Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: 1lmstlRrCWxAYDN4dD8QcHC9w2wp3T5x7mdwOW9/1js=
Subject key identifier: 2C:E6:84:DC:62:27:FD:F9:D2:E4:32:7F:0C:02:9E:41:EC:BF:D5:B0
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 019A722655F9F5A1997F1DF651F2D706060B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 0ECF
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: wUf9428VCqSgrG0IYwiyYLPnko+qUD0u/cknAI7cQ/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:55:f9:f5:a1:99:7f:1d:f6:51:f2:d7:06:06:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=2ce684dc6227fdf9d2e4327f0c029e41ecbfd5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:e6:00:cf:33:b2:57:4b:85:cb:e8:70:a5:
57:1c:e9:3e:fb:d3:b9:8d:6c:39:6d:34:c5:13:6a:
b5:9a:12:46:52:2e:42:dc:a4:8f:c0:dd:8d:c9:f4:
f5:29:46:f4:58:23:d3:1e:59:ea:f9:a5:3d:d1:10:
97:aa:50:cd:51:3c:e6:7b:4b:7b:26:c3:f4:90:d4:
d7:4c:e0:03:30:5e:e0:d1:88:77:92:00:52:af:b6:
4d:f4:94:ad:a7:b8:38:b1:cc:a8:2f:aa:f6:48:9c:
58:14:4c:89:34:71:dc:c2:d5:c1:69:49:9b:2b:a9:
fa:18:b1:64:ee:ca:b3:f7:d3:46:2c:07:29:d5:64:
02:c0:cc:8e:75:df:a3:b1:03:89:a4:3f:75:dd:58:
42:39:0b:09:a0:16:25:b9:7a:3b:c2:0b:a2:b0:f6:
36:0d:2c:cd:77:d7:06:cb:08:61:4b:ff:a3:03:80:
92:65:df:02:44:08:44:0d:11:b0:13:72:b7:98:fa:
bf:3c:b9:49:0e:56:c8:cd:d3:7d:1a:22:a9:7f:b9:
51:a6:76:21:32:a9:8e:36:a7:8a:d7:bf:0b:c0:eb:
57:6f:e9:71:72:4d:59:15:49:5c:88:1b:c9:44:da:
56:1b:4a:85:0d:6a:00:3d:d1:db:15:52:fb:40:83:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E6:84:DC:62:27:FD:F9:D2:E4:32:7F:0C:02:9E:41:EC:BF:D5:B0
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:81:21:1a:1f:b7:2f:c5:8d:a1:40:87:bb:fd:90:20:d4:13:
15:d6:fa:74:66:33:e5:d8:d0:d9:ff:78:70:17:e9:35:4a:2e:
e3:fe:6a:49:f7:4d:aa:e8:4b:a7:53:cc:e4:c4:03:5d:02:42:
cc:70:1f:86:cf:fa:c2:01:e3:d9:44:9d:cd:e3:1a:8d:a0:18:
01:71:24:72:48:2c:91:74:ee:d9:5c:ae:77:11:6b:15:69:28:
5a:82:c1:21:94:3d:3f:fa:15:98:ca:7e:23:f2:00:12:b5:2e:
3c:eb:9f:79:11:20:3a:3f:70:2a:4a:df:b7:a3:c0:f1:ef:78:
72:12:e4:84:6d:fc:a7:fc:1c:04:1d:55:d5:1b:09:c6:84:eb:
8b:f0:5b:07:b0:fa:9c:52:a4:6b:41:2f:03:8d:c5:ed:22:80:
60:73:d6:04:dd:09:65:51:36:68:be:88:1d:65:e7:4d:5f:1c:
3f:02:49:74:c8:d1:d1:1b:30:64:b6:ec:c9:54:99:06:b4:08:
4c:48:1b:f6:5a:db:a0:0d:4d:a9:77:60:3c:15:3d:78:f4:fa:
ec:e6:66:19:66:60:c4:0f:bb:ff:fa:33:38:2c:12:70:2b:29:
59:da:02:45:d4:08:4a:78:23:59:09:93:ba:7d:b8:13:0e:f1:
89:82:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:35 2025 by rpki-client