Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File: _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier: VilSilkImjSOCO+LAz7xOQtaEunr5FEIKlY6TS4/eCs=
Subject key identifier: 17:5F:88:15:D7:6A:93:2E:AD:30:12:56:47:A7:10:EE:EB:19:48:A3
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer: /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial: 019A4D747CB0E4AF4160A63BAB7DBBD948DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number: 160E
Signing time: Tue 04 Nov 2025 06:01:10 +0000
Manifest this update: Tue 04 Nov 2025 06:01:10 +0000
Manifest next update: Wed 05 Nov 2025 06:01:10 +0000
Files and hashes: 1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: 4J+PC87mXB8PR2VOQo6uWY9Vg6ofENK1a7Cr30y5nvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7c:b0:e4:af:41:60:a6:3b:ab:7d:bb:d9:48:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Validity
Not Before: Nov 4 06:01:10 2025 GMT
Not After : Nov 5 06:01:10 2025 GMT
Subject: CN=175f8815d76a932ead30125647a710eeeb1948a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:5b:3c:5d:bd:b0:e1:5d:68:74:88:66:c7:
5e:d9:40:82:49:78:d4:70:f5:ce:9f:6a:02:55:42:
b4:fe:43:cb:49:8f:40:23:ae:69:a3:b6:b2:7e:db:
0a:df:ba:dc:65:1e:17:9e:9e:12:76:d3:90:0e:f2:
54:6e:23:7f:06:5c:ee:91:bb:73:55:37:74:18:25:
a6:f3:ff:e6:63:a1:ab:41:21:0f:4e:85:d9:70:bb:
8c:92:42:64:9c:a3:bd:06:a1:b0:cf:ed:bd:c8:29:
87:a2:f8:95:c7:05:bf:e3:f5:85:6f:c7:4a:d5:0d:
51:41:9b:ea:6c:04:3d:35:35:31:d2:46:0e:0f:ce:
56:a5:f4:37:70:74:22:ea:ea:3e:aa:e5:50:bc:d4:
c4:c8:7b:9b:0b:8d:55:f3:35:89:f3:6d:53:15:a4:
99:0b:73:cf:d3:ca:f8:f0:39:2e:50:7e:20:a8:86:
28:c1:90:f0:69:fc:9e:a9:b8:07:c6:5e:b3:e4:41:
f9:8e:90:f3:9c:5a:c9:fe:77:e0:d8:24:10:eb:b9:
83:03:85:65:83:68:56:96:0b:9d:ae:eb:f1:8e:14:
46:a9:f7:ed:a9:e9:28:c7:5a:c6:dd:2a:00:b2:79:
0c:b6:17:ed:28:fb:ba:4b:ba:b9:4c:97:bf:ba:4d:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5F:88:15:D7:6A:93:2E:AD:30:12:56:47:A7:10:EE:EB:19:48:A3
X509v3 Authority Key Identifier:
keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a0:41:25:9e:45:ea:80:05:0a:01:b3:07:50:66:da:b3:d7:
ba:5a:8b:9c:e6:2f:2f:18:eb:bf:84:b0:29:23:2a:de:81:24:
81:e5:e6:47:b7:b9:aa:8e:8a:33:a7:cb:1d:55:d8:a6:bb:42:
66:a5:7b:f2:0e:a8:e9:d8:31:b3:2f:c0:2f:80:a7:04:d9:b1:
bd:15:dc:bd:c5:af:e9:3c:43:d6:e0:8f:a8:79:6f:28:3e:5e:
66:94:d5:a8:46:f6:4a:0b:7d:a7:b2:54:2f:c4:61:a2:c9:54:
1b:5b:69:2a:04:0b:8d:f9:4f:63:23:ed:9f:ed:26:b0:00:13:
d6:6a:63:9f:42:0d:ad:51:56:94:a0:cd:b0:75:71:c1:45:da:
8c:5c:f8:10:85:99:5d:ac:2d:25:99:dc:14:1e:34:c0:26:35:
9a:3f:b8:c5:d3:b7:c3:bb:54:0e:bb:42:8c:76:90:2c:c2:88:
df:9e:68:ff:3e:12:2f:fc:3a:29:c6:95:dc:2a:f0:42:50:b2:
c1:57:f9:9b:14:1b:9c:d1:63:25:e6:38:1b:78:69:4a:18:e7:
94:ee:2a:81:98:d4:f3:5b:fc:b7:ca:f2:e0:b8:d9:ba:fb:62:
db:19:d3:6f:10:86:6a:db:be:8c:36:ca:23:5b:14:cb:f3:56:
46:b0:ae:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:27 2025 by rpki-client