Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
File: RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json)
Hash identifier: Q1OBVo5QvZsrhotHcwZsrY0z/EJnjGnEyTQEPLuaSDc=
Subject key identifier: 4A:44:E5:C3:51:F9:0A:E1:13:94:56:50:0B:3A:CE:2D:84:42:77:EA
Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Certificate issuer: /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Certificate serial: 019A4DE1EEB915992010E628E7935AB1D98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
Manifest number: 04C1
Signing time: Tue 04 Nov 2025 08:00:43 +0000
Manifest this update: Tue 04 Nov 2025 08:00:43 +0000
Manifest next update: Wed 05 Nov 2025 08:00:43 +0000
Files and hashes: 1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: +1NoJXJ3SlHu4G8NfbirYq20SEGhIX6hiLcMlZMxIGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ee:b9:15:99:20:10:e6:28:e7:93:5a:b1:d9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Validity
Not Before: Nov 4 08:00:43 2025 GMT
Not After : Nov 5 08:00:43 2025 GMT
Subject: CN=4a44e5c351f90ae1139456500b3ace2d844277ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8a:31:92:9c:d9:f8:fc:09:7c:f0:ba:78:17:
9e:06:79:ca:ad:d5:ec:93:e3:f4:2b:88:ff:64:23:
8c:59:1e:f2:85:12:50:54:0c:09:2f:0f:af:4f:23:
35:31:10:da:18:9b:4b:ae:be:c7:da:f5:22:ac:7d:
79:55:b4:0f:f7:54:e4:43:7a:d8:a1:ce:02:e5:42:
10:fc:c5:87:71:39:a6:19:56:4a:1a:49:b2:dc:ae:
23:7e:a0:0f:8d:91:9d:cb:2a:44:80:d8:a2:c6:74:
f2:f0:be:01:24:d1:5d:48:76:0c:73:8a:b4:d8:57:
cc:02:ed:2e:77:b8:b1:74:3b:3d:47:47:33:aa:b0:
66:10:4a:5d:c1:8d:02:ef:4f:30:ca:5d:8f:9e:33:
fd:70:7d:53:0a:40:67:9d:89:c9:3e:3c:63:be:6f:
48:6f:f6:da:9f:ba:dc:25:c9:f3:f7:b4:e2:b5:98:
3d:92:c5:aa:3b:6c:22:a8:5b:aa:cf:ee:9c:24:01:
9c:ec:f9:4e:50:bb:ee:e0:7f:a3:50:5d:95:41:32:
89:46:a8:62:03:21:fe:af:be:71:10:8c:94:51:fe:
e4:96:ed:22:f3:d0:02:3b:57:a3:35:0d:50:8e:7e:
74:76:ea:b0:65:11:b8:fe:09:92:d7:10:72:34:e8:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:E5:C3:51:F9:0A:E1:13:94:56:50:0B:3A:CE:2D:84:42:77:EA
X509v3 Authority Key Identifier:
keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:66:3d:57:58:3b:01:8b:77:72:3f:c1:5e:bf:b9:cd:f2:3e:
76:0b:a1:73:33:38:ea:54:e2:52:28:4f:ed:ee:a3:6d:97:f2:
b2:15:10:5b:6e:8b:e6:fd:34:92:58:0c:9c:3e:41:91:d8:f0:
53:be:41:83:37:36:3b:6f:05:94:f6:8b:be:f6:61:0d:99:34:
3b:52:9b:f0:e4:72:19:9e:0f:42:e8:15:b4:12:6a:43:c1:08:
50:f2:2f:d9:e9:59:27:c2:27:54:96:9b:78:aa:ca:08:ad:14:
29:ed:7b:48:d1:88:f9:05:29:97:a7:34:c1:5d:d9:cb:c4:17:
c7:58:b1:f1:17:81:16:6f:89:1e:2d:8a:73:3e:c3:88:4f:b2:
93:8d:1b:d9:f0:0c:3a:16:e3:f2:60:ee:00:fe:8e:a1:ae:0f:
7f:5f:4f:9c:bd:76:d8:6e:af:f4:d4:ea:fe:ad:43:69:29:11:
23:7d:8f:28:fe:88:34:d6:45:fa:d9:42:45:b5:76:a5:f8:d8:
0e:c4:24:99:e3:5d:f1:0e:e3:f9:df:8c:f1:d8:8b:16:32:92:
29:20:47:62:25:1b:d9:1c:5b:68:51:ba:a0:a0:09:47:01:1b:
04:cd:6a:56:cf:52:27:07:dc:08:76:2a:46:e7:43:31:e6:31:
f8:aa:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:33 2025 by rpki-client