Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: T5LwHHkNCGKTowS29gjwt2d4HkZQhSM5/P8fOvBJr+k=
Subject key identifier: 36:E2:6F:8E:30:E1:DE:58:B7:FB:66:CF:76:39:C8:C4:FE:B6:21:1B
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 019A4F62C4E6559DAE9B8375D2709BB44181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 0EBD
Signing time: Tue 04 Nov 2025 15:01:04 +0000
Manifest this update: Tue 04 Nov 2025 15:01:04 +0000
Manifest next update: Wed 05 Nov 2025 15:01:04 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: pm6ciNcNq0hf4T7SQv9ewImRzyROerDVZR1mG0OAewM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c4:e6:55:9d:ae:9b:83:75:d2:70:9b:b4:41:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Nov 4 15:01:04 2025 GMT
Not After : Nov 5 15:01:04 2025 GMT
Subject: CN=36e26f8e30e1de58b7fb66cf7639c8c4feb6211b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:5e:d0:f6:f4:95:12:a1:53:aa:4d:bc:1a:
1f:fa:70:03:2f:59:61:a3:38:2c:dd:dc:d8:95:c4:
66:ff:b6:6d:2e:ce:15:68:be:6a:b1:7c:8d:78:a9:
57:89:b8:dc:11:0d:66:d8:7f:a0:be:79:43:75:5f:
6c:09:c6:d2:f9:e8:39:35:3a:5b:bb:19:67:4e:bc:
08:44:bc:f0:3e:7f:a9:42:8d:c5:b7:2b:ad:b9:07:
92:22:59:95:43:ea:cc:8d:a6:d1:ba:7f:2b:ff:93:
9e:95:db:cd:b3:67:8e:20:a5:e0:95:d1:40:9a:b7:
83:14:d0:29:5b:87:03:bf:f7:83:28:1e:3d:9c:23:
b9:3e:a8:91:8d:ea:e6:b5:31:50:6b:8d:60:10:ec:
60:9b:13:79:01:6c:b0:09:b0:86:63:9e:ca:21:85:
1b:ed:35:3e:a2:0e:26:2a:a6:c0:8a:27:2d:1f:ad:
4d:42:a4:3f:fe:5a:82:95:27:cd:16:4d:c9:50:34:
9d:79:e3:f7:dc:26:a4:b0:e3:09:be:5b:5e:6c:20:
1a:54:62:00:b8:b9:33:1c:cf:ee:27:b3:5c:23:cd:
76:36:a8:33:b6:86:b0:04:69:45:c4:f2:5b:64:ac:
6c:ee:27:65:d5:6b:1a:2a:15:93:f4:26:44:88:2b:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E2:6F:8E:30:E1:DE:58:B7:FB:66:CF:76:39:C8:C4:FE:B6:21:1B
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:da:b1:54:0c:d1:6a:bb:8f:ff:36:37:44:3d:1a:e1:7d:c0:
c9:84:82:63:73:01:ab:f1:d7:70:e3:e8:e2:3f:68:19:d3:b7:
00:4e:82:c2:6c:dc:f2:75:f5:09:11:7c:88:40:a2:db:7d:b6:
6b:d6:3d:5e:69:45:f5:40:61:c9:5f:ea:a4:81:8a:bf:10:fe:
4e:cf:6b:99:2c:66:0e:95:70:cd:91:c9:a0:99:e0:70:b1:d6:
54:9e:fe:50:19:39:fe:3d:78:3f:c2:78:c3:fa:6a:9a:fd:54:
fc:84:d9:e4:15:3f:09:51:4f:00:98:80:6c:b3:be:9b:8c:68:
a0:11:10:05:50:cb:5b:1c:d8:6e:99:92:e3:55:18:0a:0e:54:
2f:b5:6c:d8:03:48:14:a6:73:c1:ae:c5:b2:f4:93:a9:91:b8:
4f:d6:e6:b9:dd:51:f0:e5:69:b7:00:5b:a7:0e:13:28:d7:2f:
c5:8b:98:c9:a3:94:08:46:b1:36:84:fe:f9:f4:85:29:6b:9f:
61:ab:e7:d7:df:aa:24:85:6d:0c:7a:98:b9:0b:62:32:c2:7a:
6e:3e:66:96:8a:3b:d7:6d:c8:9d:39:0f:2c:62:ec:4c:02:71:
fc:ca:2e:c0:55:d5:e8:29:35:3b:87:12:95:80:75:c4:43:99:
26:8a:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:38 2025 by rpki-client