Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: FEhO5j0OqPWNI5BGFjIsbBxJ8fEwzMt2LdJiBoPN0TI=
Subject key identifier: C7:9F:C4:86:A3:50:29:06:6A:F0:D1:39:BC:76:51:B3:38:3A:9A:7B
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 019A4E18DEE6DFAF4801ECED4674A6A1EDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 06F9
Signing time: Tue 04 Nov 2025 09:00:43 +0000
Manifest this update: Tue 04 Nov 2025 09:00:43 +0000
Manifest next update: Wed 05 Nov 2025 09:00:43 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: 9Hduk/u59fHo51IBsZffowqGyZEk3VBeq0NskdReZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:de:e6:df:af:48:01:ec:ed:46:74:a6:a1:ed:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Nov 4 09:00:43 2025 GMT
Not After : Nov 5 09:00:43 2025 GMT
Subject: CN=c79fc486a35029066af0d139bc7651b3383a9a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:a4:34:00:32:74:88:d5:0a:49:ff:f5:a0:
99:46:38:47:0a:bf:7b:b3:09:9e:7f:6c:57:85:5f:
bd:1d:40:3c:d2:c6:e6:f7:25:4d:7c:e2:17:2b:a6:
79:9e:09:2f:0d:03:4a:b1:54:5a:b5:91:d7:87:04:
81:18:fa:75:4e:8b:7e:8e:dd:da:f1:6d:57:64:5d:
d9:3f:a9:b9:21:6b:de:2d:43:dd:ad:b7:57:b5:89:
09:26:b0:e0:16:fc:52:c8:1a:b2:ac:43:3a:cd:53:
8d:c3:75:92:62:33:ed:db:45:36:e6:2c:76:cb:85:
c1:02:7c:bd:fc:ac:4f:bc:8d:ed:a7:a1:dc:b3:55:
22:7e:de:c4:2c:54:15:c1:8e:d6:8d:58:c4:da:12:
a4:d5:57:cf:24:72:90:a2:54:98:9e:70:84:9d:0d:
30:c5:fd:95:60:de:61:ab:34:85:15:9b:7d:43:c8:
23:ba:6d:12:27:f1:d1:ce:87:17:7d:20:dc:58:7b:
6f:5a:8d:93:37:6b:3a:86:fb:57:04:f2:00:e9:80:
16:7b:09:c7:97:46:f0:5e:6b:d4:59:10:a5:f2:aa:
45:cf:2d:2f:01:ec:e2:85:3d:9d:e6:a5:bc:aa:e6:
1a:ca:91:3b:dd:1f:4a:2d:fa:29:6a:cd:8a:2a:ba:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9F:C4:86:A3:50:29:06:6A:F0:D1:39:BC:76:51:B3:38:3A:9A:7B
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:94:3d:7e:71:e9:e2:46:f1:30:25:88:1c:a2:b9:0e:37:76:
22:53:6c:83:07:6a:b7:6a:a2:4a:ad:5e:38:11:d5:4b:1e:a0:
f0:fb:ff:6c:88:53:fd:c6:2e:58:b2:3e:cd:59:59:03:30:af:
df:5f:25:88:46:ff:ec:c6:fc:7f:94:89:a7:f9:d2:6d:c7:92:
55:81:ca:08:6d:da:a1:01:67:e3:5c:58:b7:77:57:23:5a:3f:
e2:5e:e6:19:7b:37:6c:ff:37:93:0d:8e:af:f1:0f:2b:6f:7f:
ac:9c:fb:fc:d0:35:98:fa:b9:f4:3d:c3:d7:f5:be:9d:dc:cd:
da:ee:79:67:6a:fd:52:3b:10:09:b6:bd:27:64:7f:32:a5:0f:
0e:f1:65:f1:4e:65:a2:61:c8:78:69:bb:9c:32:5c:1c:6d:17:
56:dd:fc:1f:f4:0c:f2:81:2d:be:28:15:d2:c9:c2:54:58:1e:
64:9a:a7:6c:c9:8e:84:08:90:89:41:df:11:d7:99:a1:7d:90:
c0:ad:50:4a:d5:49:22:81:26:39:c5:ab:de:a9:8d:b3:4b:5b:
77:2f:08:6a:64:fe:4f:a9:fc:a4:89:b2:ea:b4:8d:d2:1e:99:
16:c9:66:61:66:4f:96:a6:3d:d0:f3:13:62:6b:89:35:75:55:
43:6f:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:42 2025 by rpki-client