Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
File: xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json)
Hash identifier: rFyCiyt+V0J2L3Y2/yL+pdQhjBsoTbiaM9F/YaaRjfs=
Subject key identifier: 62:26:F9:F4:45:8C:FA:09:84:3D:B3:CE:E9:8B:FD:6C:43:8E:81:37
Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
Certificate issuer: /CN=c54a6558d6923be429d9389531adc1008795270b
Certificate serial: 019A4DAB1429A5D3AC338ED17224DF241649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
Manifest number: 0DEC
Signing time: Tue 04 Nov 2025 07:00:48 +0000
Manifest this update: Tue 04 Nov 2025 07:00:48 +0000
Manifest next update: Wed 05 Nov 2025 07:00:48 +0000
Files and hashes: 1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: HIEO08fStFx9NoUEalMI1X8LoCeAyzNGXikJ34bdvp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:14:29:a5:d3:ac:33:8e:d1:72:24:df:24:16:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54a6558d6923be429d9389531adc1008795270b
Validity
Not Before: Nov 4 07:00:48 2025 GMT
Not After : Nov 5 07:00:48 2025 GMT
Subject: CN=6226f9f4458cfa09843db3cee98bfd6c438e8137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:2c:e5:08:d2:ab:9a:58:81:d0:b4:5e:5c:
cc:51:65:be:f6:91:74:c1:ac:77:ed:76:dd:11:14:
f0:27:a9:e3:6d:9f:a4:d0:ce:c8:1c:12:f9:34:9c:
8f:14:52:c3:20:29:cd:2a:ef:57:a2:7d:14:b2:71:
f1:4d:d6:79:ff:7a:0b:ea:d3:f9:c2:d3:a1:d6:a1:
96:67:3e:c8:4b:8d:bb:15:33:f8:e2:e3:ac:79:a1:
fb:12:11:35:b8:10:8e:55:8e:34:e5:bb:74:88:fe:
5a:b8:71:b3:9f:89:c3:d1:9e:99:11:57:7e:5d:1f:
2b:6c:0d:82:99:00:10:14:05:8f:a2:60:47:1c:35:
0b:84:d5:99:5f:ba:3c:6a:45:94:31:8d:6a:2c:14:
24:0d:ac:49:4b:11:62:ff:a0:67:d3:75:54:65:da:
7f:dd:2f:dd:53:50:6a:99:d9:97:b8:b3:62:a0:ff:
6a:2f:49:61:84:2e:0a:62:2b:58:38:2a:f8:83:57:
cc:b4:4e:5c:43:69:e9:a3:7a:6a:a9:91:5d:f9:b6:
64:7e:c3:b4:ca:3f:98:c4:05:41:28:0b:4f:d3:3c:
3a:28:f8:fb:23:36:3c:12:55:e2:44:80:e8:12:14:
ab:30:b3:14:15:1c:31:0c:16:0d:0a:0e:fd:6d:f8:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:26:F9:F4:45:8C:FA:09:84:3D:B3:CE:E9:8B:FD:6C:43:8E:81:37
X509v3 Authority Key Identifier:
keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4a:89:8f:b3:14:40:f7:9f:3f:ec:f1:fb:d9:e5:e8:6e:55:
f7:2f:f0:25:70:14:fc:52:41:3c:00:81:31:b6:c9:cc:84:a4:
c1:44:c2:53:43:1a:e8:c2:bb:6f:59:ba:7a:9b:0f:c7:33:76:
4f:2d:98:6a:ad:7e:aa:03:f7:de:3b:fc:05:f3:f4:bf:70:3d:
c5:55:65:c2:97:a9:60:a0:d9:ac:78:d5:e5:3e:0a:36:9a:1d:
d3:b6:2a:ab:52:68:18:38:ca:a9:a2:0a:70:54:54:d4:2c:b1:
99:91:f8:95:07:40:b4:c5:79:df:9c:47:70:04:7c:9b:a3:a0:
42:20:b7:c6:93:43:b4:bf:12:ef:08:96:09:71:7d:3a:cf:42:
10:4c:b3:2b:a8:d5:b9:9e:34:8f:6c:e5:27:a7:27:03:0d:7a:
eb:40:34:2c:3c:6a:b1:f4:c1:f1:3e:6a:46:5f:c8:c4:53:7f:
eb:87:06:c2:1b:f9:48:4b:3f:95:f1:a5:58:a3:32:3b:fb:d4:
8b:a5:ec:fd:bb:78:aa:74:4a:7d:78:46:7b:dc:af:3c:b5:43:
27:1c:41:0d:2f:bd:e4:7d:ce:d7:31:7f:ad:0b:d5:76:56:9e:
34:bc:e8:4b:5e:ad:ff:b2:c6:f9:2c:43:97:bc:50:58:45:ac:
31:3f:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:25 2025 by rpki-client