Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: Wcm4yhmFYP/WdYYzaAX3KURcLRwFgRPA/Ux+PrDDZY8=
Subject key identifier: 17:45:A2:FF:29:DB:63:26:DF:C8:47:1D:DA:38:B5:2F:55:9D:AD:A2
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 019A51F57ADF2A6F20754276B79A8626D61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 03:00:33 +0000
Manifest this update: Wed 05 Nov 2025 03:00:33 +0000
Manifest next update: Thu 06 Nov 2025 03:00:33 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: Xv925Ji5Nk93WpFZHbMqKE2AP2SnwTcPYiNERlM02hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:7a:df:2a:6f:20:75:42:76:b7:9a:86:26:d6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Nov 5 03:00:33 2025 GMT
Not After : Nov 6 03:00:33 2025 GMT
Subject: CN=1745a2ff29db6326dfc8471dda38b52f559dada2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:a9:8c:e6:2b:a0:8d:f0:a7:3e:e4:b4:10:
f6:0d:f9:0e:4e:b7:1b:b2:56:ec:44:da:a1:af:2d:
d6:42:50:0f:82:5e:68:5b:c3:5c:da:16:ce:4c:45:
8e:5a:f6:4b:27:7e:3a:8f:35:91:1c:01:14:c7:3a:
df:74:8b:3b:b5:f7:ec:f5:00:19:bd:bd:ad:01:bd:
31:50:6d:48:8b:6b:69:82:e8:8c:39:10:65:2d:ee:
4d:5b:f0:d2:a2:b3:f2:f8:33:5c:c3:76:7c:a4:bf:
63:36:a1:b4:61:1c:92:73:48:ff:52:e1:e0:06:c4:
aa:42:84:8c:7f:df:d3:1f:24:38:5a:4b:cc:5a:37:
e5:55:64:18:9e:17:45:f3:51:1a:9c:b0:85:dc:10:
e4:c0:f0:0e:a4:9c:ad:f6:cc:e3:1f:32:93:d4:22:
ed:0a:b9:20:7b:59:b4:3f:1a:30:fb:25:d3:81:b4:
6b:9a:96:65:74:06:25:cf:1e:66:c1:80:d3:e7:14:
f1:10:6b:31:a8:26:e0:1a:da:66:fb:16:29:f3:0f:
57:a1:73:29:6e:da:d5:12:dc:ea:ad:51:98:68:77:
33:4e:9a:b4:9f:34:70:20:06:7e:3b:52:71:61:e7:
2b:5d:19:87:d7:1e:23:07:be:70:ed:37:59:68:4b:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:45:A2:FF:29:DB:63:26:DF:C8:47:1D:DA:38:B5:2F:55:9D:AD:A2
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5a:a2:b0:22:24:35:5e:c6:fd:56:c0:33:25:d1:aa:65:f3:
66:01:2a:85:ab:93:ac:22:93:6c:92:3e:73:4e:6c:50:23:e3:
94:98:c3:98:8c:2f:d7:d5:e3:2c:95:2c:98:7b:bc:dd:f0:02:
92:08:a9:ad:f8:fb:7d:5e:9a:25:4b:db:87:d6:7e:8e:b4:1a:
9d:5a:e1:e9:ad:7f:85:d7:aa:50:59:c0:38:bb:b7:84:8e:25:
7d:17:69:f0:08:75:10:a9:78:8c:30:8f:c0:d7:ad:40:0c:34:
ce:1e:38:0f:1a:f2:a6:25:e4:7d:8d:3a:87:7b:3b:6c:fa:be:
55:ef:09:53:55:d9:89:77:d5:f9:84:f7:ee:ec:e9:f7:82:5c:
b3:55:ab:1f:b0:a3:32:34:0b:0d:19:9a:a7:dc:17:a8:f2:f6:
10:5b:4e:c2:ae:9d:dc:7d:c5:e4:1c:64:d9:ff:99:d2:c2:61:
11:ad:b0:20:92:16:e2:43:d4:d2:ea:44:b3:65:2e:68:3d:a3:
4b:3a:44:4c:20:54:14:47:2f:e0:52:f1:3d:86:7f:fb:27:fd:
52:63:45:b0:21:48:95:10:ba:b3:55:ce:53:2c:54:fc:d9:3d:
f3:33:25:bf:46:75:dc:cb:8f:56:81:97:91:0e:2c:e5:58:28:
36:eb:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:38:56 2025 by rpki-client