Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
File: XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft (raw, json)
Hash identifier: PGBogBavaRPWv0icD8669IorzVwKBrZg0XvLKO9lBqc=
Subject key identifier: 11:E6:44:B9:76:39:F2:99:95:C8:F5:D1:21:30:C0:8B:C4:86:2C:7E
Authority key identifier: 5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
Certificate issuer: /CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Certificate serial: 019A4E4FE1C58397BC83ADD90687C728F92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:49 +0000
Manifest this update: Tue 04 Nov 2025 10:00:49 +0000
Manifest next update: Wed 05 Nov 2025 10:00:49 +0000
Files and hashes: 1: XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl (hash: v7zkG74Rg9hfmUaTI2aYxNYFGXLN84qdmBuYKRIacOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e1:c5:83:97:bc:83:ad:d9:06:87:c7:28:f9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Validity
Not Before: Nov 4 10:00:49 2025 GMT
Not After : Nov 5 10:00:49 2025 GMT
Subject: CN=11e644b97639f29995c8f5d12130c08bc4862c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:17:9a:d3:b0:d7:f4:64:21:63:0d:22:9a:
5f:2f:19:71:28:bb:7e:41:9f:e5:98:0f:f3:a8:c3:
ce:2c:94:9d:52:43:c8:69:aa:a4:c9:1e:a2:cc:1a:
9b:3b:bc:a5:13:0a:26:f4:fe:8e:4f:8e:88:53:86:
0f:87:bf:13:16:74:29:3f:b6:8b:69:11:89:86:7e:
2f:3f:71:b0:91:f0:06:21:3a:80:f3:f8:93:67:ff:
fb:3d:34:17:f7:2b:cb:06:3f:78:3e:c0:ba:50:57:
cf:c6:4a:62:5e:d0:eb:c1:b6:b9:ff:ba:2b:4c:6a:
c4:9f:99:cd:b6:c2:cb:c3:84:47:29:27:32:af:23:
84:a0:10:68:49:3e:68:78:78:f9:d2:62:67:c7:55:
28:fa:12:cb:fa:25:9a:26:8c:cf:19:c2:df:87:a2:
b7:ca:9d:9d:a5:06:9b:4a:88:e1:f1:ea:c2:d1:89:
32:66:b2:01:9d:4a:30:61:f6:86:62:f5:1c:b8:84:
8e:47:6d:b3:bd:ed:88:14:39:d2:d8:91:3a:c1:a3:
e0:d7:b5:05:e7:a4:7f:1e:53:42:3a:4f:2a:91:06:
90:64:4f:e7:df:fb:78:94:ff:13:ba:a7:28:eb:94:
6d:fa:6a:1a:29:3e:65:c4:8d:9c:56:47:00:c9:17:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E6:44:B9:76:39:F2:99:95:C8:F5:D1:21:30:C0:8B:C4:86:2C:7E
X509v3 Authority Key Identifier:
keyid:5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:03:51:b9:8f:5f:1f:e9:0f:82:9b:63:7f:d2:af:9e:cb:91:
72:39:b6:a5:12:9d:d6:b5:ec:4c:1e:54:4a:80:94:b4:9d:7b:
47:52:0a:fe:3d:d3:38:20:a6:cb:d8:3f:2b:a0:4d:6a:72:68:
41:9b:b9:e8:c9:46:9a:7f:51:99:d7:e5:63:46:e8:ac:a2:ab:
47:ca:54:58:05:f4:82:b2:06:bd:1e:33:da:ac:3c:f4:a8:e2:
ae:98:7e:b9:da:0d:55:40:27:f6:53:41:1e:77:08:8a:80:87:
27:4a:dc:50:ff:ca:7f:92:59:9f:01:21:3a:0c:bf:b2:f7:9b:
d8:11:ca:18:25:05:c0:ea:9c:d2:56:aa:fe:73:4b:dd:fc:88:
d4:10:d7:10:a6:b2:9a:a0:de:bc:ff:2d:f4:f0:ec:78:c9:12:
17:17:1c:29:bc:b2:99:55:c9:a8:ab:49:84:98:a2:c1:b6:bf:
e5:aa:56:ba:50:8f:07:91:6c:43:2c:dd:9f:e2:b3:b7:55:07:
f5:41:3e:81:9f:51:68:f2:b2:5d:41:96:ba:76:3f:a4:b8:f4:
bb:4d:48:cf:f1:fc:7a:50:61:b4:30:fa:d6:71:63:c8:56:aa:
97:33:df:7c:01:19:90:85:08:0b:29:1c:6c:6a:1d:33:87:ef:
1a:83:10:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:09 2025 by rpki-client