Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: 7OXVHENEYB/cqqPfwdkyBfH5o2P/J7wcWNMdR9gyPGQ=
Subject key identifier: A2:28:60:36:61:C4:26:49:F9:11:46:1A:10:0F:8D:2C:6D:AF:5C:AD
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 019A4D0676AC5A4846E5681DE977655B2D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 0458
Signing time: Tue 04 Nov 2025 04:01:00 +0000
Manifest this update: Tue 04 Nov 2025 04:01:00 +0000
Manifest next update: Wed 05 Nov 2025 04:01:00 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: p5lk/JDpirWIIROaQiNJrdX+7LTtUjQJUXHdbKNfQz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:76:ac:5a:48:46:e5:68:1d:e9:77:65:5b:2d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: Nov 4 04:01:00 2025 GMT
Not After : Nov 5 04:01:00 2025 GMT
Subject: CN=a228603661c42649f911461a100f8d2c6daf5cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:7a:fe:f7:a5:29:35:c1:c9:a1:17:0a:97:
de:22:4d:d0:a0:a2:2b:0e:d9:99:29:fe:0e:47:a1:
f4:b8:f4:f0:0f:0f:37:6f:6c:f3:62:6d:97:f6:6d:
e7:c3:23:0f:a1:0a:3d:9c:b7:ad:66:e8:92:aa:fc:
7e:47:99:aa:32:53:81:ae:3f:7e:9e:a2:ae:9c:64:
06:8a:bc:47:55:8d:6d:a8:45:fa:0b:85:96:ad:7e:
a4:e8:84:0c:2d:ce:9c:57:51:ec:ce:1d:56:f7:26:
d0:0f:58:16:68:45:d1:71:63:5f:49:1f:46:7c:a7:
96:69:4a:5c:54:22:ef:cf:11:de:69:01:4d:52:16:
ea:e8:52:5b:cd:13:4c:7c:73:ea:bd:b3:66:2c:e0:
62:1c:ea:eb:6f:bb:b2:e2:bd:79:ef:43:83:d3:37:
e0:12:6e:a0:b9:41:09:4d:ee:89:12:64:f0:8a:99:
af:fb:47:13:f8:27:f8:91:6e:c7:d2:79:a7:72:12:
58:09:90:40:15:50:6b:7e:d0:a3:08:38:1f:14:51:
a7:39:17:19:ba:69:06:aa:5b:1f:a6:c9:95:f3:60:
bb:0c:27:e8:d9:34:59:30:63:0b:8c:29:03:d5:8f:
98:d9:2a:d1:5f:7a:ae:70:f7:01:dd:1c:cd:2e:28:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:28:60:36:61:C4:26:49:F9:11:46:1A:10:0F:8D:2C:6D:AF:5C:AD
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:de:70:b7:d7:ee:3b:35:54:c8:65:ef:6b:75:60:81:55:be:
13:20:5d:dc:61:c9:85:46:d5:83:80:c6:56:4d:41:84:6d:19:
3b:ca:ee:8d:8c:3c:38:7f:8e:84:8d:3a:03:31:1b:c3:ff:b9:
a6:44:23:5a:26:7c:c0:54:57:04:3a:e8:aa:80:f1:b7:f8:15:
45:a2:5f:d7:e7:44:7a:e7:37:b8:6e:2d:f5:fb:03:20:5d:b4:
38:65:28:72:c1:7a:27:06:20:15:97:ae:56:a3:44:79:9c:76:
98:66:99:45:12:94:d4:80:04:3d:03:e1:db:a6:90:20:03:04:
d8:8e:7a:66:59:a7:83:d0:a5:c9:09:23:bd:65:63:d7:1d:b4:
e9:c4:85:57:b7:00:15:e7:04:f9:6c:87:b1:20:3e:41:96:f7:
4b:8e:80:1a:72:7f:cb:e1:c5:90:52:49:ba:6e:c7:06:d8:34:
1a:6d:ca:16:9b:15:cf:d3:fd:ed:50:48:74:2e:44:26:a4:b5:
f0:4d:12:26:89:6f:0f:a9:85:a7:d6:da:7f:46:55:75:08:1f:
59:b1:39:3a:b4:fe:da:8b:02:e4:9e:40:08:c6:ec:4a:41:4b:
b5:d2:8a:67:7a:7e:89:1a:6a:43:4f:1c:be:ca:51:38:cf:6f:
19:67:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:31 2025 by rpki-client