Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier: q64McFNYpcHCQ+Z+KbqCMkxBddryfDKWg16A1QxwFNs=
Subject key identifier: 11:E9:BD:D1:DA:8F:AF:24:21:5C:E0:C2:0E:7F:A5:31:42:92:C3:BA
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial: 019A52D12A65D89B1F449176C5700E68718D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number: 0310
Signing time: Wed 05 Nov 2025 07:00:30 +0000
Manifest this update: Wed 05 Nov 2025 07:00:30 +0000
Manifest next update: Thu 06 Nov 2025 07:00:30 +0000
Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: pDfj5LVb6008ie9bbxFdC2KgNodrVs8CoODeaxW6SzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:2a:65:d8:9b:1f:44:91:76:c5:70:0e:68:71:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Validity
Not Before: Nov 5 07:00:30 2025 GMT
Not After : Nov 6 07:00:30 2025 GMT
Subject: CN=11e9bdd1da8faf24215ce0c20e7fa5314292c3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:3f:70:d7:6a:bd:07:cf:e6:f2:17:9f:62:
76:14:83:f8:08:ee:1c:a5:e1:b6:e0:47:eb:f3:91:
db:7b:e2:c4:4b:77:12:9c:52:c9:02:49:fc:ca:27:
ef:34:cd:35:28:72:7b:3a:23:ec:b6:60:98:42:7e:
3e:e1:85:c2:8c:8b:93:2c:94:77:42:4c:1f:a3:8c:
e0:6c:25:8a:a8:d2:d8:d4:af:55:23:1d:c4:23:67:
2a:84:a8:af:8c:6c:7e:53:1d:f9:e4:52:08:b6:f5:
4c:d8:68:c7:af:ba:64:5f:58:38:dd:a8:77:12:66:
06:3a:ea:a1:b5:8c:47:13:78:6e:1a:db:37:af:68:
dd:97:2d:63:47:07:4f:2e:59:0f:5b:b4:82:58:aa:
07:61:cf:28:82:28:0d:44:cd:23:ca:e6:f7:0c:3c:
08:d3:48:92:b7:4b:33:12:09:25:1e:b3:c0:d4:39:
d9:d5:29:56:25:7c:ed:5f:26:cd:71:cb:24:04:9c:
f2:b0:63:40:63:64:c7:c5:77:25:c4:e0:28:af:53:
f5:12:95:dc:55:c7:39:99:0a:92:e6:1d:bf:24:fb:
72:c0:16:e5:b2:44:ac:bf:10:31:e8:0d:f9:f6:56:
55:c7:ab:42:d6:0e:db:86:a8:30:46:de:2d:83:67:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E9:BD:D1:DA:8F:AF:24:21:5C:E0:C2:0E:7F:A5:31:42:92:C3:BA
X509v3 Authority Key Identifier:
keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b1:1e:31:c4:13:aa:24:ac:00:35:65:9e:3e:0d:af:cf:eb:
2a:a0:6d:23:47:eb:c6:e2:3d:57:23:0e:55:07:57:e4:21:c5:
66:7c:ab:f6:9d:8c:bb:30:69:41:c2:87:bd:fc:7f:48:96:27:
49:aa:94:fa:90:aa:eb:5d:34:bb:12:57:76:4e:48:a4:67:b7:
d2:43:ea:8c:11:b2:d2:17:df:32:18:15:65:b6:96:d7:9e:de:
b7:25:2d:65:a7:23:65:64:4e:52:0f:00:bf:13:b8:f5:6d:b4:
28:67:ac:ed:42:14:85:40:58:14:d6:e1:3e:00:72:32:36:dc:
e1:84:8b:4b:fd:b9:9b:2a:5c:82:3b:f7:27:50:3d:61:2a:63:
0a:49:25:db:01:b1:aa:06:53:41:de:c5:fb:f9:29:b6:7c:c0:
02:b1:79:96:73:99:4e:53:df:87:ed:20:7d:43:13:8f:18:bb:
5a:45:d1:38:f1:af:67:92:86:46:4f:d2:e7:95:a3:61:49:79:
ff:7b:e6:05:48:06:77:62:af:5c:c0:a6:94:00:b8:79:c9:21:
76:e0:c8:14:a7:da:0b:fc:e0:61:75:23:18:37:bc:a7:c7:d9:
84:3d:d7:2b:c5:3b:6a:8e:03:9d:47:b3:ff:d1:df:5c:01:00:
c7:17:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:11:41 2025 by rpki-client