Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: 1YNDMaV8put2xIoJ31PVVLp0VZ+sralWujepskHC/wg=
Subject key identifier: 8C:B9:0E:C5:0F:86:14:C6:D3:CC:C0:B9:72:4D:2B:BE:FB:5A:AE:6D
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019A51F53F7F90B6371BC0951346D85D62B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 013C
Signing time: Wed 05 Nov 2025 03:00:18 +0000
Manifest this update: Wed 05 Nov 2025 03:00:18 +0000
Manifest next update: Thu 06 Nov 2025 03:00:18 +0000
Files and hashes: 1: HRoRP4XhhYpU785BEKhZ1q4e20g.roa (hash: G6jwo30XwlnomMCEKD4f2VAkjCPOzmiVIHus+OyycRI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: Do0UYt36JTpF40pRLxmU0nT6D5K8Jr/h+CzWDiiR5sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:3f:7f:90:b6:37:1b:c0:95:13:46:d8:5d:62:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Nov 5 03:00:18 2025 GMT
Not After : Nov 6 03:00:18 2025 GMT
Subject: CN=8cb90ec50f8614c6d3ccc0b9724d2bbefb5aae6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:de:01:c5:bd:26:56:1f:13:c2:57:91:e3:
e7:58:12:53:8f:7b:8a:14:bb:e8:5b:06:da:eb:e7:
16:72:1d:29:ed:1e:f3:f6:6d:51:85:10:bf:71:00:
95:32:f2:52:88:08:e7:4d:32:cb:c7:82:96:58:2e:
d1:ea:b1:1c:9d:dd:48:ce:c5:a3:28:cf:41:c6:38:
fc:57:db:2a:e8:a7:a7:41:05:e2:d2:f5:32:dd:51:
a4:70:3b:c8:92:c4:73:b4:49:a7:9e:62:df:a7:40:
1f:18:04:3a:9a:de:eb:dd:85:ed:d3:c0:3d:c3:88:
23:ce:49:5e:44:81:7a:c3:ac:83:bf:55:91:f5:2b:
bf:91:9d:cd:6f:2f:45:92:d0:68:69:03:d6:16:b4:
2f:12:06:5d:88:61:7b:4c:4b:99:3f:c9:9d:23:fd:
89:d2:c5:69:29:8e:d0:c4:55:5e:19:3b:29:52:db:
ff:99:e2:b1:47:6d:3b:c3:7e:07:88:b5:c0:31:cc:
6f:b3:bd:e0:42:b2:74:13:f7:51:af:bb:77:af:0c:
62:60:b6:c4:d2:de:73:24:1f:26:df:9c:0d:f7:35:
ce:77:97:e2:5f:f7:fd:42:8f:e6:6f:56:fb:11:84:
07:5f:1c:df:a6:ca:2d:67:69:55:2b:b2:15:97:6c:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B9:0E:C5:0F:86:14:C6:D3:CC:C0:B9:72:4D:2B:BE:FB:5A:AE:6D
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:35:e7:5a:b7:1c:c4:90:dc:33:1e:3f:87:6e:c5:0f:db:f7:
51:45:32:37:6c:df:2d:3c:11:29:15:72:ca:c7:55:aa:4f:b9:
2b:3b:6c:2b:35:d0:9c:8a:59:cb:cb:01:96:b8:8c:ce:03:41:
51:03:69:92:c7:b3:a2:7d:f8:38:3f:d5:b4:e0:d7:d1:bb:10:
3d:e3:26:7e:14:e3:3c:15:54:0d:5d:07:1e:83:32:12:78:10:
f9:58:85:16:c8:c7:d5:66:c9:18:16:d5:82:1a:cf:b5:17:d8:
11:e1:a7:5f:23:49:53:df:b1:e9:d6:8a:1d:b4:53:d9:01:5f:
27:f9:74:4c:22:ab:2c:9a:4b:55:80:99:eb:60:87:5c:78:d1:
94:92:ca:bf:48:05:c4:7e:68:b4:dd:f7:d6:fb:ea:d7:bd:17:
1c:d1:3d:57:44:e8:59:3d:78:b0:3e:b5:ee:24:79:bf:f2:ce:
78:19:bd:1d:f1:d2:bb:67:c2:c9:61:f6:f5:1d:a4:c2:47:15:
98:d0:5f:b0:27:f0:da:94:1e:27:2a:e0:71:87:d5:8c:e0:71:
21:7a:1b:38:cb:a8:4c:32:bb:0a:df:24:63:27:73:ff:dd:a2:
5a:58:7f:bb:fe:a2:2a:05:b3:4a:d2:71:ba:00:b3:46:d7:38:
62:ec:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:18 2025 by rpki-client