Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: wQUczWHEtgN5huWpRkQ6tNa3bxUhJ/JqURZSX9Ippko=
Subject key identifier: 2F:1A:C8:D8:6E:4C:EC:39:BF:93:EA:8F:67:27:F3:46:01:47:97:A2
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 019A4DAB18230D606980FC02B59F9C125D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 0706
Signing time: Tue 04 Nov 2025 07:00:49 +0000
Manifest this update: Tue 04 Nov 2025 07:00:49 +0000
Manifest next update: Wed 05 Nov 2025 07:00:49 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: KFwqg8Vhj1DX5YdMxbneqcS86uC2Ftu9mFW4eZ+96CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:18:23:0d:60:69:80:fc:02:b5:9f:9c:12:5d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: Nov 4 07:00:49 2025 GMT
Not After : Nov 5 07:00:49 2025 GMT
Subject: CN=2f1ac8d86e4cec39bf93ea8f6727f346014797a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:d5:5c:54:e2:7e:89:8b:5b:e1:ea:ec:36:
23:83:0c:ef:5c:a7:07:d7:ac:6d:aa:a4:79:42:95:
6f:67:c4:16:a0:0c:e3:74:bc:49:4b:39:a4:0f:85:
e4:23:94:ab:dd:23:b4:f2:d6:c0:49:66:9a:99:0c:
36:b7:85:34:ed:ca:0c:3f:7c:ad:83:d1:0c:af:2a:
9e:fd:38:1f:f7:ca:42:e1:ad:65:f5:84:99:9f:8c:
de:31:8c:95:31:77:54:22:17:b2:72:aa:fd:54:96:
b7:ee:e9:5b:37:e6:da:9d:18:57:58:3e:c8:26:ac:
35:09:83:ab:f3:72:10:b6:45:40:d2:47:bb:ef:24:
fb:29:bd:d2:71:df:bf:28:83:5d:ce:63:6a:ae:38:
6c:07:78:b4:f1:fe:cf:84:08:26:7f:23:b9:31:f5:
da:65:6b:de:4a:d9:f3:90:6c:af:cf:37:90:35:5c:
38:d5:4b:8b:6e:c5:1c:0c:ea:15:63:b7:15:9f:5f:
f2:3f:a4:39:40:c2:af:c6:3a:4b:05:6a:61:c3:98:
ed:b8:fd:51:8f:db:4a:23:9e:5f:0b:70:06:cd:8d:
2a:3a:58:f7:58:a0:19:84:12:81:9b:27:dc:3d:50:
4c:bb:9f:ce:88:b8:84:3f:16:11:d4:23:43:7a:26:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:C8:D8:6E:4C:EC:39:BF:93:EA:8F:67:27:F3:46:01:47:97:A2
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3a:5f:29:f3:24:1c:59:71:8e:18:bf:1a:ea:02:a6:46:d1:
82:6a:55:6a:b8:37:4c:b3:38:46:71:dc:09:bc:08:d5:95:c3:
32:97:88:5f:82:16:7a:c5:02:b8:74:0a:94:ac:cc:4f:2a:99:
11:4b:8f:d0:7a:9b:67:89:5c:8a:66:3b:12:c0:77:87:a4:51:
94:f8:e4:3c:bb:0f:ce:1b:1f:e9:16:8f:e1:f8:09:bb:c5:21:
9a:ab:84:65:5b:69:10:e9:c2:e5:23:37:53:29:8c:e1:6f:bc:
37:0d:da:fc:0d:d1:9b:9d:fd:29:b5:17:ba:45:45:31:e2:1e:
e3:75:0e:b4:bc:d7:f7:3b:88:de:e4:21:10:ea:18:ab:2c:b6:
32:ea:59:64:d7:6e:3c:cb:80:c0:dc:34:a7:97:bc:64:1c:c1:
cc:5a:df:47:03:ce:1d:e0:4d:5d:24:95:51:67:66:0f:1d:d6:
af:77:16:aa:ef:a3:ad:58:49:b5:37:61:4c:2c:53:d9:71:4d:
f1:e5:68:1c:c5:89:f2:fc:06:e8:88:5a:7a:56:5c:7e:fe:97:
19:db:63:b7:9f:98:bd:49:e3:c0:ef:dc:12:b1:41:f5:fc:4b:
8a:70:0f:a5:ad:5a:6f:b6:0b:a7:65:e6:66:07:1d:ec:11:a1:
7f:e0:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:46 2025 by rpki-client