BA:4B:F8:1E:C7:04:EC:A3:14:D2
Authority key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
Certificate issuer: /CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Certificate serial: 019A7112C73CA3516DF73167C730D258F707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: xwy87PJahmXDWnjIIdEes6ZCNiE.crl (hash: lBjMEkjpU5y+Ozv3ESjOSylfz4QlIJR9J6Cx4qdzMjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c7:3c:a3:51:6d:f7:31:67:c7:30:d2:58:f7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=dc46391ef7dd326245e5ba4bf81ec704eca314d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:68:64:51:e8:dd:6e:32:e8:3d:96:51:cd:
98:cc:0a:48:10:a6:d5:f2:77:43:cb:a9:30:ce:18:
d6:94:21:e9:cc:85:d9:60:38:05:e3:59:dd:42:89:
9f:91:20:a4:9d:75:c9:fe:f1:8a:48:51:cb:a5:71:
ed:37:90:d6:13:20:10:7e:6d:38:ab:31:5a:d1:80:
6f:47:01:9b:25:ed:d3:4c:27:9b:47:23:73:7e:5b:
53:97:02:dc:5a:7c:6a:73:96:19:b7:47:af:6f:a5:
2c:a7:c9:c1:f2:0b:23:1d:d7:aa:bc:75:26:48:59:
4f:1f:61:d6:cf:18:35:ad:f0:0f:0b:f8:3a:96:79:
98:c3:7a:92:f8:be:b4:60:53:06:94:3d:05:3c:5e:
7a:55:40:48:c9:fe:4c:c4:c1:3f:b7:cb:38:e8:c8:
2c:0a:3a:fd:49:5f:84:e7:b2:57:68:44:ea:cd:b0:
66:fc:3c:d5:5d:61:c9:74:5f:b9:64:1b:f4:7b:40:
e1:48:16:37:fa:b7:da:4a:9f:03:f0:7d:b9:b2:57:
4a:4e:60:2d:c0:eb:d3:54:65:b7:1d:94:90:34:00:
7d:71:6d:ef:df:7e:19:e9:88:65:d1:27:10:d1:f4:
31:9f:5d:34:76:fd:d0:2f:a8:a1:6e:50:6f:2f:51:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:46:39:1E:F7:DD:32:62:45:E5:BA:4B:F8:1E:C7:04:EC:A3:14:D2
X509v3 Authority Key Identifier:
keyid:C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4b:6b:b7:bb:a7:d7:2d:09:d6:39:e5:ad:d1:29:85:cb:e7:
0f:c2:1e:13:5e:b7:d6:9a:c9:d5:23:e4:1f:80:d2:f0:f4:31:
88:07:91:2b:39:32:04:22:dd:64:4b:67:62:56:8d:6b:9c:53:
83:29:29:86:34:1e:b0:ae:6c:b5:a6:30:b5:7c:51:51:1e:65:
9b:1b:f6:c0:eb:a7:7c:df:7d:80:0c:cc:92:1a:b7:f8:e4:5f:
ff:a6:29:18:83:52:d7:de:7a:1b:76:a3:d2:cf:22:09:90:aa:
6f:ba:ae:d2:50:86:a1:8d:15:01:6d:dd:aa:03:e0:fc:83:f3:
3c:f2:66:86:86:e8:55:3c:4d:d0:8e:b2:9e:8a:03:12:4d:e7:
6e:41:07:13:37:e6:1a:f5:8f:dc:5f:ae:72:33:62:f5:7b:95:
e4:85:2b:3b:ba:ff:f2:7e:78:70:c5:58:59:a9:b1:27:3b:ae:
2b:49:ea:d8:ed:79:5d:3c:7a:8e:42:7a:be:78:ab:05:7b:ec:
98:f1:88:0f:67:e4:75:45:85:7d:f2:82:07:5f:9a:0a:72:73:
2a:7d:47:04:00:6e:ba:86:61:22:2c:5b:a9:4d:0d:63:a4:21:
54:3d:20:d9:2d:34:be:68:d2:b2:7e:9a:3e:04:8e:2f:7b:63:
cd:97:f1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:39 2025 by rpki-client