Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
File: xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft (raw, json)
Hash identifier: qNvin2udURhTgSvd2NBgGIWbLaJzCxUw79J0/Ay+6+k=
Subject key identifier: C6:D0:69:FF:C0:DD:42:59:B5:43:0C:A2:D2:81:3D:99:F1:10:BA:35
Authority key identifier: C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
Certificate issuer: /CN=c596785476efbae77f961d23057057fa036fb27f
Certificate serial: 019A4DE1B9F28CD2F3D129EF7A96F47D7489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
Manifest number: 15B8
Signing time: Tue 04 Nov 2025 08:00:30 +0000
Manifest this update: Tue 04 Nov 2025 08:00:30 +0000
Manifest next update: Wed 05 Nov 2025 08:00:30 +0000
Files and hashes: 1: xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl (hash: xTcgSN3N27qpEkDg5P/e/ZHSZ/2P8+DLS4iR8sblSXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b9:f2:8c:d2:f3:d1:29:ef:7a:96:f4:7d:74:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c596785476efbae77f961d23057057fa036fb27f
Validity
Not Before: Nov 4 08:00:30 2025 GMT
Not After : Nov 5 08:00:30 2025 GMT
Subject: CN=c6d069ffc0dd4259b5430ca2d2813d99f110ba35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:da:2d:e6:d8:f4:3b:0b:1f:5b:d4:dc:75:
95:be:4a:58:2f:82:23:28:e9:1c:8e:a4:11:3d:91:
52:fd:c9:9e:85:62:95:0b:b8:e2:cf:65:95:39:f8:
80:63:fb:30:e5:f9:e9:33:69:37:52:9f:64:31:50:
35:75:33:e0:2c:6d:41:70:76:72:71:03:23:a1:1d:
89:f1:6d:f0:75:2a:80:4e:fc:5b:1e:31:40:53:be:
fb:34:13:67:21:10:33:a0:30:2c:23:ca:0d:7d:f0:
6c:31:a4:ba:53:f7:62:ca:c6:d0:ea:35:df:1a:67:
2c:83:59:39:d3:c8:f8:ef:1a:50:2c:58:cd:37:4b:
c6:a9:49:61:bc:82:a2:a6:c4:ab:a0:ee:5c:41:b7:
9e:c5:70:f0:36:77:8b:b3:bd:f3:86:f9:d9:d3:2b:
02:7c:2d:f4:0e:44:8f:10:38:24:f5:4c:c9:80:e6:
40:4b:1a:c3:00:28:83:d0:a1:78:2b:90:36:ba:38:
0e:3a:f0:1b:69:9d:33:61:b2:7b:fb:04:31:9d:48:
d0:07:75:30:6f:8f:2d:8b:21:74:d5:f0:20:ae:4e:
e4:2b:2f:9b:3e:9f:79:60:8a:bd:44:2a:d7:1e:53:
95:de:66:c5:06:77:38:52:3b:b6:72:f8:e1:76:74:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:69:FF:C0:DD:42:59:B5:43:0C:A2:D2:81:3D:99:F1:10:BA:35
X509v3 Authority Key Identifier:
keyid:C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b8:c5:9a:2d:31:65:f6:aa:ff:fe:c7:f3:5b:d7:f0:ff:0b:
fc:fd:d6:b8:8a:fe:72:ae:5d:a1:4f:c6:75:89:d2:05:da:7b:
08:fb:48:f2:e3:e6:f4:3c:c4:cb:4f:d3:0a:f5:b7:9f:bd:36:
a4:b1:59:75:49:29:f2:f1:c5:60:dd:85:1f:5a:55:e3:6e:fe:
4a:84:a6:d6:47:e0:15:07:e5:90:83:5d:e6:2d:c6:a9:2a:2b:
b8:e2:61:3b:14:c6:b2:93:1a:73:1a:59:72:dd:bc:9c:fb:6c:
64:4e:0f:f0:f5:1b:58:3b:33:8f:b0:6b:a7:d8:e3:82:22:7f:
02:ab:ab:14:7f:80:36:17:7a:1a:4f:cb:44:5e:ef:c3:b7:6b:
f2:68:21:d2:86:e8:8c:2f:8c:bd:84:dc:e9:02:c6:86:96:8a:
c1:67:77:7b:30:4d:b4:92:23:a5:2f:34:91:db:f9:19:2f:d7:
52:75:19:75:99:e1:97:bc:d9:25:38:47:26:31:00:3d:e2:5d:
eb:fa:6f:c6:a2:33:f7:7d:44:4d:2f:bb:b9:b9:c5:13:9d:5a:
17:25:3c:d7:01:03:39:04:95:9b:c2:43:e4:b1:5e:72:8a:37:
1a:4b:67:30:e6:74:b7:fc:55:97:29:d6:a5:f9:1c:16:dc:cd:
20:5e:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:46 2025 by rpki-client