Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: vzDE9gEPMZqzXNg3c2nfL4Ow9/iIR09/mh6wDFmHJT0=
Subject key identifier: AE:03:94:DF:CB:FA:E0:AB:00:00:5C:62:EC:E7:88:2D:EE:74:9A:3D
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 019A4DAB08D975FFABD8CF808F4117D714F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0B1E
Signing time: Tue 04 Nov 2025 07:00:45 +0000
Manifest this update: Tue 04 Nov 2025 07:00:45 +0000
Manifest next update: Wed 05 Nov 2025 07:00:45 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: YejQa8mHqC7ioo42nYvq5GpIEtgU1c7+M1b+4l2FF9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:08:d9:75:ff:ab:d8:cf:80:8f:41:17:d7:14:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Nov 4 07:00:45 2025 GMT
Not After : Nov 5 07:00:45 2025 GMT
Subject: CN=ae0394dfcbfae0ab00005c62ece7882dee749a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:3e:40:49:e6:15:68:bd:6f:22:5f:7b:0c:
b4:61:9b:46:7f:a6:ae:ec:e3:fe:27:bd:ca:90:a4:
f2:31:bc:51:ad:5e:0f:20:61:7a:52:fb:a3:24:f4:
b0:5a:ed:39:16:85:23:34:3c:8f:15:8e:e5:08:a6:
1a:52:9a:20:c2:14:b2:27:ac:6f:7f:49:f6:c9:68:
6b:a0:f7:de:25:bb:86:97:91:36:16:cc:f6:40:88:
f8:d6:82:9c:60:10:36:fc:0a:5b:d6:5e:a1:61:4c:
9f:e1:d0:c9:35:1b:ce:87:ae:ae:32:c9:b8:cc:b1:
08:7e:ba:53:85:c0:89:19:ac:6d:4b:bb:c2:f4:16:
8a:2c:27:39:27:d1:fd:d2:12:d7:8e:7e:a2:3a:70:
70:11:a1:09:95:f4:d0:0f:61:04:e9:fe:a4:19:0b:
24:68:6c:ed:8c:5a:27:f9:e1:ba:b3:9e:d3:65:59:
6f:1c:58:9d:33:89:f9:8f:7b:fe:64:b1:4f:ec:2d:
94:fe:f3:f9:39:99:bb:74:2e:04:91:fc:40:dd:aa:
ae:bd:bb:ad:b6:33:6f:6f:a5:57:d0:b8:b1:dc:7b:
4c:23:62:46:e8:56:07:68:42:05:70:e5:0f:b2:fb:
57:8a:7a:cf:e7:81:85:f4:29:24:b7:47:f4:db:4e:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:94:DF:CB:FA:E0:AB:00:00:5C:62:EC:E7:88:2D:EE:74:9A:3D
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:54:bb:ee:e3:65:70:fa:f3:cc:79:4f:41:74:97:5e:df:d3:
86:5d:d1:88:73:7d:7a:2e:d3:04:7b:5a:cb:ea:4b:73:44:86:
3e:4b:8f:1c:7d:6e:0b:f4:45:08:2d:26:8d:3e:89:a5:65:61:
1c:d1:15:c1:ad:97:42:87:84:47:c0:e1:f5:5d:e0:5e:7c:cc:
75:0b:6e:29:12:58:e8:b3:bc:e7:de:40:42:bc:22:a0:6a:ab:
80:00:a2:c4:09:50:08:da:fd:1f:27:69:38:3d:fd:5a:14:fd:
0b:a9:01:9a:75:f9:3e:a0:95:1e:7f:b2:c5:8c:55:fc:f8:a9:
e7:27:1b:98:53:94:05:1e:79:d8:ec:58:27:b3:b0:d8:1d:23:
31:19:30:05:f4:22:c4:0d:2c:10:01:a5:90:5d:5b:a3:4e:c4:
0b:43:85:67:14:21:97:f5:d0:91:42:a2:2d:c2:05:66:04:63:
98:3b:ef:6f:d1:47:6e:76:7e:32:83:3f:0b:b1:cb:2e:b8:60:
9f:d5:ca:d2:18:d0:81:7c:28:f8:a7:c4:fa:fb:ed:e0:95:3c:
19:35:eb:12:49:f9:e6:43:32:4f:ea:2d:bf:77:74:ef:12:48:
1e:d9:ff:6f:ab:9d:a4:7c:36:2b:93:d7:1b:94:d8:cf:90:9b:
d3:09:ad:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:52 2025 by rpki-client