Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: U3DqoRnTxus3QJFOYbqDB3ZDvYcDkz+8Fbt7flzMFpM=
Subject key identifier: 1F:7B:8C:4D:F9:C6:2B:8C:E8:D6:CB:49:9E:1F:F0:E2:20:75:1B:14
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 019A4DE1B56AF4340C4D5EC8B0D975B02ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 11FE
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: eBVB29pXr3a/iNctWkrDO7zEwF4WsMllelcpYwkAagM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b5:6a:f4:34:0c:4d:5e:c8:b0:d9:75:b0:2a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=1f7b8c4df9c62b8ce8d6cb499e1ff0e220751b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:5f:06:ea:b2:30:f5:37:59:e9:25:01:58:
c0:08:ee:4a:3c:be:1c:90:e4:f5:26:02:9d:1b:72:
9d:d5:aa:95:7a:2d:c7:e1:97:92:9f:ad:3d:e2:63:
59:a8:ef:bc:5d:8d:97:b8:1e:60:a3:9d:52:12:28:
d2:34:22:be:fd:87:94:b8:7f:eb:1e:0d:e3:08:16:
2e:8f:30:9b:02:b0:8a:05:e8:f9:bc:3d:4f:2f:6e:
f3:96:49:53:77:37:e5:b2:79:c5:37:9a:be:0c:7b:
46:df:ca:08:7a:e6:ec:79:78:16:c8:0c:a3:00:60:
56:a3:ec:f6:44:4b:36:31:c2:7f:4f:9e:39:f6:2c:
b8:0e:0a:1d:f9:5a:6e:13:9c:a2:82:4a:55:54:ae:
38:a3:94:4b:95:98:5d:54:09:a0:ef:c6:2f:9e:11:
45:ce:1d:06:11:7d:16:bc:4d:b8:b6:23:ec:52:e4:
17:be:51:be:00:74:bd:ee:fc:75:65:2b:77:23:3f:
12:83:da:66:a1:64:72:79:1a:90:39:5a:b3:dc:5d:
f8:00:d6:a8:10:05:81:e4:63:36:b1:18:64:9d:bc:
1a:06:83:43:fa:56:bb:a1:58:c3:a3:1b:33:67:8f:
5b:43:f0:fa:81:40:bd:79:b6:a8:5e:79:83:3c:8b:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7B:8C:4D:F9:C6:2B:8C:E8:D6:CB:49:9E:1F:F0:E2:20:75:1B:14
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:95:51:c2:58:83:8b:84:83:bc:63:3a:f0:e1:cd:40:01:e2:
aa:ad:3b:c9:c5:03:a5:a4:fd:40:b8:4e:44:4b:10:15:6a:3e:
fe:ce:8f:d0:8f:b6:95:7e:fa:cb:e1:11:42:ba:c3:2d:1f:7a:
6d:eb:ce:df:83:a8:d5:b9:0c:14:6a:fa:1c:d8:c7:b8:88:f8:
a2:1a:e4:8f:7b:ad:c8:06:88:4c:41:dc:d4:a6:6c:a4:ec:8e:
5d:d2:71:89:56:a1:10:cf:89:59:58:95:bd:bd:7b:9f:dc:29:
a3:85:1f:5f:5d:36:6a:5b:49:26:4c:1c:38:dd:be:9e:74:c3:
cf:a9:0e:ea:77:ba:41:41:70:5d:fc:9c:2d:54:ca:e9:4e:c7:
4c:20:1a:c9:5d:13:96:9f:ec:b3:bf:ce:47:5b:99:3e:ac:57:
ad:d4:f4:19:2d:9a:43:da:8a:11:fa:54:91:45:a6:d6:f4:34:
23:f5:80:75:97:fd:3f:58:7f:31:9b:78:8c:99:09:01:d0:f4:
8f:a9:32:05:4c:b4:f6:fa:4b:e6:bc:85:16:a0:19:51:a3:2e:
ae:c9:96:0c:3f:f2:0e:24:a6:08:31:7f:30:69:14:33:38:64:
ef:ce:d0:ec:71:32:a6:9e:27:54:0f:9d:bb:e3:4c:5b:b2:30:
e5:10:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:48 2025 by rpki-client