Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: TJe0KyzbW8SH+tQcDMjTcGOKhYO+z5mMTIByUQJP+wU=
Subject key identifier: 5E:BF:E4:57:91:24:27:EF:B5:14:84:3E:52:CB:25:E2:4F:31:29:97
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 019A4D05FBBB8EA524F69C76930636E2E5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 0A7F
Signing time: Tue 04 Nov 2025 04:00:28 +0000
Manifest this update: Tue 04 Nov 2025 04:00:28 +0000
Manifest next update: Wed 05 Nov 2025 04:00:28 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: wBbMSbwus/2wCpSuW1v1Qvis7wbtacpwS9xaR5sQMik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:fb:bb:8e:a5:24:f6:9c:76:93:06:36:e2:e5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Nov 4 04:00:28 2025 GMT
Not After : Nov 5 04:00:28 2025 GMT
Subject: CN=5ebfe457912427efb514843e52cb25e24f312997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:34:89:77:b6:86:8e:3c:b2:56:d2:57:0a:
8a:46:97:2e:db:85:ef:77:ba:4f:49:ff:fc:00:3c:
17:b6:d0:dd:bd:bb:25:ff:a7:f1:2b:70:40:65:cd:
95:35:62:88:17:bf:6e:7b:e9:ca:f9:89:e9:48:41:
f8:a8:6d:a9:86:3b:c7:a2:4d:61:51:91:a7:e3:37:
22:23:3a:f5:3c:3c:06:32:7a:70:33:b4:90:ef:c1:
75:57:c5:58:2f:db:05:71:68:3a:7d:04:be:bf:07:
aa:d8:a3:58:b7:8d:e4:aa:cb:95:f7:86:b2:6c:8c:
a2:05:b0:14:69:e5:7a:99:d4:83:99:4d:b4:96:7e:
5b:26:e0:d4:3c:d7:4d:f0:de:56:00:76:4f:2b:6f:
75:bb:1a:53:75:30:44:6a:40:03:ed:fd:d9:71:c0:
7b:45:c3:c3:b2:f3:2d:5e:c0:5b:ce:c5:9a:78:66:
af:54:4d:1d:31:28:b9:c5:01:a2:51:1f:79:ba:a2:
a1:29:ad:0a:02:de:39:77:26:ef:32:02:6e:bc:99:
bd:59:47:c9:ce:5b:92:91:1f:e4:53:21:e0:8e:c3:
4e:4c:87:a9:d1:a1:8b:ce:2d:24:ff:ba:b2:30:6a:
28:3a:e6:c8:0a:a5:f4:09:5c:bd:af:89:f2:96:3f:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:E4:57:91:24:27:EF:B5:14:84:3E:52:CB:25:E2:4F:31:29:97
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1a:32:e8:cc:d4:e2:88:08:31:82:86:9f:bc:1f:b3:e2:f7:
05:7b:db:87:0a:3e:3b:09:63:21:97:54:22:3c:b7:47:82:5c:
5f:8c:e7:ca:85:4f:a0:73:08:6e:7c:22:0e:08:70:dd:7b:0a:
ee:73:a5:3c:56:0f:ab:fd:53:0a:91:e9:fe:a4:c9:f0:75:55:
cc:2c:36:8d:d6:d6:c9:3e:11:cd:45:4c:7f:25:b0:62:ce:07:
42:43:22:9b:0b:8f:01:ca:52:d3:d4:a1:e4:d2:e1:10:4b:ec:
1b:33:92:dc:09:ce:50:b2:7f:d7:d6:40:7d:64:7d:9c:60:4d:
e8:ee:c8:2d:62:a4:76:de:f9:fc:60:94:1d:4d:d9:f2:aa:5e:
f1:1f:9b:1c:4a:a4:e8:18:48:cb:a2:88:06:31:a7:23:b6:71:
53:a4:42:cf:74:b0:09:f6:56:2a:6a:a3:ae:44:b8:77:23:fc:
3a:90:e1:cc:ab:e2:be:7e:34:c2:13:56:38:e1:c1:91:f6:8a:
f1:30:38:cd:df:bf:54:f6:84:67:3a:30:6d:73:ba:02:23:13:
f2:ed:e7:7a:91:c1:da:23:00:d9:7d:83:ad:33:71:6c:fd:5e:
53:45:a4:94:ee:68:08:10:51:1f:b0:31:e0:64:45:b9:ad:93:
4e:d6:69:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:41 2025 by rpki-client