Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier: 9iGdAlDv/e+WbbTUsZt3DtX2LcVCn2OGX3yeOaWMNk0=
Subject key identifier: 09:67:F6:E6:16:4E:35:36:4A:C4:24:6A:02:0C:8F:FD:90:C5:AE:0E
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial: 019A4EF49D19AE0D13969601468986317AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:45 +0000
Manifest this update: Tue 04 Nov 2025 13:00:45 +0000
Manifest next update: Wed 05 Nov 2025 13:00:45 +0000
Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: HTKaOOwGyd6OphOyZuu1MqtObXuhmKRi71q3klj1uyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9d:19:ae:0d:13:96:96:01:46:89:86:31:7a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
Validity
Not Before: Nov 4 13:00:45 2025 GMT
Not After : Nov 5 13:00:45 2025 GMT
Subject: CN=0967f6e6164e35364ac4246a020c8ffd90c5ae0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:c2:f7:e4:b3:53:b5:da:f3:48:97:bf:fe:
03:be:46:42:4a:39:03:af:67:0f:dd:cc:41:ce:ad:
b1:ba:c5:34:e7:c6:14:fb:df:c4:b1:24:f1:94:58:
c9:10:4b:74:e1:05:b9:6a:41:0c:30:bc:33:19:85:
f0:ff:73:fa:8f:a3:18:35:d6:38:1f:31:ee:f5:bb:
71:c5:69:c6:1e:42:c0:1e:ca:2a:fd:30:26:dc:08:
87:c2:00:54:5c:24:61:c9:69:b5:5e:d6:a5:74:fc:
40:aa:0b:d1:d3:8d:b8:7f:09:a5:fd:ab:1d:4c:87:
53:0f:09:64:89:a4:41:d2:09:2e:52:8b:42:d4:fd:
07:6f:72:f1:cf:da:95:9d:ac:c5:2b:ff:73:64:2d:
8c:e8:9a:86:d5:cc:ab:66:e0:0f:7c:cb:03:ea:70:
1d:4d:3b:71:bf:fb:37:ed:da:ef:06:e9:e1:28:f8:
78:5e:ab:46:b7:84:54:5c:ae:3a:0c:f8:08:28:f1:
08:58:d0:57:51:a4:87:fc:4f:19:74:d3:66:96:1f:
01:1e:86:9b:50:a1:a8:ea:a2:72:84:2c:6f:14:37:
68:3f:01:43:8b:59:d7:e8:83:c0:d9:e3:92:44:04:
f0:e8:ec:3f:e2:17:05:61:a8:81:aa:88:25:3d:73:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:67:F6:E6:16:4E:35:36:4A:C4:24:6A:02:0C:8F:FD:90:C5:AE:0E
X509v3 Authority Key Identifier:
keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3c:d7:f4:b6:7c:b4:90:f0:c4:6b:00:0e:be:f9:38:b0:3d:
d0:d2:f4:f4:c3:76:5f:34:6d:22:ba:c8:6b:a4:9f:36:4f:d2:
6d:29:06:f2:ce:16:e0:12:2e:f6:f6:13:e6:37:d2:87:2c:ce:
cd:8b:dd:e3:3b:9c:82:1c:a4:61:62:d2:da:50:7a:b4:de:39:
01:2e:53:07:03:81:84:40:cf:a5:42:14:de:a0:66:70:f9:4d:
51:9c:67:09:97:1d:23:bd:72:6c:d5:f6:ea:d8:6a:2f:9e:6d:
31:30:9c:80:12:fc:0a:9a:d1:82:d9:f9:a2:de:63:d1:0f:b6:
9b:73:1c:3c:55:40:8d:95:46:8d:c0:3a:45:50:54:c8:45:da:
d8:56:16:f9:86:14:bc:f7:cc:ba:a2:58:e4:d4:75:8b:6b:5c:
e9:5f:c8:75:8f:e4:de:92:b4:b9:89:5f:e5:7c:8f:6e:b9:19:
9a:3c:c5:62:b4:a1:0b:16:f6:5e:5c:bf:66:da:f8:4a:1e:f6:
9e:45:48:f3:8e:b8:57:4c:c9:2a:d5:27:b8:9a:d5:15:25:20:
41:59:94:7a:60:88:0b:ec:15:f3:a9:00:95:1a:72:00:64:5d:
00:dc:8a:80:2c:18:45:68:04:5a:7c:df:63:c0:2e:ef:e9:ad:
63:ab:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:32 2025 by rpki-client