Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: GexO7XjxBKIWHJ6yqDdtI7lWjGsSIuKmIkdJ659v7ao=
Subject key identifier: 98:DE:C8:0B:17:4B:83:04:18:C9:F9:BC:E7:28:46:E6:AA:94:C7:C1
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 019A4D745F924AD3324AEE2B377BCB4BE463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 1646
Signing time: Tue 04 Nov 2025 06:01:03 +0000
Manifest this update: Tue 04 Nov 2025 06:01:03 +0000
Manifest next update: Wed 05 Nov 2025 06:01:03 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: JpA4m+kpZ1RIxqXZukrduRh4tobgqmx1IKTZiaI9tg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:5f:92:4a:d3:32:4a:ee:2b:37:7b:cb:4b:e4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Nov 4 06:01:03 2025 GMT
Not After : Nov 5 06:01:03 2025 GMT
Subject: CN=98dec80b174b830418c9f9bce72846e6aa94c7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:01:04:62:93:c0:04:6f:77:0a:0e:07:78:
6c:b8:92:55:c1:20:d0:4c:18:f3:20:a8:d1:f0:66:
2b:27:b9:db:c0:15:53:9e:e4:31:ad:13:ef:87:21:
9b:dc:14:12:d1:27:62:12:01:42:94:15:d5:03:15:
9d:36:70:94:66:ff:e2:f2:61:cf:23:d5:89:ab:3a:
8e:24:b7:d0:9c:94:64:e2:00:b4:fd:be:d4:31:c7:
52:8c:e9:43:99:b8:45:0d:b2:07:d7:7f:30:80:bb:
23:b4:61:29:64:71:e4:9e:e1:3e:12:ec:16:34:fa:
59:db:08:20:ee:ed:5c:99:63:20:da:e3:e8:bf:53:
22:b1:62:ea:2c:ef:fd:5a:8c:a7:4c:2d:4a:59:25:
ed:82:25:71:15:ab:78:26:43:f4:d2:ab:7e:09:8d:
83:d8:a5:d5:ab:83:7a:1a:73:b5:68:c7:e7:b8:96:
c7:ba:3b:e1:4c:db:df:e5:b9:af:83:20:2d:5e:66:
25:78:bd:74:6d:8d:80:fb:36:d5:a4:2f:67:c6:a9:
58:0c:a3:5a:2d:9d:04:44:0d:86:9b:68:c2:de:76:
6a:81:03:42:ef:51:c6:04:95:88:6d:19:41:4e:b0:
20:b7:44:66:c7:82:8f:01:e5:aa:d5:33:e0:14:12:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:C8:0B:17:4B:83:04:18:C9:F9:BC:E7:28:46:E6:AA:94:C7:C1
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b3:4c:4e:e2:7a:13:fe:14:db:38:c6:a7:e9:af:48:fd:1e:
06:81:48:f0:f7:07:64:d6:aa:bd:cc:99:aa:a2:7a:ee:66:d6:
e0:b4:7e:f0:b8:c4:22:4a:d0:d9:f7:2a:6f:76:68:ed:78:8b:
ac:b2:de:68:cc:dc:9b:f2:4a:c4:44:b2:e1:5a:e1:f4:9c:0a:
5d:04:18:37:fa:ed:50:a9:ac:72:9f:5b:38:24:a7:73:6b:9c:
cc:da:06:5d:8c:5f:85:d9:52:88:cd:7a:f5:fa:c4:79:5f:51:
6b:dc:ee:c5:11:e5:30:bd:2d:18:9b:c1:a8:2c:16:2c:00:1c:
8b:60:73:11:d3:8e:f0:59:e4:f2:6b:26:1d:3b:d9:cb:c5:33:
de:73:58:75:7a:dd:78:c3:e9:8b:4f:9b:6b:ab:f4:30:a9:68:
8c:11:67:4c:a2:9c:90:31:59:b0:0d:da:2f:94:5a:54:b8:65:
7a:64:36:58:9e:ef:99:e7:55:fb:a2:5a:02:2f:bb:0d:30:b6:
b6:92:6b:dd:e5:05:8f:d8:bd:26:16:67:60:c5:c7:e2:3f:51:
ae:b2:35:3c:96:ef:4a:50:9f:22:dc:1a:e1:ca:3f:00:0e:be:
9d:32:b3:f8:76:49:a8:f3:fc:1e:c6:7f:64:7e:9f:89:97:2a:
46:4a:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:56 2025 by rpki-client