Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: aK0mj8g41TZTvWAD2UyKsxUwmvRCfyuvWGUi3ZBw81w=
Subject key identifier: 84:C0:8C:54:51:47:80:2D:AE:FA:AF:DA:6A:08:94:7F:CD:6E:B1:E2
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 019A4EF480517B97650C237F57BEF461C294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 1707
Signing time: Tue 04 Nov 2025 13:00:37 +0000
Manifest this update: Tue 04 Nov 2025 13:00:37 +0000
Manifest next update: Wed 05 Nov 2025 13:00:37 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: cEgALKEaA2pxMwmnaLYU3ecuqvGtVqJoEbqNoEOwUsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:80:51:7b:97:65:0c:23:7f:57:be:f4:61:c2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Nov 4 13:00:37 2025 GMT
Not After : Nov 5 13:00:37 2025 GMT
Subject: CN=84c08c545147802daefaafda6a08947fcd6eb1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:12:af:78:3e:49:68:fd:3b:c4:bc:de:48:
e9:55:d2:4e:e5:d7:93:4c:fa:f9:ad:1d:f9:69:d4:
2d:c6:82:2c:c1:57:b1:47:7c:13:d2:d8:92:5a:35:
2e:67:f2:47:03:33:3a:20:98:ba:df:da:3d:d3:79:
34:46:26:39:bd:d1:8d:68:d3:a4:97:32:81:2f:cd:
d4:66:a4:ec:e8:b5:b3:98:ae:12:77:b4:8d:c8:33:
6d:b0:75:79:7d:0d:91:73:31:04:fd:11:f4:f0:86:
95:a1:f9:ae:3d:a2:d5:bb:5e:73:68:64:25:d5:f5:
e6:91:f1:1e:06:99:a7:da:cf:47:6a:c2:39:41:29:
b7:df:9a:7d:17:cc:ed:a9:ea:34:3e:5a:81:7d:5c:
ab:3e:34:83:12:3c:13:ca:f0:6b:11:2e:16:50:cb:
2f:5f:63:31:7a:e8:2a:b4:2b:67:b3:bb:fa:21:37:
67:b0:d7:26:d5:14:ab:1d:d8:a5:47:37:73:ec:46:
52:8d:c9:d6:52:bc:42:b5:60:6a:5b:b6:db:93:c9:
6b:b6:95:e7:c0:ad:61:25:d8:54:32:b9:bc:32:bb:
f2:be:be:3a:92:93:0b:30:45:af:61:26:08:6f:72:
66:b9:ce:7e:23:dc:a0:18:8c:83:2e:b7:f5:70:3a:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C0:8C:54:51:47:80:2D:AE:FA:AF:DA:6A:08:94:7F:CD:6E:B1:E2
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:fa:66:05:d3:07:b9:f4:4b:c1:91:f9:56:eb:b1:63:72:4f:
ce:c6:2e:47:c7:3f:49:08:3f:7f:eb:7a:d9:f4:5b:60:ec:f7:
69:76:92:07:9a:bf:59:b0:76:26:2f:d1:57:88:b9:1c:cb:b8:
68:1d:9b:a3:63:c1:13:ad:9f:e3:08:99:1d:f3:ec:96:d3:11:
32:c3:9a:91:d2:d9:b6:5a:4e:b7:aa:ad:a1:6c:90:e2:1b:e5:
42:17:b2:de:44:e7:ec:7f:28:9b:f7:eb:3a:3c:63:78:ff:ab:
57:06:61:f9:87:5e:e5:9b:0e:48:4e:23:39:b5:96:28:ca:6c:
56:6d:e7:09:a6:00:8f:d6:f4:5f:ed:ae:79:a7:ff:a3:dc:48:
80:45:b3:b5:89:a4:60:c9:23:61:02:41:71:54:e3:70:4e:9d:
26:4a:2a:1d:67:dd:6a:23:f4:b0:82:e3:92:9e:da:e4:6b:be:
0b:a9:b4:1f:6c:90:74:2d:25:ab:a2:30:55:60:ca:f2:6e:3e:
48:41:ba:f1:dd:cb:50:84:f0:7f:c3:74:6d:64:d4:f6:39:a6:
69:d3:4b:99:d9:a7:76:b7:5d:cb:30:93:f0:f9:aa:76:99:0e:
21:ec:63:b8:d0:1f:8e:c7:fe:45:f3:3f:0d:10:66:5a:c1:9a:
85:1e:9c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:36 2025 by rpki-client