Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File: dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier: Lztkwj81dSBFQzPfJU1BebRsUPPQLm3vdHor1uE91Es=
Subject key identifier: 05:09:50:1B:61:21:A4:EB:FB:5E:C7:9C:04:7C:BE:7D:4F:24:4C:62
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer: /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial: 019A4D73A7130C26E19E69F8EAF8353ACF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number: 0EE3
Signing time: Tue 04 Nov 2025 06:00:16 +0000
Manifest this update: Tue 04 Nov 2025 06:00:16 +0000
Manifest next update: Wed 05 Nov 2025 06:00:16 +0000
Files and hashes: 1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: oV1pTwHBHPVeBFK0F5njxcck3HZ311YNHlNODO3t4h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a7:13:0c:26:e1:9e:69:f8:ea:f8:35:3a:cf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Validity
Not Before: Nov 4 06:00:16 2025 GMT
Not After : Nov 5 06:00:16 2025 GMT
Subject: CN=0509501b6121a4ebfb5ec79c047cbe7d4f244c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:fe:b9:09:18:f0:0f:8a:15:90:2d:dc:98:
84:88:eb:70:c1:1f:ca:69:cf:8b:96:95:fd:c4:2e:
4b:19:84:f3:8e:87:6d:09:94:b4:23:57:ba:53:7c:
f8:65:af:a1:ad:ff:ab:c2:29:85:68:d0:97:0a:b0:
31:01:6b:3e:b0:f0:3b:d9:c0:f2:4e:91:de:d9:dd:
52:31:ba:5b:71:56:d0:a7:f5:23:46:64:47:3e:a7:
24:96:56:d0:eb:f2:6c:e3:8f:47:2c:c3:76:05:df:
9e:25:09:b6:db:fb:a6:f9:2c:14:53:8a:10:f5:be:
72:cd:f4:16:68:e2:b8:fe:13:43:12:db:8a:2f:0e:
0e:10:fe:d7:94:2e:4d:87:31:31:3b:e2:66:91:9b:
6a:02:4f:bd:6a:77:63:27:7b:9a:bb:1a:cf:78:2a:
54:f0:e3:ba:c5:cb:73:44:f1:8c:2e:b5:a4:43:b9:
24:75:52:2d:e9:ff:69:a7:f7:17:70:d8:63:71:4b:
82:f8:f5:b6:68:15:11:31:4b:21:07:71:80:ba:cd:
bc:e5:01:78:5c:c6:26:41:52:79:3d:8a:f6:b3:a8:
5d:82:89:a5:3a:fa:aa:72:82:97:c6:92:5d:c5:dd:
fe:03:98:78:85:4c:90:c2:f8:b6:79:05:72:6b:f5:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:09:50:1B:61:21:A4:EB:FB:5E:C7:9C:04:7C:BE:7D:4F:24:4C:62
X509v3 Authority Key Identifier:
keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8e:35:d8:51:6a:a1:85:60:54:dc:77:1a:54:4a:5d:00:55:
fc:49:74:70:c3:a0:d0:f4:8b:dd:fc:ec:5f:33:5d:25:2d:b3:
ec:07:98:33:50:53:e8:e8:03:4a:14:0d:61:14:99:85:80:dc:
ae:5d:ea:83:91:18:1d:92:09:71:f5:43:0b:30:0b:c2:f6:f3:
e4:93:42:a3:fd:ec:b1:a5:68:20:55:80:c9:c8:d4:58:17:e3:
46:2a:f0:4a:c5:6f:99:67:5f:b1:57:7f:5a:dd:b6:d1:25:b0:
5d:79:51:31:c6:48:50:c1:1a:b1:49:95:2f:4f:40:ce:85:71:
a3:29:c4:96:ff:78:25:32:91:83:6e:9e:4b:70:4a:07:95:8e:
79:c8:48:73:56:2c:b6:2d:3a:62:32:15:42:ed:34:36:d7:b5:
1a:69:0c:f6:35:32:68:78:d4:ad:b3:2e:6c:2f:22:40:f5:4a:
95:42:69:4d:1c:78:2a:1b:63:81:4c:f3:fa:51:2d:1a:d6:8d:
6d:70:d3:ff:ff:a0:ba:95:55:bc:e9:04:10:40:e5:79:50:4e:
e0:24:7d:30:d4:c4:41:0e:64:93:56:ac:d4:8c:f9:cd:40:6e:
db:25:6a:18:79:55:6c:94:1b:8a:0e:1f:ed:78:d2:21:f4:e8:
15:28:40:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc6cTDCbhnmn46vg1Os9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTRlODE3MTU4ZGMzMDdlZWQ0ZDRjNmVkZjUxYTg5ZTU3
MDNlY2YwHhcNMjUxMTA0MDYwMDE2WhcNMjUxMTA1MDYwMDE2WjAzMTEwLwYDVQQD
EygwNTA5NTAxYjYxMjFhNGViZmI1ZWM3OWMwNDdjYmU3ZDRmMjQ0YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgH+uQkY8A+KFZAt3JiEiOtwwR/K
ac+LlpX9xC5LGYTzjodtCZS0I1e6U3z4Za+hrf+rwimFaNCXCrAxAWs+sPA72cDy
TpHe2d1SMbpbcVbQp/UjRmRHPqckllbQ6/Js449HLMN2Bd+eJQm22/um+SwUU4oQ
9b5yzfQWaOK4/hNDEtuKLw4OEP7XlC5NhzExO+JmkZtqAk+9andjJ3uauxrPeCpU
8OO6xctzRPGMLrWkQ7kkdVIt6f9pp/cXcNhjcUuC+PW2aBURMUshB3GAus285QF4
XMYmQVJ5PYr2s6hdgomlOvqqcoKXxpJdxd3+A5h4hUyQwvi2eQVya/XzswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUJUBthIaTr+17HnAR8vn1PJExiMB8GA1UdIwQY
MBaAFHcU6BcVjcMH7tTUxu31GonlcD7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQt
NjIxMDY0MWU1MmQ2LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQtNjIxMDY0MWU1MmQ2
LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4412FFq
oYVgVNx3GlRKXQBV/El0cMOg0PSL3fzsXzNdJS2z7AeYM1BT6OgDShQNYRSZhYDc
rl3qg5EYHZIJcfVDCzALwvbz5JNCo/3ssaVoIFWAycjUWBfjRirwSsVvmWdfsVd/
Wt220SWwXXlRMcZIUMEasUmVL09AzoVxoynElv94JTKRg26eS3BKB5WOechIc1Ys
ti06YjIVQu00Nte1GmkM9jUyaHjUrbMubC8iQPVKlUJpTRx4KhtjgUzz+lEtGtaN
bXDT//+gupVVvOkEEEDleVBO4CR9MNTEQQ5kk1as1Iz5zUBu2yVqGHlVbJQbig4f
7XjSIfToFShANw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:02 2025 by rpki-client