Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier: 6syviFSTQAdYulIm3NpCLJFh5hLRn5a34oxpBFl08+8=
Subject key identifier: 33:84:EC:E0:5C:A4:43:4A:31:8C:26:FF:AA:C6:7F:4E:97:63:AE:9C
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial: 019A4D06BF13C27F439B1A619287C8DB216C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number: 1464
Signing time: Tue 04 Nov 2025 04:01:18 +0000
Manifest this update: Tue 04 Nov 2025 04:01:18 +0000
Manifest next update: Wed 05 Nov 2025 04:01:18 +0000
Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: UlVp+v1wkENVXc44LQSgwraCK0rTR2Hp5AMdai9QzLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:bf:13:c2:7f:43:9b:1a:61:92:87:c8:db:21:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Validity
Not Before: Nov 4 04:01:18 2025 GMT
Not After : Nov 5 04:01:18 2025 GMT
Subject: CN=3384ece05ca4434a318c26ffaac67f4e9763ae9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:6c:6f:25:82:b3:94:28:da:ff:ae:4f:4f:
2b:eb:31:38:3f:96:fd:df:5e:22:f3:ea:e9:6c:df:
77:0c:de:91:c3:ca:6d:f4:23:9d:55:4b:42:d1:01:
35:d4:5e:dd:e7:89:62:99:0a:88:6d:e6:0d:da:1f:
a7:69:0b:69:cb:4b:52:25:9a:6b:0b:aa:0c:0d:8f:
2d:e8:28:d2:e6:9e:ef:98:cf:e3:e5:b0:1d:6f:12:
b8:29:a5:8a:05:08:95:6c:e2:f6:8f:c8:7f:31:b8:
0f:16:43:6c:e9:d5:3d:bf:69:98:0f:13:76:56:13:
b8:5f:42:08:a2:0a:23:04:62:d6:c6:59:df:8a:11:
0f:73:b1:e5:74:de:e8:72:71:ae:98:b1:c3:7e:bd:
4b:6a:59:46:92:e9:fd:b2:f4:df:f4:8a:6d:f3:15:
c0:71:06:c7:b6:62:da:5d:e2:7a:fd:b9:58:83:88:
e7:64:f2:2e:76:e5:8f:5f:10:3b:2c:87:57:85:57:
b1:86:91:ac:45:33:e4:fd:17:d7:62:63:b4:6c:00:
8d:09:45:15:77:01:e1:a8:4f:f6:c3:e6:82:ed:d4:
71:84:47:ba:73:58:7d:f0:bd:a7:5f:8f:3a:a2:90:
f2:6e:d3:3d:47:f9:94:58:72:b1:bb:18:75:6b:5e:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:EC:E0:5C:A4:43:4A:31:8C:26:FF:AA:C6:7F:4E:97:63:AE:9C
X509v3 Authority Key Identifier:
keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b0:c4:08:63:f5:58:e2:c1:e6:a2:84:cf:24:7f:44:ae:3a:
95:d0:d0:e3:30:a4:2f:8b:24:87:6c:ec:2c:0b:7e:91:62:ca:
1f:f6:e0:e2:20:64:cb:fb:77:27:e1:a8:88:7b:9d:cd:39:00:
dc:79:d6:1b:0d:30:13:e1:c9:ca:ea:63:87:e8:64:2a:7a:e4:
51:4a:df:60:5f:74:77:f7:00:83:fb:40:ce:f8:f8:63:62:02:
1b:13:30:88:c0:e0:fb:28:c1:f8:26:f5:35:be:84:b8:5d:61:
77:44:0d:41:c6:b4:92:72:03:6e:e0:da:aa:08:52:1c:19:4e:
12:5e:e1:4c:48:22:10:91:14:68:85:6b:7c:ac:26:ec:4d:58:
17:2a:a7:3c:05:b7:15:58:37:9c:89:02:19:30:36:61:b5:07:
d3:12:63:3f:54:5e:fa:a5:23:cf:1d:8a:7f:37:86:d6:30:55:
53:f1:54:65:b8:91:bf:eb:07:1b:d4:01:27:f4:fc:5a:74:32:
4a:f1:cc:d6:dd:a4:93:10:35:0a:d1:8d:8b:14:50:44:67:f6:
7a:ce:40:be:11:85:38:b5:85:83:21:52:b7:b4:8e:80:bf:3f:
7a:0f:6a:4a:d2:97:81:e8:18:47:39:62:3b:97:35:51:08:dc:
3c:9a:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:00 2025 by rpki-client