Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
File: xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json)
Hash identifier: erThavVyuqvJS02oo3Qw4O7rzIzO5Db5U5cJmaJAmOQ=
Subject key identifier: C2:1E:0C:A5:B1:62:8C:42:FF:15:27:C7:6A:D4:51:EB:28:E9:53:52
Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
Certificate issuer: /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Certificate serial: 019A71136603DB57A47EF4F38E9D27A0759C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
Manifest number: 103E
Signing time: Tue 11 Nov 2025 04:01:27 +0000
Manifest this update: Tue 11 Nov 2025 04:01:27 +0000
Manifest next update: Wed 12 Nov 2025 04:01:27 +0000
Files and hashes: 1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: n5Twj8xuAeT/B/Qc/M7Y1/XmE826bPgZgNCd9Qg0tbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:66:03:db:57:a4:7e:f4:f3:8e:9d:27:a0:75:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Validity
Not Before: Nov 11 04:01:27 2025 GMT
Not After : Nov 12 04:01:27 2025 GMT
Subject: CN=c21e0ca5b1628c42ff1527c76ad451eb28e95352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:8a:5f:cd:a5:58:ae:d8:f5:d1:20:d5:f5:
73:5a:0c:74:ff:e0:1b:92:87:56:04:53:8f:ed:f9:
a9:e0:7e:2c:47:22:50:3e:e7:c4:fd:4d:d8:38:0c:
6a:41:82:57:6d:32:1d:04:35:80:c8:5b:d0:03:9d:
c3:f4:7b:7f:a3:44:16:b0:73:4a:21:8c:24:8c:03:
fd:a2:2f:0f:82:32:ba:b5:d8:53:e6:02:06:09:16:
1d:71:f6:59:aa:a5:24:23:f8:ef:75:59:73:0c:f3:
c3:89:71:34:0a:b9:7f:32:36:fc:a3:d8:2c:7f:8a:
57:15:cd:d1:ac:d5:19:aa:e6:76:cc:a2:ec:6b:cb:
bf:e1:ed:ec:9a:d2:a1:80:1c:f2:cb:de:4c:0a:1d:
a5:2f:a1:a3:a7:b6:46:cd:4e:2a:45:7f:0a:b6:1f:
15:d5:46:5e:24:e8:a5:cd:03:27:9e:54:7c:55:a0:
2d:ae:2c:e7:1c:0f:51:6b:38:d7:37:b2:18:ef:26:
d1:d6:97:02:89:34:3b:5a:c3:52:93:8b:12:8a:b9:
83:8e:3d:db:73:d6:87:39:87:f2:0c:58:b7:96:0a:
c1:e5:c7:b6:5f:60:08:d3:c3:85:68:82:5b:ad:9b:
19:ef:91:56:f8:1c:96:67:18:67:d8:d8:1f:ed:38:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1E:0C:A5:B1:62:8C:42:FF:15:27:C7:6A:D4:51:EB:28:E9:53:52
X509v3 Authority Key Identifier:
keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8f:bd:cc:30:a8:bb:52:49:06:e4:71:ba:db:da:d3:87:4c:
b1:68:63:c4:e7:ee:da:ea:4e:cc:72:a9:29:e7:d8:de:c0:ab:
9e:4b:84:e0:67:a5:30:48:79:f3:b6:b9:f9:47:d8:1e:5e:28:
5d:75:27:46:48:db:80:38:0c:2d:45:34:b6:05:86:68:e7:d2:
2f:bb:8e:dd:78:cb:28:b5:4c:c7:66:48:1e:e3:99:fc:bf:48:
27:68:51:64:0c:b9:5a:ce:2b:7e:de:b1:38:6b:6c:01:f7:80:
40:ad:4b:78:04:b3:9e:a4:67:70:83:de:48:a1:25:72:c1:e2:
a8:26:de:df:7c:15:03:f3:a6:d2:59:c1:02:65:d4:79:3b:5d:
60:bd:ee:16:f9:61:af:63:9a:1d:d5:f3:7f:f2:b3:b8:ce:e7:
b4:56:c4:2c:94:09:2d:21:49:cc:b7:2e:af:5a:7a:9f:62:36:
ce:7a:65:c2:a1:ce:4f:70:dc:7d:06:c1:53:3b:6b:12:ec:09:
94:ad:26:95:75:0f:d4:3b:90:b4:70:22:a6:64:3b:19:3e:e1:
1a:77:0b:74:2e:e9:e9:58:ab:00:65:f6:6c:d6:c2:28:e1:7f:
b1:c3:15:b2:e8:2a:73:d7:37:65:02:d2:e6:13:52:b9:b1:89:
60:c7:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:09 2025 by rpki-client