Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier: YLKW9RnL8DroKjuTskp+hwWKXPT1BBe1XgVeafeeq9Q=
Subject key identifier: 21:71:7F:FE:75:27:8E:6D:5E:06:31:07:73:48:EB:30:D3:DC:C6:B3
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial: 019A725C7EBD53FE200FC96C85E61E46F3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number: 04F7
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: 8rkGHuZp/8yMWW6IbvU8N3oYhuhoqg0E5OYbqTp4ua4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7e:bd:53:fe:20:0f:c9:6c:85:e6:1e:46:f3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=21717ffe75278e6d5e0631077348eb30d3dcc6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:a7:9d:e7:74:77:5c:b3:18:f4:21:26:20:
cd:dd:fe:18:2b:ff:eb:51:b8:d3:f8:7a:df:1c:6e:
94:fb:0c:77:67:93:0c:7f:96:92:eb:b6:0f:77:b6:
01:3d:b1:94:15:4b:3c:77:63:26:c2:21:8a:ea:2e:
52:70:22:4a:4d:06:a1:d6:bd:6c:ab:5c:1b:6b:c9:
f6:21:cf:10:79:cb:68:88:a7:8a:49:b7:81:f8:6c:
8c:8a:d8:4b:7f:48:b4:69:d3:91:df:44:b7:db:15:
7b:47:57:cc:4e:e6:9c:e9:37:5d:a4:c4:2f:ff:22:
1c:4e:9d:83:05:17:0c:ab:be:ac:b4:70:57:0f:39:
98:b6:4a:87:b7:6b:c7:20:81:b7:bd:bc:1f:12:2d:
88:e5:35:2e:3f:b4:ed:65:41:5a:bf:e4:37:d4:fb:
46:5d:07:47:13:9c:b8:42:d2:af:78:3f:51:3a:9a:
ed:aa:df:44:1c:6d:9c:78:2e:2a:b6:6d:98:5a:c4:
2a:6b:df:c9:9f:f7:c0:60:bc:89:72:12:d1:c3:ad:
b2:5b:a2:e0:b9:33:3e:71:16:32:7e:ae:73:12:23:
70:5c:3f:c5:43:66:fe:ac:70:f7:4b:aa:08:65:9e:
c2:93:48:52:cb:69:30:f6:bf:30:15:d8:60:95:37:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:71:7F:FE:75:27:8E:6D:5E:06:31:07:73:48:EB:30:D3:DC:C6:B3
X509v3 Authority Key Identifier:
keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8f:75:8e:95:3f:4c:73:e9:27:ec:71:de:54:8f:11:06:17:
f9:77:5e:b1:04:06:93:ff:d9:d3:06:ee:6e:fe:a9:30:e7:f3:
29:29:50:44:73:c8:73:bc:93:b1:87:7d:c1:b6:2d:d5:cb:64:
11:ce:32:49:a9:08:a1:67:bd:52:9f:63:9c:77:58:94:ac:a8:
53:f7:e1:12:7c:ee:e2:d6:33:8f:e1:82:1b:31:c6:4b:c2:8a:
07:66:fb:18:8b:3d:56:82:5b:41:f7:5d:21:d8:1e:b7:94:68:
f3:e0:b3:f3:f0:99:6a:3b:86:bb:15:1a:6a:d2:01:7e:01:26:
78:20:35:81:bd:95:26:85:1d:dc:36:e2:a2:c9:f9:3e:a9:9a:
7d:40:a6:49:9a:f1:39:86:c9:e8:43:3b:80:1a:1f:c1:cb:f7:
de:a2:ef:da:ca:e4:0e:5d:2e:6f:99:81:eb:96:49:c6:5f:06:
cc:38:1a:fa:8d:ae:ad:eb:34:d8:6a:8b:af:eb:48:19:9e:0d:
9a:b7:0e:bd:cb:06:89:8f:76:3a:11:41:fd:e1:19:d4:3b:cb:
3a:59:9b:3f:cd:86:73:03:1c:00:54:a3:d6:5f:24:b5:c6:6b:
0f:86:4a:65:56:04:86:96:77:14:40:91:06:fa:04:08:ec:fd:
71:96:13:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:33 2025 by rpki-client