Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: fLDfKXWyY0ryBI4Asxmw2CumySD1mNs3ZlnctPulKQw=
Subject key identifier: 48:D0:68:F6:38:C2:37:E5:5C:0C:3B:5E:FC:48:1A:B0:80:68:AD:FE
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 019A541AE452F7A182C8B5A83B01F8F6FAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 13:00:39 +0000
Manifest this update: Wed 05 Nov 2025 13:00:39 +0000
Manifest next update: Thu 06 Nov 2025 13:00:39 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: myvWITkl0sLYEyJ9Q2HsfIZxSqIxXhVs1Q8yh7ayVKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:e4:52:f7:a1:82:c8:b5:a8:3b:01:f8:f6:fa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Nov 5 13:00:39 2025 GMT
Not After : Nov 6 13:00:39 2025 GMT
Subject: CN=48d068f638c237e55c0c3b5efc481ab08068adfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:62:55:f2:8d:5d:d8:c8:91:36:f6:e1:05:
4e:12:2e:06:b8:e7:d5:a7:4e:18:19:36:d8:51:9a:
bb:8c:97:17:c8:11:49:bf:8b:70:8b:51:51:31:ae:
d1:99:e8:6d:74:58:f8:a2:06:d7:0a:bc:0f:c6:09:
37:00:64:22:19:c1:b2:0c:39:20:b0:a7:e3:94:79:
41:b5:3d:f3:82:e3:6d:83:b5:5c:47:82:c4:1f:57:
12:04:a2:e6:28:fa:09:5e:bf:68:f3:1d:7f:02:b8:
84:f0:e6:af:af:75:41:7e:a9:1b:3d:f2:ed:7d:02:
98:c5:84:b0:c6:bb:10:90:87:e5:10:24:08:03:49:
35:c3:a5:03:cc:7e:88:7c:41:ed:19:37:08:02:93:
78:ae:87:fb:d0:44:64:ed:85:72:c0:5f:db:ae:c6:
ff:b4:fb:13:63:7e:7e:57:19:98:f8:c1:7b:20:56:
d8:d4:9a:88:d7:99:06:3f:24:f0:ef:33:72:24:a3:
a5:c5:40:fd:54:20:43:47:b5:ea:e3:b9:8a:1b:ab:
c0:23:5d:06:e5:26:96:75:40:de:8d:d5:4b:41:4e:
3b:c7:e4:8d:01:c6:79:9c:c7:a4:cf:7c:08:4c:d4:
68:f5:f4:0a:98:a6:e9:4d:f9:0b:f6:c6:59:c4:5c:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D0:68:F6:38:C2:37:E5:5C:0C:3B:5E:FC:48:1A:B0:80:68:AD:FE
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9e:fe:07:f7:a6:54:a8:13:b4:cc:d6:47:a2:41:94:f2:b2:
44:db:94:11:3d:90:41:4f:f6:99:38:6a:7e:23:82:19:65:79:
a4:b9:3d:88:03:67:b7:57:da:d6:a1:c7:e5:74:b7:bd:cf:d6:
7a:7d:a4:5f:bc:b0:8b:c7:98:61:c6:7c:06:02:43:59:9e:ba:
01:af:49:e6:b8:bf:d1:f3:e9:9c:ca:84:e0:86:91:13:3c:de:
3e:7f:7a:3f:e0:91:d5:cd:7d:e0:68:63:24:7c:56:e3:42:00:
93:f9:5b:a1:55:73:7a:86:d3:f9:dc:45:21:55:6a:4d:43:37:
1b:c9:90:ac:ee:26:21:4c:06:7e:9f:27:bc:56:54:4d:84:96:
a7:7c:93:7f:6c:78:c2:4f:24:19:69:8d:fb:38:e4:90:98:e9:
17:81:1f:25:57:8d:7d:78:29:c1:3a:fc:0d:3c:0b:89:2a:5b:
40:0c:01:e6:2b:02:fd:56:5a:b7:08:f1:b1:74:ba:9e:90:7d:
37:d6:46:2e:99:9d:79:4e:38:21:ec:13:35:f6:a1:93:6e:31:
e9:fe:3a:17:e5:f7:00:7e:69:1d:dc:d7:a7:e1:84:8e:c7:8b:
79:65:5b:e6:fa:55:ca:aa:be:65:42:0e:94:48:98:dd:ca:4f:
4d:c6:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:03:30 2025 by rpki-client