Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json)
Hash identifier: 6Y2g+6f6hxmoOzN0L5lekDA+98dwFEEhAwucXMIc33s=
Subject key identifier: CC:45:DE:96:FE:5E:55:A6:59:A4:97:B8:E3:B3:FC:5E:38:D7:51:40
Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Certificate serial: 019A50E30D98491D94321B8880DD462F6FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 22:00:48 +0000
Manifest this update: Tue 04 Nov 2025 22:00:48 +0000
Manifest next update: Wed 05 Nov 2025 22:00:48 +0000
Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: VPumTCtnGRDYpkEpjyn4K2TTGX2dQNPvZ9KVhusb4hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:0d:98:49:1d:94:32:1b:88:80:dd:46:2f:6f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Validity
Not Before: Nov 4 22:00:48 2025 GMT
Not After : Nov 5 22:00:48 2025 GMT
Subject: CN=cc45de96fe5e55a659a497b8e3b3fc5e38d75140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:82:19:a5:42:76:6e:e0:15:83:b0:0e:82:
2d:96:26:98:eb:af:a9:9a:b9:76:fa:e0:33:99:4a:
e4:9f:eb:53:bf:17:53:af:e0:53:08:bf:de:41:c0:
2c:16:4a:4a:e2:7e:a5:97:b3:fe:e9:32:79:08:15:
fb:ed:1e:bf:17:f0:8a:5d:0e:34:fc:19:35:74:e0:
d8:3b:f9:80:ca:29:2b:17:ae:06:bf:cb:cb:63:c3:
7f:39:46:a0:3f:95:ac:b7:84:51:9f:a5:30:e5:bb:
a6:96:fa:5e:96:ca:67:8d:0d:69:b9:39:50:1e:f7:
1e:20:a6:53:e2:b2:cf:d6:6e:3f:9f:bd:a7:75:96:
d3:01:09:99:f2:7e:06:07:40:93:ac:65:13:10:79:
ab:a8:25:58:dc:a8:44:7e:f7:ae:2a:64:50:7d:bf:
d6:29:97:e3:90:6e:bb:19:b8:69:a5:8f:8e:70:35:
14:fe:fd:95:b9:d0:66:7e:90:96:e3:cd:3b:f7:62:
bc:1b:ea:78:61:7d:04:ab:bf:53:78:a6:f6:64:24:
1e:d7:7b:90:bc:36:44:12:09:62:47:d6:d3:21:91:
eb:db:8e:9b:86:ae:a1:ed:01:c2:09:04:3b:f5:b4:
81:a8:cd:a3:c7:20:90:be:2e:c4:1f:e0:74:2f:14:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:45:DE:96:FE:5E:55:A6:59:A4:97:B8:E3:B3:FC:5E:38:D7:51:40
X509v3 Authority Key Identifier:
keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:54:5e:94:a3:5c:33:4f:be:06:1e:c4:47:41:18:d2:01:9a:
12:ea:92:33:da:ac:e5:0c:5d:1e:e1:3a:40:ec:81:0f:d6:67:
cd:63:1f:dc:12:91:06:81:05:0f:f3:81:2b:e9:c4:f5:fd:1d:
c6:1f:21:7c:fc:c1:d9:bf:4d:50:06:17:20:7f:42:fb:b4:17:
35:c1:89:4b:41:e8:32:bd:fa:58:cf:01:89:22:24:73:07:36:
3c:e6:85:5d:49:2e:4d:41:79:10:45:6e:64:86:e3:4d:74:02:
0e:ce:e8:be:29:22:02:da:1a:aa:a9:5a:7d:97:e5:c1:75:d9:
0b:76:57:a1:fc:93:22:15:a9:3c:be:dc:9a:4f:6c:c7:ae:1a:
a7:9d:2c:b6:e4:be:c3:81:52:50:7b:c8:74:00:13:b6:26:dd:
ad:6d:90:85:cd:74:13:ff:c8:70:62:f2:27:43:42:40:db:95:
a8:ce:6f:c1:3c:6e:f6:be:86:8d:e7:67:8f:3e:9c:47:03:f7:
10:56:82:3e:b3:77:af:c3:1e:50:52:de:5c:2a:2b:80:e4:1c:
a5:80:aa:0e:39:ab:7e:e7:b2:2a:b9:47:1f:da:d6:fc:06:48:
72:a6:5f:af:a1:7b:9e:cd:c9:a5:1e:4f:e7:af:93:aa:c8:90:
38:03:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:44 2025 by rpki-client