Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: m+yUZnUkjw8M6J5bAFMxs4/4Qnh2tw2rc0opLh8nzx8=
Subject key identifier: 59:72:4F:69:65:EC:25:A6:EA:5B:1B:0A:18:A3:06:A8:55:91:6C:A3
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 019A50AB736C5449C6DDE0DFDA842F61B4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0B5E
Signing time: Tue 04 Nov 2025 21:00:04 +0000
Manifest this update: Tue 04 Nov 2025 21:00:04 +0000
Manifest next update: Wed 05 Nov 2025 21:00:04 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: dJLmZ8aIEHTYQCJPheRz4J6bJVPjgNbQIs7IUOyqaO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:73:6c:54:49:c6:dd:e0:df:da:84:2f:61:b4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Nov 4 21:00:04 2025 GMT
Not After : Nov 5 21:00:04 2025 GMT
Subject: CN=59724f6965ec25a6ea5b1b0a18a306a855916ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:0b:70:66:35:72:de:c8:d6:95:57:34:75:
fc:75:67:ba:93:b2:69:b5:02:3b:7c:42:1b:4e:c2:
67:1e:70:2e:8f:de:6b:d2:71:59:6b:be:07:71:b5:
19:a2:f4:98:2d:f9:91:b8:11:31:24:2f:ad:ec:25:
52:73:07:53:3f:00:e8:fa:71:63:23:fb:b5:ca:3d:
20:fe:42:15:71:a5:1d:c7:ac:79:ea:44:bf:9c:c2:
e1:9f:f0:cf:bf:18:08:63:98:5e:2f:e4:2a:56:b9:
84:5e:54:38:9c:67:c0:f8:56:2e:3a:1e:08:19:30:
bc:22:14:8b:46:81:58:dd:10:9a:c0:b2:e0:6a:0e:
80:41:1e:f7:53:ad:e6:9d:66:48:b2:76:6a:72:81:
37:b1:98:4f:40:9f:40:10:62:f9:eb:e4:2d:4a:62:
84:2e:a1:99:59:09:d3:f3:51:8e:6f:01:7a:2f:ca:
b6:06:30:be:eb:77:34:80:22:80:2a:24:2d:99:6a:
88:f7:54:af:4e:39:de:fe:8d:e0:7e:70:f2:ef:73:
1d:95:d4:a9:c2:18:93:8b:32:b0:08:6c:47:3c:b0:
03:be:dc:46:42:d3:31:84:7e:97:e1:e4:ad:a9:fe:
c2:2b:bb:12:06:c2:ff:4a:8b:d8:00:35:d7:a3:d5:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:72:4F:69:65:EC:25:A6:EA:5B:1B:0A:18:A3:06:A8:55:91:6C:A3
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c1:65:1a:44:38:09:33:a4:dd:c7:d1:10:0c:82:5d:4d:78:
4c:a3:c8:5f:ca:db:c5:90:de:45:fb:6b:e2:9e:df:22:27:99:
6e:3f:7a:b6:61:48:00:8d:92:ed:0a:d5:40:49:fb:8e:dc:4c:
85:de:12:3b:97:4d:97:af:90:21:b6:65:c8:b0:6d:12:f2:d8:
26:ab:d8:50:cf:6b:6d:ca:0f:f4:65:7d:89:dd:c2:a9:37:05:
ba:cd:d9:54:6c:2b:61:4e:da:17:16:4f:a8:83:2b:6d:0b:1a:
68:30:2f:3b:3c:79:b2:9e:85:db:ed:9b:c1:38:89:b7:c5:74:
59:6b:77:d0:33:49:2a:4c:73:6b:3d:cf:3a:4a:37:2a:2f:10:
71:d8:65:8a:b7:66:bf:88:bd:cd:f2:cc:e3:e4:8d:6c:d1:f2:
67:85:a5:23:ed:f3:da:3e:e2:c9:83:29:00:39:b8:7e:d2:ec:
d5:0c:4c:b9:8f:ac:c1:eb:d7:5f:ea:46:70:2a:30:16:a9:81:
c4:b7:31:02:3f:22:b0:73:c2:5f:a1:6a:9f:2b:56:e8:7c:3a:
c4:21:76:cd:1d:c2:13:5d:6a:7e:2b:6b:a5:55:a9:2b:c9:f4:
d0:29:68:d6:2b:56:9c:50:34:77:63:27:88:43:f3:70:58:3b:
57:8c:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:33 2025 by rpki-client