Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier: dzjPBeb41nzBqVYDDOg/5Kx+uuKUlAtJivez7ayQK7k=
Subject key identifier: FE:03:97:73:20:27:20:00:38:31:A4:BA:87:2E:D6:A3:DD:E3:E1:19
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial: 019A71B90CB37FA0A726F87052FED9B6B2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number: 1477
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: aUoleh1FCD6T5mgT1Q/NYTdbK43bjDto9BgOIg+tvC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0c:b3:7f:a0:a7:26:f8:70:52:fe:d9:b6:b2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=fe039773202720003831a4ba872ed6a3dde3e119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:0f:43:0a:d3:d3:cb:7d:b3:a0:d2:e3:9e:
4d:5c:25:4e:84:dd:90:46:2c:63:e7:48:85:41:a0:
17:d7:3f:fc:18:21:51:1f:30:34:cd:01:f9:85:32:
2c:71:35:37:3b:e3:51:16:c6:b6:8b:cc:54:f9:fc:
30:f3:8e:ab:59:50:5c:37:79:8b:6c:23:66:0b:c8:
ee:d9:11:d9:90:6d:9e:60:46:92:d3:61:c9:6f:05:
60:dc:b7:b9:b6:95:63:80:07:ae:e0:0a:23:4d:5a:
6a:33:75:32:28:30:51:44:7c:40:cc:50:08:da:e4:
31:26:3b:c9:05:13:26:d0:2f:fe:cb:0d:9a:09:26:
0b:13:25:6c:5f:df:b5:c4:44:76:cf:4a:9d:07:d0:
1e:37:29:f0:c9:24:ee:cd:a3:a7:be:52:77:bf:fd:
ed:49:51:77:f6:c3:a5:e4:ac:ce:d8:7d:4d:8f:41:
37:c1:a9:a6:ef:50:5d:97:42:12:70:f4:a2:04:11:
bf:27:a8:46:c3:2a:8d:a2:b7:9b:5d:4d:89:0d:b8:
65:58:2b:73:3b:0e:13:f2:68:13:49:9a:6b:ae:11:
ae:17:9f:90:ed:5e:7e:b5:e4:39:f4:fb:79:b5:7d:
49:e6:45:a6:02:86:6c:10:ed:6f:db:0f:6d:d6:0b:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:97:73:20:27:20:00:38:31:A4:BA:87:2E:D6:A3:DD:E3:E1:19
X509v3 Authority Key Identifier:
keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6b:ab:cc:8f:c8:9b:a5:74:28:80:f3:1d:ea:57:b0:72:80:
82:db:36:e1:e3:07:95:01:af:50:f3:2e:78:b0:29:6a:32:4f:
cb:3c:74:7c:78:53:b3:59:1b:bc:d9:2a:d4:2d:95:5b:c5:81:
44:49:e7:98:35:58:9e:2a:be:ff:d8:ed:c6:8d:d7:b9:93:e5:
59:8e:be:b4:4e:64:f9:8c:77:a2:8b:0f:7d:af:e6:a5:a0:70:
00:11:23:da:92:58:43:d2:99:b5:18:22:41:2e:97:ab:c4:f1:
78:f9:a8:c0:ca:77:e3:f5:bc:2a:c1:27:b9:2c:60:36:9c:4f:
84:b4:b5:7a:10:72:fb:f9:83:aa:7e:20:49:a7:c8:55:38:d6:
ba:72:ea:d9:2f:75:d4:eb:1b:8b:78:19:b6:f4:07:3b:b0:4f:
35:77:19:df:33:7c:b3:6f:26:7b:84:03:5e:d3:66:ea:85:4c:
f2:90:da:b5:4a:8c:9a:98:ea:39:5a:81:2d:57:cd:77:1c:d4:
ea:f8:d2:cf:06:84:65:b6:67:66:10:71:7b:5e:44:50:86:54:
c8:b1:4d:f8:9d:55:e1:e0:a2:37:ae:8a:78:e9:5d:a4:a0:ce:
21:e0:fd:00:a1:1a:1d:82:09:19:ca:df:be:af:ff:ba:47:f1:
32:de:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:51 2025 by rpki-client