Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
File: xDzur3eV-33zSLBLIn5QpJoaG3w.mft (raw, json)
Hash identifier: qOwzYUk4RIhaJw7YEqEk7/TcEcSSnm6Mv7ElJC/iIb0=
Subject key identifier: D8:82:44:09:D6:AA:1F:B5:D1:C2:0E:CC:8E:47:69:F0:C5:5B:C7:6A
Authority key identifier: C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
Certificate issuer: /CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Certificate serial: 019A4DE1EF36BE3988E5295268DB6D7DA281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
Manifest number: 1446
Signing time: Tue 04 Nov 2025 08:00:43 +0000
Manifest this update: Tue 04 Nov 2025 08:00:43 +0000
Manifest next update: Wed 05 Nov 2025 08:00:43 +0000
Files and hashes: 1: xDzur3eV-33zSLBLIn5QpJoaG3w.crl (hash: PUS2YTB1xBDDXAH2rhEJvnkl2tOgdHjcmOriKLGT/mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ef:36:be:39:88:e5:29:52:68:db:6d:7d:a2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Validity
Not Before: Nov 4 08:00:43 2025 GMT
Not After : Nov 5 08:00:43 2025 GMT
Subject: CN=d8824409d6aa1fb5d1c20ecc8e4769f0c55bc76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:0f:52:b1:06:08:79:a8:28:e3:c8:f8:c0:
0f:00:68:eb:3b:0e:15:48:03:fc:19:59:d5:e0:88:
54:e2:e9:5a:c6:87:12:1d:32:4b:39:65:23:cd:0a:
98:9a:5f:89:d7:31:fd:76:0f:b7:df:75:c7:25:7c:
6d:8a:60:96:54:72:ff:e9:57:1e:74:d7:96:7c:7b:
2c:f1:76:23:c8:9b:9f:5b:e3:b7:e3:ed:c9:6e:d7:
9b:c1:33:fb:e1:6e:03:8c:79:e1:51:15:0b:97:67:
a0:51:95:9e:37:00:72:e3:cc:81:e1:a8:cd:76:15:
3d:56:66:6e:19:f3:86:4d:20:cc:90:55:bb:e0:a5:
8b:42:f0:91:24:0a:d2:83:1f:7e:8b:f9:12:92:76:
c5:13:f9:26:a8:c2:37:41:59:ff:31:d3:0c:f6:3e:
a1:8f:43:cc:56:8c:88:dc:ed:58:64:e1:ad:c2:97:
87:c0:d9:1e:79:68:35:fb:43:18:78:70:7e:1d:4b:
a4:e0:5f:3a:f4:51:c7:fb:96:df:98:81:10:dc:56:
c5:41:82:b2:f4:dc:4f:34:9c:24:94:9b:26:ea:7f:
4d:60:56:c1:48:4c:29:b1:3f:6a:ea:08:6f:8f:58:
6a:44:61:eb:0f:39:76:9b:31:07:41:0f:67:81:3b:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:44:09:D6:AA:1F:B5:D1:C2:0E:CC:8E:47:69:F0:C5:5B:C7:6A
X509v3 Authority Key Identifier:
keyid:C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:56:0d:6f:49:cd:8e:47:a7:5c:a9:7d:d1:c7:55:ac:31:e9:
48:f8:ff:05:91:a7:0a:fc:b5:3f:41:5b:04:f6:ba:49:24:5e:
e3:94:6e:04:89:26:fa:0b:ac:0f:00:16:09:c8:f8:45:3f:22:
38:49:e1:48:20:b1:df:1d:ec:db:2b:90:2a:89:87:6c:1d:35:
8c:38:0d:09:e1:c8:c3:3e:e3:05:31:1d:c3:35:d7:ee:3f:9c:
8e:0d:bd:44:0c:87:42:cc:77:fd:96:8c:d7:7a:5b:06:f5:b1:
ac:59:d4:49:9a:0d:f5:c3:7c:d3:da:c5:97:4e:ce:1c:6d:cb:
6f:5f:3f:bb:14:cd:ef:40:01:01:97:39:68:1f:df:a3:6b:47:
84:03:8a:eb:11:e9:af:3f:18:9a:8d:ad:13:0e:12:14:ba:25:
04:4c:de:06:9b:1d:31:f8:1a:a3:89:3a:6a:e3:e1:53:eb:a2:
69:6d:46:5c:a2:d2:a0:74:ce:e1:9a:59:ca:86:33:06:d3:10:
1b:3e:54:0f:c2:9a:4b:bc:8d:85:39:86:03:a1:d8:e4:29:e8:
05:58:f8:db:61:40:b1:47:fe:57:f1:c6:86:8a:71:d5:30:6c:
ed:cf:2e:c8:ee:5d:fb:f5:76:4c:36:f4:50:66:04:41:0c:e3:
57:3f:f8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:12 2025 by rpki-client