Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json)
Hash identifier: Q+n6S5sZ9gE8FSVOzc60/SL7B4jXuufNqhHQNBtU5JI=
Subject key identifier: A9:03:26:BA:90:4A:DE:AB:19:DE:D2:F9:30:22:18:EE:F0:A8:95:50
Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Certificate serial: 019A4DE1A1BFA050B629D6AFAFC5A060A62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 08:00:23 +0000
Manifest this update: Tue 04 Nov 2025 08:00:23 +0000
Manifest next update: Wed 05 Nov 2025 08:00:23 +0000
Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: oAkxEbvrdbmQZDuN2SEs1AGIItVJZ+529CFLXXf5eGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a1:bf:a0:50:b6:29:d6:af:af:c5:a0:60:a6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Validity
Not Before: Nov 4 08:00:23 2025 GMT
Not After : Nov 5 08:00:23 2025 GMT
Subject: CN=a90326ba904adeab19ded2f9302218eef0a89550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:c9:a7:45:3d:66:23:e0:c7:73:e5:e4:ff:
14:d6:c2:52:5a:45:a1:56:63:73:ab:11:9d:c8:3e:
88:e9:f9:a3:07:36:16:99:5b:da:76:48:b1:c2:dd:
b0:6f:a2:53:9a:9c:55:71:dc:cb:d1:78:22:7b:9e:
8b:58:63:ae:5e:e2:d5:ff:83:49:f0:15:89:49:af:
20:74:72:85:b6:c4:1b:89:85:e6:93:cb:04:c3:1d:
3a:a9:d2:2b:86:c5:b4:06:a4:1d:94:2e:93:e3:0c:
8b:85:ba:fa:f9:44:b3:38:5f:1d:52:55:10:dc:a5:
c9:bf:72:ff:14:ed:03:94:47:2a:25:d8:f7:6c:20:
cf:2f:66:ad:7c:c1:98:1c:ab:bc:3e:6c:03:eb:74:
c3:ed:67:95:65:ce:d5:d6:82:1b:cd:4d:71:87:ca:
f8:ed:2d:35:fc:6b:8b:4d:c4:91:e3:bf:be:af:ee:
5a:e3:c0:7f:93:c5:ff:70:c0:e4:2f:3e:16:5c:a5:
03:1f:72:17:e6:d9:e9:1c:f3:85:c2:21:c1:e6:bf:
63:34:bf:2e:b9:ed:c5:be:1d:d1:49:1f:39:18:e8:
77:00:7f:48:f7:96:a5:a1:b7:dd:97:f0:9c:4c:01:
b9:01:c7:b9:f2:20:42:1c:de:0f:91:07:fe:b0:7e:
f3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:26:BA:90:4A:DE:AB:19:DE:D2:F9:30:22:18:EE:F0:A8:95:50
X509v3 Authority Key Identifier:
keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:df:79:c7:15:c5:c3:0e:35:bf:9a:82:08:dd:da:16:c1:
9a:80:07:00:d8:2c:ec:92:24:9b:68:31:57:93:37:99:0d:fc:
b3:ef:b5:77:ae:4c:18:03:55:7b:6d:ae:b5:7f:15:d3:d0:0c:
b7:6c:e4:a8:76:41:68:ae:69:fe:30:5c:4f:2c:4d:9f:e1:fe:
d7:58:ce:0d:11:e9:b8:51:f2:49:91:cf:8c:27:42:6f:73:73:
74:fe:20:cc:5d:1c:28:59:ef:56:8e:37:03:0a:16:07:e3:8f:
55:87:b0:50:11:91:c5:a8:44:ae:7d:8e:1e:9d:08:b4:90:65:
7b:cc:81:37:b8:2f:03:22:61:07:ba:89:cf:8d:b1:a3:91:75:
93:a7:19:c3:6b:28:a2:2f:51:f3:bf:e0:c1:e4:a2:96:09:c6:
3d:d2:9e:16:5a:90:31:13:39:15:a1:8a:89:14:94:e6:dd:ad:
c6:ba:b3:24:f5:25:76:22:57:8b:e1:89:4e:e7:6a:7c:98:c7:
2e:6f:3b:8d:04:1a:e2:f8:56:93:f7:8f:fc:78:a7:c6:2e:26:
c8:a3:87:f6:3e:a1:7c:fa:61:44:65:25:ca:0d:22:c9:ed:62:
f5:a8:bb:39:57:d1:8a:f7:ab:81:c3:1f:4b:ae:56:0e:e6:1f:
4e:79:98:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:17 2025 by rpki-client