Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: AEfi9TogmXQcb+Hubmmt/6eStyqqcL2LCW/VM8amQvw=
Subject key identifier: 87:57:F4:F7:6C:91:4B:19:C5:CC:D9:0C:09:9E:63:C9:CE:B3:17:AE
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 019A7225EB3FF7481E7FEB2968CA413CB96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: kDBevAc6LK+i+Ns11b1pqjKpBP+AVU/Xob9PmUxK1Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:eb:3f:f7:48:1e:7f:eb:29:68:ca:41:3c:b9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=8757f4f76c914b19c5ccd90c099e63c9ceb317ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:6f:8d:56:24:92:d7:6c:10:69:c4:23:86:
bf:7a:25:03:e0:58:e2:ee:5f:ef:c1:4a:9e:e5:87:
72:92:91:0c:41:5f:2b:71:8f:ff:b0:2f:bf:88:9f:
c7:e1:34:f3:6c:a2:96:35:d4:76:81:c3:b2:18:d4:
1c:a0:2f:48:f3:77:c9:39:e1:b7:27:f2:fa:82:cc:
5a:e5:40:91:ef:c9:15:cb:45:33:0a:8c:48:18:a1:
f6:a5:1a:74:4a:60:f4:0c:a0:71:d5:44:86:92:c6:
e0:11:81:ea:9e:94:13:fa:6c:62:bb:8d:7f:c3:ef:
bd:82:d4:6c:7b:64:6c:4c:b7:5b:57:f5:94:b2:2e:
fb:51:26:5e:56:6a:d5:c6:78:0e:62:82:cb:ea:12:
66:21:50:d2:81:05:ff:3d:8a:53:f3:aa:aa:2c:82:
fb:06:e7:35:18:6c:55:80:a3:95:fd:7e:b8:33:d5:
68:34:a5:25:8a:58:b3:4d:23:f4:1e:78:a0:a3:f2:
a6:76:6d:1d:9f:65:e2:2c:4b:51:21:2a:18:fe:aa:
89:ec:4b:e2:e8:ce:70:17:c2:b8:fe:33:68:ae:a6:
f6:1c:1f:7a:35:ea:03:37:7f:ce:c3:30:17:20:c9:
db:a6:4c:57:fb:b0:27:a8:c6:fc:84:a8:f2:45:11:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:57:F4:F7:6C:91:4B:19:C5:CC:D9:0C:09:9E:63:C9:CE:B3:17:AE
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8c:9d:42:dc:11:4c:b2:37:47:e2:4a:71:21:03:ef:d0:9a:
70:69:59:ae:cc:75:00:53:b5:0c:f1:fd:97:e2:d2:26:12:37:
8a:a4:38:0a:91:19:95:50:a7:e9:c2:bd:18:de:59:64:c8:ca:
9d:aa:1a:8d:ab:9a:a4:25:45:7b:8b:fb:21:d9:31:96:96:e7:
a1:94:96:ee:68:fa:ef:59:18:f3:ff:ec:2b:f0:56:e3:3f:dc:
ed:a8:02:1b:1b:35:8b:7e:fb:60:8d:01:5b:f3:15:81:03:2e:
2f:ce:4a:82:ae:90:0f:67:c3:9d:38:86:e7:8a:b4:89:a7:3b:
c5:5b:c8:18:3d:cf:67:71:19:fe:ce:93:a6:f5:c4:02:90:48:
99:ce:98:1a:bc:4c:c9:59:96:5c:75:45:68:27:44:e9:4a:96:
e5:be:f4:cc:18:c9:40:09:c7:42:9e:9a:b4:93:0d:4d:a8:92:
80:b3:c6:63:c8:72:78:9c:2c:3e:a9:81:52:cb:af:a4:5a:d8:
3e:d7:5c:b3:09:91:ed:bf:05:3b:ab:ca:ec:a2:99:fe:a8:57:
54:2b:e9:9f:92:0b:41:57:d2:15:0a:89:35:53:02:60:54:1d:
62:a7:e8:77:d0:58:89:03:16:fa:2c:7f:17:30:8e:45:64:93:
5f:12:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:07 2025 by rpki-client