Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
File: RgxXERGq_A1R5f3ggjC_eLieSkg.mft (raw, json)
Hash identifier: wtzPDZX5ZnNLwu/dZMDfhigYBxgo0Dmyjn6ZKqeERFs=
Subject key identifier: E3:7B:6B:B2:5D:27:73:16:F9:76:3F:76:39:E1:2F:9B:E4:D7:24:40
Authority key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48
Certificate issuer: /CN=460c571111aafc0d51e5fde08230bf78b89e4a48
Certificate serial: 019A4EBD53238CAFCA18C8BD2F487B28898C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 12:00:21 +0000
Manifest this update: Tue 04 Nov 2025 12:00:21 +0000
Manifest next update: Wed 05 Nov 2025 12:00:21 +0000
Files and hashes: 1: RgxXERGq_A1R5f3ggjC_eLieSkg.crl (hash: rpOQpJ4RA4VIjgcAUlRyCBK+Ssb0+uzqYQCWnlmjIJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:53:23:8c:af:ca:18:c8:bd:2f:48:7b:28:89:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460c571111aafc0d51e5fde08230bf78b89e4a48
Validity
Not Before: Nov 4 12:00:21 2025 GMT
Not After : Nov 5 12:00:21 2025 GMT
Subject: CN=e37b6bb25d277316f9763f7639e12f9be4d72440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:1d:ab:92:9a:a0:d6:51:22:2f:95:8f:b7:
c5:64:d7:0d:af:3d:5d:ba:96:90:11:2b:9b:89:b7:
04:4e:14:c3:02:c9:4d:da:53:da:b6:ed:9a:63:bc:
5d:9d:0d:bc:9f:a7:f4:ff:b5:aa:db:95:68:4d:75:
c2:d6:25:6f:cb:3a:3e:9f:11:51:95:fe:3c:63:da:
ab:41:24:51:6d:29:66:10:a3:49:1b:b0:ed:6d:16:
90:5e:86:10:31:c5:23:50:c3:aa:5d:f8:51:29:09:
30:4a:66:b9:5d:e1:f3:66:a1:71:71:66:32:68:41:
56:ea:f0:06:b1:57:ee:2c:f0:93:f3:87:ab:aa:bd:
98:fd:3a:4b:11:05:e3:46:67:eb:76:47:2a:6c:35:
6a:ab:2e:e2:f0:dc:7d:98:23:e4:c0:49:53:f4:53:
79:54:0a:b3:9c:b9:3b:d6:9d:b1:0c:d1:6e:35:d8:
83:8f:d5:4b:62:4a:f2:9b:b9:22:bd:34:ba:5d:68:
d5:be:2d:fa:f9:e4:28:0b:d7:64:f8:e7:e7:1c:4b:
12:b0:94:b2:76:93:85:23:23:f2:77:28:07:fc:f8:
72:8f:31:1a:3e:a7:6e:24:62:40:ba:66:9a:4d:b7:
91:12:24:1a:7c:e9:67:44:6a:b6:df:98:57:64:b0:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7B:6B:B2:5D:27:73:16:F9:76:3F:76:39:E1:2F:9B:E4:D7:24:40
X509v3 Authority Key Identifier:
keyid:46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:43:96:f5:e2:17:94:d4:e4:9e:0b:a5:de:15:51:6d:56:c3:
f9:35:2f:2b:b4:3a:51:b2:ce:f4:84:62:0c:38:9b:cf:69:a1:
1f:f3:d6:59:c5:76:bc:ab:34:d6:3c:28:94:e3:72:c6:bf:7c:
36:fc:40:87:d1:ba:72:b7:92:f4:42:63:06:0f:18:ed:32:06:
cb:6d:bd:2c:59:84:97:a7:db:01:e6:db:7d:34:9f:7f:30:91:
a9:d0:b3:93:11:b3:e4:98:e4:a2:15:f3:f6:8c:53:ed:47:a8:
38:88:a9:e7:e2:88:6d:bf:cd:bd:1b:6f:6b:35:75:ed:3a:ad:
8d:89:76:be:5a:c0:d2:3e:24:d8:6f:74:b9:c0:86:9b:2e:b7:
fd:a8:30:91:9b:30:c7:bc:52:83:45:ce:1f:17:70:53:86:88:
a9:23:18:19:82:c5:eb:56:ba:db:e5:04:03:1b:bc:1b:05:87:
56:af:8a:7f:ab:b3:1f:cf:37:be:7e:2c:25:e3:90:65:46:de:
f2:e2:36:71:86:7a:08:6e:2a:d1:da:a2:0d:30:13:86:25:f4:
08:df:51:8f:1b:ef:c2:27:fd:64:5c:f6:1e:f2:4a:f9:4f:c6:
5a:7a:9c:a9:ed:13:07:7c:88:66:cb:d3:27:af:1d:de:34:43:
95:2c:bb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:39:00 2025 by rpki-client