Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier: 7WMHsKRgqC671271cvFqjnZIBhhNCDDNnCUxlImh0as=
Subject key identifier: 20:58:58:8F:A6:F6:F2:E3:5A:82:1B:1F:A8:B5:56:02:B5:24:9E:D7
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer: /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial: 019A4EF5B8268E033E1B4EEB977EAB3D514F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:57 +0000
Manifest this update: Tue 04 Nov 2025 13:01:57 +0000
Manifest next update: Wed 05 Nov 2025 13:01:57 +0000
Files and hashes: 1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: pdb4nehXzHBLmfLQAo0L1BLGRkn01O7hw31jZJfagUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b8:26:8e:03:3e:1b:4e:eb:97:7e:ab:3d:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Validity
Not Before: Nov 4 13:01:57 2025 GMT
Not After : Nov 5 13:01:57 2025 GMT
Subject: CN=2058588fa6f6f2e35a821b1fa8b55602b5249ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:44:b5:45:ce:1b:24:91:ce:b1:a8:27:ed:
19:7e:83:98:19:c3:ad:2d:9e:a1:f6:3c:bc:3a:6c:
6b:79:9d:86:7b:c6:17:23:73:46:ae:e6:a8:43:49:
a5:c4:92:04:12:11:ec:11:d7:ae:5d:8b:d6:7c:b4:
21:cd:42:d1:6f:8a:e5:68:a7:a0:6f:5a:3a:8d:b0:
c0:1f:76:93:8c:ea:d5:f3:ee:c7:08:2c:b0:fa:6e:
eb:07:fa:8f:31:7e:20:18:f9:01:51:cc:ed:75:4b:
04:4f:5e:0c:5e:f7:4c:3d:7b:ea:c0:05:86:79:c1:
cd:7e:bc:46:61:0b:65:78:3e:22:cc:ae:a2:b5:49:
d0:61:a3:8d:2a:89:c5:c6:58:44:c4:57:3e:21:bd:
ee:91:67:75:89:9e:f0:16:87:12:f4:f0:e3:4b:0b:
07:82:31:cc:b8:64:3a:b8:0e:5f:8f:62:01:84:f5:
3f:b9:33:88:e5:ce:77:b5:c6:a6:21:f5:e2:6d:00:
27:93:d4:d1:4a:ef:c2:e6:d4:ba:0b:6d:50:5d:6d:
4d:06:98:77:41:34:a6:1c:67:37:13:02:49:b1:c0:
91:e2:55:34:5e:fb:23:17:67:18:57:89:c4:8d:a7:
a9:72:a2:5b:79:9b:b4:fa:e0:cf:b8:e3:9e:6d:85:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:58:58:8F:A6:F6:F2:E3:5A:82:1B:1F:A8:B5:56:02:B5:24:9E:D7
X509v3 Authority Key Identifier:
keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:26:a3:c8:91:f2:2f:fd:a7:ab:16:89:b0:f2:d0:75:e0:b6:
91:d0:7a:da:19:83:71:ab:5e:90:d2:9f:60:10:54:6a:7b:61:
96:b0:54:1f:30:e2:b8:1a:f3:a7:21:74:cd:22:c7:46:66:a6:
68:e3:ca:bd:05:56:8b:ac:4e:dc:1b:c7:33:8d:23:e4:77:3d:
45:2c:dc:de:1d:1f:50:3b:03:f6:f1:ad:d9:7f:04:54:b2:b6:
58:f1:4a:a9:cf:7f:c6:13:ed:09:a2:29:9e:68:a4:a1:a1:fa:
1b:fd:c6:08:f5:0b:ed:be:70:8f:f5:08:a0:97:39:26:bc:6e:
a2:d4:e4:4d:fd:a8:16:a8:a0:b0:e5:7c:50:81:a3:f5:6b:7d:
de:57:8c:31:92:fa:36:9b:18:1d:f8:c7:bb:a7:e8:18:d5:f5:
be:e7:c9:78:ff:15:0e:af:b6:07:80:dd:8a:6b:9b:5a:98:45:
22:52:c2:87:bf:ab:17:cc:6f:55:d2:6c:5c:29:e7:28:0a:1a:
61:53:7f:2a:9c:36:35:ae:17:3b:47:f6:d2:0f:eb:09:f2:5b:
55:5d:75:bb:bb:f3:a3:63:53:17:7c:ac:51:65:63:9d:8a:f9:
d3:cf:bf:05:6d:0d:85:ca:01:f5:5a:eb:f8:db:91:26:81:b8:
b8:db:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:24 2025 by rpki-client