Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: QvxCAzXOOmJHlmwc0Hqr+WGrBD0+V0gmLcyjyRCERt8=
Subject key identifier: 6D:6F:A6:AC:C9:C2:87:87:53:07:E9:E6:1E:7B:97:59:18:1D:53:99
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 0199FC58DEF822DA9FFD29059373515E0232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 161C
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: SuUcRsD4rqjcAFtFFjWG036bByKdU80KiAxwURQpLHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:de:f8:22:da:9f:fd:29:05:93:73:51:5e:02:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=6d6fa6acc9c287875307e9e61e7b9759181d5399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f0:cb:30:cb:fe:24:97:18:aa:17:2f:50:39:
33:93:78:63:7a:dc:e0:7c:6d:8d:c2:bf:8a:14:9e:
0d:1b:e9:25:a4:68:3f:4d:78:c1:e0:09:84:b9:4c:
a4:61:65:c2:0f:a5:6c:69:fa:06:5d:01:4d:b9:b1:
5c:ec:00:f0:6e:63:65:57:df:8e:2b:f8:a9:23:55:
93:43:51:a3:4c:84:2c:3e:e0:78:f2:73:5a:0e:7d:
41:5f:0d:ac:20:cc:19:90:ad:27:0d:47:9b:db:3e:
0d:12:2b:6b:5d:05:13:b2:b2:a0:54:82:d8:ab:a5:
96:0b:50:4a:61:7a:8f:25:4b:95:ae:6d:8b:8e:f7:
23:42:28:7d:44:8a:5f:b2:38:8b:a7:01:b0:17:9d:
35:4a:12:6b:02:84:09:cd:7d:70:6a:df:3f:e1:ba:
a4:ab:47:27:e2:bd:c6:36:6c:ec:c9:47:64:94:a9:
3e:93:5c:b6:e8:2f:70:eb:2e:dc:3d:9b:22:c9:8c:
3c:c7:b5:2d:bc:a7:0e:23:4b:b5:3c:1b:1f:a6:0e:
aa:d3:74:1d:6f:f4:81:89:f2:bf:a0:65:be:58:34:
c7:77:a9:87:7a:60:c4:cb:9b:bd:68:4c:03:aa:ee:
db:95:27:7b:45:17:eb:28:5b:5c:0d:93:83:50:d6:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:A6:AC:C9:C2:87:87:53:07:E9:E6:1E:7B:97:59:18:1D:53:99
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:44:d5:d7:e1:42:da:fe:b1:af:a8:54:d7:94:e9:2f:ef:90:
85:c2:1b:2f:62:d1:84:65:f8:40:8f:84:a6:52:7c:b3:ca:42:
e1:5f:7b:39:25:04:5e:dc:ee:a9:4e:ec:9a:da:0b:78:0a:f4:
3b:de:80:34:b0:89:52:30:bf:4a:fb:5c:e1:62:bb:7e:4e:28:
d5:78:de:a1:74:b4:50:23:8a:2e:7d:13:4e:bb:e9:d3:41:a9:
3e:8b:23:c3:00:c7:1b:4a:23:34:71:60:95:a5:38:55:9d:9e:
0f:9a:cf:a4:a2:68:8f:53:ba:ef:df:0f:03:62:ed:9e:e1:5a:
9a:a5:ff:97:40:6d:b9:af:1b:aa:b6:dc:32:7f:19:eb:88:91:
0c:a6:fd:98:f9:0e:23:e2:fb:4b:40:0c:cf:16:7a:b3:0e:34:
f5:6f:8b:57:d1:35:85:af:8d:97:a7:80:62:9d:19:e0:3e:cd:
17:16:4d:9e:f2:1c:a2:1a:07:45:9e:2c:53:db:da:c9:8d:18:
eb:f3:bd:e6:5f:ca:01:05:96:eb:a9:f6:fa:ac:17:c9:f4:a4:
8a:eb:dc:3b:f2:cf:13:74:4f:bd:e2:30:93:26:35:f2:73:88:
cb:7e:82:c3:9c:03:2c:7f:13:98:30:a8:60:07:11:40:a0:51:
02:45:8b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:02 2025 by rpki-client