Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json)
Hash identifier: 1j0vb1ejhxtl71niriF16jyB0wgRzIp7kZCSyQBbwKI=
Subject key identifier: B2:B1:A3:35:87:7C:53:D5:90:DF:3B:53:33:38:B1:38:F1:C3:5F:2F
Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Certificate serial: 019A4F620FEAE9F6E3A46F9587C295B0F946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
Manifest number: 12F4
Signing time: Tue 04 Nov 2025 15:00:17 +0000
Manifest this update: Tue 04 Nov 2025 15:00:17 +0000
Manifest next update: Wed 05 Nov 2025 15:00:17 +0000
Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: BFNLbYtnYuBeYSoziNm0tRYtjQfK5YzgPMuHqATLVUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0f:ea:e9:f6:e3:a4:6f:95:87:c2:95:b0:f9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Validity
Not Before: Nov 4 15:00:17 2025 GMT
Not After : Nov 5 15:00:17 2025 GMT
Subject: CN=b2b1a335877c53d590df3b533338b138f1c35f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:af:8e:27:b8:da:88:2b:d4:f4:e3:4d:2f:
1f:b8:ed:4b:07:4d:c9:54:6c:63:d9:5c:fd:68:2a:
aa:e1:a8:64:70:ee:b2:5f:a3:33:51:b3:0f:0c:81:
2d:c4:4b:d2:05:9b:f0:16:dd:1d:80:82:ec:c4:4c:
16:4a:26:82:b1:0e:c5:03:01:1b:5d:50:83:5f:ee:
e6:d4:d8:b1:9c:38:c6:ec:29:48:ae:8a:13:36:75:
76:06:57:83:e8:77:44:b2:ad:6a:8e:02:68:0e:b4:
86:8f:05:1f:98:57:02:6e:2c:3b:4c:1d:dc:38:51:
27:53:38:f4:b7:bb:d2:13:07:98:71:22:db:f0:20:
95:b4:c4:f3:98:f5:4e:31:ee:d7:65:1e:d0:50:82:
82:19:c2:a8:34:59:5d:b6:5b:0f:11:14:1d:f2:b9:
b0:1f:d6:50:63:f3:75:82:ac:0d:11:63:43:f7:39:
6a:a5:2e:9e:10:22:d4:2f:06:f0:f0:06:93:78:24:
5e:5b:2f:6b:f5:4d:97:a9:8a:e4:94:f7:c5:9e:d9:
a2:fe:da:0f:12:f3:0c:a2:fa:01:0c:a8:4e:04:b9:
58:cf:0c:cf:4d:22:6b:67:60:64:08:32:ce:ba:9b:
54:6f:03:a6:a6:b7:4e:85:10:cb:5c:d3:fc:bf:a3:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B1:A3:35:87:7C:53:D5:90:DF:3B:53:33:38:B1:38:F1:C3:5F:2F
X509v3 Authority Key Identifier:
keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b4:0f:6a:88:14:17:39:a7:e1:31:ba:5c:3a:be:06:b3:f4:
9d:ed:f1:a9:c5:c9:28:0e:43:8f:81:24:e7:9a:c4:7b:c3:4d:
b8:92:b3:41:67:26:bc:2b:59:60:0d:32:81:78:70:75:7b:20:
5d:89:dc:31:d1:42:60:4e:a0:ba:d5:80:ea:be:f8:a1:a3:b5:
96:27:65:fe:fd:ca:52:77:f5:e5:dd:ce:60:8b:29:7e:ce:02:
82:23:6d:a1:51:ad:8b:ea:89:51:de:dc:44:0e:b5:af:bc:62:
16:7d:9b:5a:f0:c5:bb:7c:24:8d:8f:ed:f0:28:15:26:af:b8:
4a:1b:67:fb:9d:b0:cb:91:94:a3:c3:cf:ac:24:66:c5:39:9e:
ef:e9:65:0e:05:07:07:31:27:2d:a3:51:84:a8:05:32:73:1c:
95:5b:78:9f:cc:c7:8a:17:1b:1b:22:4f:f1:a0:46:ca:ec:f0:
e8:cf:e3:65:db:96:1e:f1:4b:a2:e4:ad:a6:e7:02:af:3c:5a:
ca:b6:70:33:5b:2e:24:de:12:b1:2c:4a:6a:25:85:83:a5:c0:
9d:43:6e:e6:95:ed:69:02:89:9d:21:62:fc:b2:0e:23:55:79:
3c:13:14:d0:fd:ab:64:f2:19:7a:a3:84:a2:bf:ff:9a:83:73:
0a:b7:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:28 2025 by rpki-client