Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: yfpoL35eEN0hEFngzXH8NPnaH6PRpxUvWldq26Z4xhg=
Subject key identifier: 9D:39:9E:AA:62:E9:C0:AE:D9:70:8E:37:A7:81:14:4F:D8:36:C2:9C
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 019A4D3D2C562EF1376837CC629BFB5ED231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 06DB
Signing time: Tue 04 Nov 2025 05:00:45 +0000
Manifest this update: Tue 04 Nov 2025 05:00:45 +0000
Manifest next update: Wed 05 Nov 2025 05:00:45 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: dWJwDIzQrFWs5aYSSvTzuoc2UocEe9Zj6WO/y/ikx4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2c:56:2e:f1:37:68:37:cc:62:9b:fb:5e:d2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Nov 4 05:00:45 2025 GMT
Not After : Nov 5 05:00:45 2025 GMT
Subject: CN=9d399eaa62e9c0aed9708e37a781144fd836c29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:14:8d:66:49:05:a4:3e:30:63:35:8e:ab:
40:ef:f6:58:2a:28:1b:41:0b:00:1d:91:0f:15:71:
8e:32:2e:31:0e:a6:e9:f0:10:62:0f:a1:ed:fb:b7:
a4:5a:a0:24:2e:b5:58:21:56:b8:63:ec:82:22:62:
3e:ed:0d:da:79:15:dd:be:95:2a:37:ff:88:93:ad:
1e:fd:0e:de:f8:fa:07:d3:ea:5d:b5:04:b2:79:ec:
f5:45:54:29:43:b6:f9:9c:46:91:ae:52:c8:b4:fd:
9d:bb:93:9c:5f:89:58:3f:2d:7c:aa:a6:be:d1:11:
a2:88:66:88:42:3c:52:29:ff:94:c4:94:6d:b4:d0:
a9:b0:c8:26:bf:99:c2:a3:de:4f:32:e9:fb:1f:14:
90:e4:7f:e0:01:31:c7:a5:49:ea:b3:6d:36:23:89:
56:bb:95:15:0b:a5:d5:c2:6c:f2:ae:ce:b1:72:99:
e9:e6:77:cc:bb:7d:0d:ed:3f:0b:09:ea:7a:fb:45:
76:dc:e5:f8:4b:0e:8f:1f:55:92:33:fa:2f:67:62:
22:d8:66:c1:e4:8f:7c:73:e3:9b:7a:2f:78:09:9f:
a1:0e:8b:1b:53:3e:80:9d:b1:4d:30:e6:69:03:54:
b1:be:10:c8:cb:ab:2a:31:fc:b8:0c:56:66:b9:c4:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:39:9E:AA:62:E9:C0:AE:D9:70:8E:37:A7:81:14:4F:D8:36:C2:9C
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:23:01:f4:46:0f:0f:47:4e:d3:b2:e3:c3:b5:5f:6a:cc:4e:
3a:56:e4:64:95:7b:f5:13:38:f4:4d:c3:aa:dd:f9:b3:64:ac:
da:d5:8c:cb:d3:74:0a:c3:24:6c:12:4c:f0:57:47:63:d0:39:
32:47:e9:f6:1d:69:7e:f0:be:36:8e:dd:9d:67:63:72:d1:73:
e8:25:4e:20:58:2e:3c:30:dd:fd:dc:1e:97:cd:32:80:ba:ca:
4c:4e:95:62:28:7f:62:f2:70:56:01:91:65:bc:6c:54:1d:59:
93:a4:52:df:a4:ff:33:b3:68:8d:45:35:20:7d:0b:c4:47:3f:
7c:81:38:01:84:cb:87:03:54:1f:ab:28:0d:e0:32:0a:57:7f:
7c:62:18:99:20:d8:b5:9e:ff:02:44:7e:4b:a8:4c:e4:d8:7e:
65:83:c9:8d:3c:09:2c:e7:74:88:c4:0c:78:76:eb:af:31:42:
d8:ec:37:cd:27:5c:ae:ac:61:ea:6e:17:b4:2c:27:40:6c:e4:
a1:a0:06:0d:a7:d2:d6:1e:b6:c6:d9:5a:a0:07:81:22:be:0c:
47:5b:f1:3a:88:b9:1a:ec:21:ea:e9:84:50:64:0c:81:11:87:
15:4d:de:fd:6a:b5:c6:8f:95:d8:61:2f:23:ae:a5:81:8b:b2:
a6:77:8f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:43 2025 by rpki-client