Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier: QrGKqG6PbvvEeZaF/c7F0kWm2sg/KV7ONGVwFvmYEUY=
Subject key identifier: E0:EE:6A:58:05:FF:7F:18:5E:CE:AA:E7:1E:A7:4F:26:F1:38:02:04
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial: 019A4EF45D56E0192E9831557B8719E7E8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number: 0B6E
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: FKdlpjPVG2Bi1u4B5DUISP+vLHO8s0zmabgQM87Sl20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5d:56:e0:19:2e:98:31:55:7b:87:19:e7:e8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=e0ee6a5805ff7f185eceaae71ea74f26f1380204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:aa:0c:cf:6b:ac:4f:78:00:f1:88:ed:51:f7:
c6:a4:6b:41:d3:a6:f6:1a:f4:4f:a3:f3:c2:61:55:
4d:0b:eb:db:c8:d3:96:2f:43:2b:b3:51:ac:13:c6:
f6:7e:44:65:1a:ad:0a:47:a4:dc:d8:41:1c:ca:3f:
a6:27:bb:56:e9:d3:5b:3f:ac:c3:29:ee:a0:56:a4:
e6:c8:da:bd:18:77:d0:23:4f:8e:98:cd:54:a7:67:
f0:76:82:a3:45:5b:f7:3c:88:fa:42:6a:73:a1:9e:
d6:25:f7:5e:5e:8b:e0:97:68:72:4d:5f:25:1a:05:
1a:ce:e4:f3:45:97:0c:19:6b:ef:4d:89:e5:1a:67:
2b:f1:f6:8b:d4:ea:d8:34:4a:01:3e:46:03:49:e8:
43:68:14:31:21:a2:01:ac:74:55:c9:31:c0:b3:b0:
93:15:d1:25:7c:73:d9:80:29:41:1e:ee:80:3d:74:
36:7b:c9:4c:89:8a:ea:08:1a:d8:6a:61:a2:35:53:
f0:54:47:34:34:72:eb:50:b9:0b:df:a7:41:f8:fa:
98:7c:b8:23:c6:63:fe:b5:d4:9d:b7:71:9b:5a:3a:
8c:12:e3:ea:9f:f0:e9:0e:bc:71:73:7a:45:60:ac:
75:2d:95:81:82:46:a8:ff:64:bc:5e:18:af:6c:fd:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EE:6A:58:05:FF:7F:18:5E:CE:AA:E7:1E:A7:4F:26:F1:38:02:04
X509v3 Authority Key Identifier:
keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:51:57:db:81:c7:e6:1f:f8:f5:5c:c5:bc:fd:8c:32:6e:cc:
66:b4:b0:b1:8f:e9:a3:fc:ea:8a:3d:3c:7f:e1:26:3f:af:b5:
5d:54:ab:99:3d:a4:13:66:5f:c9:dd:e7:c1:f6:6a:0f:2e:a7:
ba:9b:44:80:26:66:1c:2f:9e:ae:77:79:d4:b5:61:59:0e:54:
ab:3c:19:0b:1a:df:df:37:31:0e:a4:55:d2:4f:39:26:40:0e:
84:d0:a9:55:74:01:05:2d:50:9e:3e:f3:d4:7b:6a:37:1f:fe:
f0:ff:38:a1:49:27:28:0e:22:c9:3c:11:04:b9:7d:a1:e8:67:
0b:71:dd:9c:88:89:2d:78:5d:1e:d8:ec:de:87:fd:cb:c9:f6:
14:19:a6:b0:3f:49:24:08:b3:0e:79:aa:c1:73:57:a6:98:3d:
28:37:e7:e8:f2:8f:d2:87:7b:eb:3b:d0:06:0f:4a:3b:1a:ce:
f8:a9:93:b6:c7:85:0a:69:8d:5b:71:78:03:29:6f:69:a1:26:
8b:b3:2e:35:cb:fb:65:dd:ee:f9:4e:03:a7:01:7c:bc:6a:3e:
0e:6f:96:2c:69:fe:12:70:07:dc:25:d8:ae:5c:53:8c:0e:2a:
05:67:13:df:22:7b:88:1d:3c:30:fd:4c:3a:4c:86:d6:cb:25:
37:7d:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:06 2025 by rpki-client