Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier: JEHoCuxQnsywi3Ul/DL6do9W7bTa0kjWhsGdMj07P1I=
Subject key identifier: 6B:ED:AA:67:69:7E:E6:12:B3:C1:3F:AE:D3:6A:97:F8:A3:A0:D1:11
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer: /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial: 019A4E189C13AF95AAA8C7C913D2A17B501C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 09:00:26 +0000
Manifest this update: Tue 04 Nov 2025 09:00:26 +0000
Manifest next update: Wed 05 Nov 2025 09:00:26 +0000
Files and hashes: 1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: eyrAH0MFzV5dThEZp0rfL2o6B8ZjQm74F3+Hl3KMRuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9c:13:af:95:aa:a8:c7:c9:13:d2:a1:7b:50:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Validity
Not Before: Nov 4 09:00:26 2025 GMT
Not After : Nov 5 09:00:26 2025 GMT
Subject: CN=6bedaa67697ee612b3c13faed36a97f8a3a0d111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:26:2e:b8:1e:3e:1c:a6:da:17:39:4c:31:
4c:0a:5c:05:33:4b:7f:d1:9c:f3:81:6a:1c:30:73:
aa:be:54:91:05:24:d4:71:d0:80:50:eb:6c:ac:26:
41:3c:a2:ad:cf:71:70:56:6a:4a:20:1a:00:b5:6c:
d0:87:7a:fb:e7:88:c3:da:db:ee:63:c9:23:ec:06:
96:76:56:29:ca:30:ef:3d:8f:75:d2:49:ce:2c:5c:
0e:23:34:0f:da:29:67:c3:ce:1d:cb:87:b7:c1:3f:
ad:8b:01:5f:63:bc:ed:ea:5c:1d:08:a8:c3:88:a4:
3a:97:b4:70:f5:bb:e4:d4:5b:88:d4:6d:2c:24:cf:
74:29:a9:52:29:16:5c:20:d0:d7:a6:8f:e2:58:03:
d1:38:9c:d0:1f:67:a2:fc:0a:fd:0f:6f:0d:09:39:
01:a1:c0:03:c3:a2:47:1b:e4:47:1f:b6:ea:9e:97:
18:dd:47:e5:a8:8e:54:bf:e9:62:8c:a6:89:03:06:
85:72:bc:c5:b6:a4:d5:57:03:81:94:cd:bb:fe:0c:
f4:8a:77:49:af:c1:73:51:6d:7a:fd:79:51:8d:8c:
58:34:e0:2f:d5:05:bd:df:c1:db:58:37:1c:7f:4b:
80:18:ff:20:00:6a:1f:c7:a3:76:46:2d:0b:2a:ef:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:ED:AA:67:69:7E:E6:12:B3:C1:3F:AE:D3:6A:97:F8:A3:A0:D1:11
X509v3 Authority Key Identifier:
keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:28:28:25:3b:de:15:3b:e9:7f:38:63:52:e8:f7:76:40:18:
86:e3:b9:be:56:b7:68:3c:e8:4f:c6:19:3f:61:10:a9:65:97:
43:40:df:75:0b:2e:88:c8:43:65:c8:a2:35:5a:36:4c:52:b0:
bc:09:f0:bf:9c:64:43:3d:77:50:a9:f7:8c:bc:61:79:08:a5:
1c:68:72:2a:4d:9c:6e:65:6b:d5:a4:b2:e2:07:6a:99:b1:f8:
3d:47:30:34:77:46:ed:07:05:9d:17:67:02:1d:2a:28:b4:1a:
07:ae:1e:2c:86:70:44:13:7e:83:de:9c:b8:a3:5c:eb:58:88:
07:cd:9c:0a:3d:9f:19:db:2a:b8:17:fa:7b:b6:53:a0:4c:e7:
56:22:43:c8:d1:65:d7:90:22:4a:a4:38:58:f0:61:54:f0:c0:
91:e4:68:31:fa:3e:43:c2:6d:0f:3f:6d:e0:76:db:3b:1c:94:
cf:67:f9:7b:7a:7a:d3:9f:4b:6a:2c:7f:d0:84:84:12:3f:6f:
f6:90:8f:86:e7:21:45:64:32:ed:0c:5d:39:60:e7:66:84:3e:
3b:56:86:85:e5:c8:a9:3a:cc:ba:8f:0e:ac:0d:2a:2d:03:96:
7d:59:c2:c9:77:ce:5c:d4:7a:fa:48:a6:e8:f3:b8:b1:4d:33:
3d:cc:6c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:53 2025 by rpki-client