Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: HYxUltqKFZxsROLvoMswExOdFOJbM+mwQwcm/usXSf4=
Subject key identifier: 2D:58:29:DB:4C:04:21:63:1E:F1:3E:CE:66:B4:C6:6D:15:25:14:00
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 019A4EF5FB75CD29AE720E32560623D9B818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0E6D
Signing time: Tue 04 Nov 2025 13:02:14 +0000
Manifest this update: Tue 04 Nov 2025 13:02:14 +0000
Manifest next update: Wed 05 Nov 2025 13:02:14 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: rjCj2b8Ql+tkaQx/+YD86qvnxyU/JEGBdhSFfKnuli4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:fb:75:cd:29:ae:72:0e:32:56:06:23:d9:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Nov 4 13:02:14 2025 GMT
Not After : Nov 5 13:02:14 2025 GMT
Subject: CN=2d5829db4c0421631ef13ece66b4c66d15251400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:74:4c:cb:3a:9c:59:53:4b:8a:da:c6:58:
e2:1e:18:a0:ac:43:b7:10:04:33:76:38:d3:a0:ad:
db:cd:8c:af:f6:dc:4c:8e:44:8a:31:c5:34:d0:ea:
01:f5:af:44:fc:f4:b8:9a:87:1e:ee:7f:54:89:30:
db:3a:5c:38:59:54:a2:7d:65:49:00:ab:33:d9:f5:
d7:5a:52:2e:59:77:29:e0:ee:a8:01:2c:65:f2:c1:
2e:ff:06:31:94:24:64:40:e0:29:9f:e0:68:07:4d:
2f:0e:84:2b:74:42:fa:e9:07:76:aa:e9:5b:b6:7d:
a7:3f:a7:5e:8a:8f:c2:46:29:c9:8d:31:50:92:aa:
bd:4e:80:ab:8b:42:99:60:6f:1d:f9:34:1b:14:84:
a9:f2:12:9e:9d:45:08:cc:f9:1e:f2:cb:bf:46:d8:
e5:7d:bd:eb:ca:88:0c:c0:e2:89:8a:2e:1b:00:76:
ec:ed:35:c3:cc:80:24:3f:0f:3d:f0:78:22:ec:a0:
cc:9a:a4:56:2c:b0:df:6c:22:77:ae:3a:70:07:dd:
fd:4f:00:0b:c2:bb:03:11:0f:19:f5:ba:13:1e:ba:
c7:fa:c4:d6:dd:1c:7e:69:f2:1f:b0:03:4d:5a:53:
35:34:b4:be:6d:2c:a7:bf:ff:d0:a3:c5:cc:06:33:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:29:DB:4C:04:21:63:1E:F1:3E:CE:66:B4:C6:6D:15:25:14:00
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d3:d8:06:e6:cc:b0:fb:e7:1e:9b:5c:d7:91:d8:ae:5b:3c:
07:05:e5:f3:75:98:95:0f:f5:65:eb:25:08:83:d6:5f:a0:78:
5f:66:25:b1:3e:37:60:d5:95:6a:c5:6b:c8:23:92:ab:61:f1:
09:13:c6:ae:a5:ef:54:f8:bd:a9:ba:4e:83:61:75:d5:77:30:
eb:45:7d:ef:74:f4:5b:01:fd:84:d8:93:84:fa:2a:b1:fb:93:
b6:59:ea:28:0e:73:41:62:5c:df:cc:74:b7:65:87:37:d7:1b:
94:6e:9c:1f:df:15:46:15:15:8d:0b:b7:78:0f:e0:32:0f:55:
02:0a:b0:30:1e:5b:f8:01:d0:e7:11:41:95:84:dc:21:09:2b:
f0:09:14:28:ab:32:f4:47:62:48:63:49:fd:11:37:cf:89:ab:
ed:d6:bf:77:27:fa:5d:76:89:62:0b:f3:e9:6c:75:80:66:64:
eb:b8:b9:ab:0b:5c:40:94:a7:c1:6b:9a:4a:8e:90:d2:5c:17:
90:c0:be:c8:63:65:87:c8:21:1b:6a:d7:fb:5d:23:29:7b:d0:
0a:aa:c9:01:39:2f:46:68:43:71:23:d1:eb:54:fc:5f:f8:72:
af:bb:59:ee:03:c9:ed:c1:c8:31:c0:09:07:ce:5e:c1:cc:33:
f6:32:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:09 2025 by rpki-client