Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
File: XJF3tPVOZX44dlbmc6-MDuCmCRc.mft (raw, json)
Hash identifier: qMQPLAC9AlBbAwaIBbeBliQ7u522i6p7iftI13N15E8=
Subject key identifier: 8C:0E:F9:5B:E3:04:09:9E:A7:0B:31:F9:01:A9:B2:85:AE:77:22:BA
Authority key identifier: 5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
Certificate issuer: /CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Certificate serial: 019A72263EAB9ACABF612CB2A3B16CA1270A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
Manifest number: 02C6
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: XJF3tPVOZX44dlbmc6-MDuCmCRc.crl (hash: wFeUSkmqm4sQiYRprbHqFqMttxlxZynjpeTZLjix3iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3e:ab:9a:ca:bf:61:2c:b2:a3:b1:6c:a1:27:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9177b4f54e657e387656e673af8c0ee0a60917
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=8c0ef95be304099ea70b31f901a9b285ae7722ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:b6:f5:d3:da:56:bc:4c:a7:0c:e0:29:7a:
a8:0c:e9:18:7a:b9:72:61:b3:fa:10:f6:17:a6:a3:
f9:c5:34:8b:71:43:76:19:52:a1:c7:56:81:66:df:
09:de:7a:2c:5e:b7:73:1f:05:c6:61:d5:21:76:33:
df:98:e3:30:1a:6d:dc:e5:ec:54:ec:00:1d:95:db:
c9:ae:e7:08:0c:8d:0e:ea:f5:62:34:fb:3a:da:46:
51:e2:00:9e:98:e9:9b:dd:6c:32:64:8d:69:64:73:
0b:65:ee:fd:34:33:d2:54:64:eb:96:92:f7:41:a6:
5a:32:06:66:6e:d0:83:e6:cc:98:d6:77:34:17:3b:
b5:42:70:b2:83:40:b5:c0:6a:4b:ff:06:52:54:8c:
1c:17:5a:70:4c:2a:7f:86:de:66:a5:1f:62:21:b6:
f2:f7:fe:82:e3:c2:35:a6:f1:ea:36:0a:a4:f5:2f:
97:5a:e4:88:28:0a:b0:01:18:13:49:94:0b:77:20:
f4:fa:bd:d6:cc:9e:60:f6:44:3c:cb:58:d7:fa:ae:
67:c7:a5:d5:90:e7:27:2c:c5:56:c1:f3:ef:4c:a7:
06:d4:ea:db:d3:1f:9d:a0:13:94:42:b5:3e:ad:ad:
e1:77:85:a4:81:fe:95:8d:71:79:1a:e8:98:6e:ca:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:F9:5B:E3:04:09:9E:A7:0B:31:F9:01:A9:B2:85:AE:77:22:BA
X509v3 Authority Key Identifier:
keyid:5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:62:62:49:c3:4a:e6:f3:26:31:39:1a:b2:e7:16:32:4f:ee:
00:f6:76:0c:cb:e7:0a:c8:8d:1b:41:17:8b:d4:af:07:5d:72:
f7:84:ae:a4:cd:0a:ba:0c:a9:bf:cc:e4:db:24:7e:68:a7:3c:
c8:f9:36:1e:2a:ea:10:d9:e0:61:5a:20:d0:f9:9a:a1:14:c6:
2c:7c:bc:9a:08:2e:ff:84:aa:b5:69:bc:da:17:b8:cf:82:94:
6d:22:be:58:02:f0:12:0b:5f:92:51:72:ba:fc:17:6d:f3:98:
9a:99:ec:40:18:20:ec:81:e2:5d:d9:98:89:ca:ba:e4:7d:55:
a7:08:c0:34:5b:3a:ee:50:25:2f:1b:64:78:af:53:d5:0a:91:
7d:88:27:e2:53:9e:94:61:73:9f:8a:df:36:4f:05:ee:e0:9e:
76:f0:3a:bb:83:b7:8f:06:8d:1c:3a:fc:03:11:00:41:e2:59:
87:48:86:20:c7:97:b3:84:0e:d4:79:ea:ee:c6:c5:0d:51:f1:
12:1f:ad:c4:ad:80:ad:92:b7:dd:81:68:37:1e:5e:37:de:72:
c8:d9:2d:23:ce:0b:bc:5d:23:28:16:91:e1:56:7d:a7:b1:7d:
b7:62:47:7f:90:5b:35:ca:ac:6d:2a:3d:20:56:60:ac:de:ec:
d1:eb:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:48 2025 by rpki-client