
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
File: X6FRijy1wnSeMNn_Icg3iJHOgSU.mft (raw, json)
Hash identifier: NgsbedFIj3UxhCFb8O/Ip7kTdGmawCgqfZHI+yyKF/Y=
Subject key identifier: F7:DF:C5:11:55:89:32:30:0D:22:74:1A:C4:66:AF:09:C5:72:9D:5E
Authority key identifier: 5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25
Certificate issuer: /CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
Certificate serial: 019A4EF5AA076AEFB2C2FF0E776AA636C2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
Manifest number: 097D
Signing time: Tue 04 Nov 2025 13:01:53 +0000
Manifest this update: Tue 04 Nov 2025 13:01:53 +0000
Manifest next update: Wed 05 Nov 2025 13:01:53 +0000
Files and hashes: 1: X6FRijy1wnSeMNn_Icg3iJHOgSU.crl (hash: LaTRmnrilSFKZyUsPx2jaJkOBJ5P29rMwydTrPqxLVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:aa:07:6a:ef:b2:c2:ff:0e:77:6a:a6:36:c2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
Validity
Not Before: Nov 4 13:01:53 2025 GMT
Not After : Nov 5 13:01:53 2025 GMT
Subject: CN=f7dfc511558932300d22741ac466af09c5729d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:db:13:c9:45:ad:28:99:65:45:a9:1a:99:
6d:9c:e0:81:aa:ad:b2:bd:8e:af:e7:6c:51:0a:0e:
fe:51:96:cd:ff:29:46:c1:ac:cf:36:f3:bb:8f:bd:
f2:96:18:a2:9f:00:ba:41:e1:46:89:54:5b:25:51:
21:1a:07:51:d2:ac:0e:d2:7d:3c:2f:68:d9:dd:66:
56:9a:57:f6:f6:fc:be:3e:e1:37:46:64:b3:84:4a:
03:bf:d8:39:d2:68:ba:8c:43:a7:4b:df:0c:33:86:
c5:76:d7:74:16:dd:1e:25:95:6e:dd:81:15:0a:23:
6c:0a:2b:6f:aa:00:a1:60:26:1d:0c:68:14:84:25:
88:34:97:7b:7f:35:bb:dd:85:90:7e:3b:80:5d:e5:
ff:84:71:d9:db:03:11:37:df:ed:aa:3e:d2:3c:76:
76:04:2d:2b:d2:11:1a:35:e4:a9:42:91:a6:7a:4a:
d1:b0:cd:f8:18:18:fb:cc:f4:be:20:1b:cf:2b:c5:
bc:83:47:83:75:2c:59:a7:49:1f:73:17:4e:b9:6b:
a5:60:ac:eb:04:3b:fe:85:00:55:a8:53:51:ca:9b:
56:bf:39:dc:da:68:cf:e1:83:4a:20:5d:a3:99:44:
87:ad:81:af:e1:c1:fa:fa:03:1e:1f:97:44:46:f5:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DF:C5:11:55:89:32:30:0D:22:74:1A:C4:66:AF:09:C5:72:9D:5E
X509v3 Authority Key Identifier:
keyid:5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:04:83:d7:b5:21:8c:4f:f0:f8:41:f3:4f:68:75:a6:bc:d3:
a2:d0:0a:15:d4:7b:fe:6a:83:79:15:7f:c0:50:84:6a:af:a3:
80:29:f7:2c:9e:c6:3d:73:b8:fd:88:46:a0:eb:ce:ea:e7:00:
ba:ed:ea:29:07:0b:b4:8a:ef:d8:73:0d:76:7d:f7:81:c5:12:
2e:a9:95:79:a4:d0:87:2f:a2:c6:fd:37:0a:83:d1:6e:ff:8e:
f3:0f:91:94:06:89:b6:01:57:ea:2c:9f:58:ce:64:40:13:44:
43:9c:85:ec:33:f6:c2:a2:dc:26:84:33:6c:bf:05:30:a3:ef:
a8:0c:5b:d9:9d:de:11:4c:cf:99:21:a4:28:61:84:84:f3:91:
77:fc:ae:97:69:00:2f:96:01:5f:0c:95:ac:64:a4:9c:04:33:
94:16:ad:ea:a6:3b:36:a0:6d:61:4f:0b:79:7b:cd:c2:76:61:
7b:df:e0:b4:ac:ca:26:63:1e:8b:c4:1e:ca:f7:df:53:5d:b0:
d8:e7:58:8c:18:75:b8:e2:94:10:c3:e5:7a:39:42:4b:e7:f3:
83:ae:77:2c:88:53:41:cd:34:91:88:bf:9d:20:e1:0a:ee:12:
2f:7f:6c:d2:06:13:ed:f0:0d:11:f3:29:cd:07:da:8d:f3:c9:
b3:9d:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:16 2025 by rpki-client