Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
File: _x2DMuEYqaIYfqtYhCedZYDxGfc.mft (raw, json)
Hash identifier: vgOTL6S9JewFvFcjZBUoh7yYY/XHrRM+yBAy3GGPTKw=
Subject key identifier: 40:5A:EF:03:D4:01:E5:C9:B8:7C:C9:60:3F:A1:38:98:05:4B:B5:6D
Authority key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
Certificate issuer: /CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Certificate serial: 0199FC8F746AB3BF7106A596EA963B432210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
Manifest number: 053C
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: _x2DMuEYqaIYfqtYhCedZYDxGfc.crl (hash: Apo//b2O3OYfCkmLxKP+Og2gInY7UeEKxi/HMC2EDxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:74:6a:b3:bf:71:06:a5:96:ea:96:3b:43:22:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1d8332e118a9a2187eab5884279d6580f119f7
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=405aef03d401e5c9b87cc9603fa13898054bb56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:08:82:4c:07:f4:b8:87:57:fb:6e:8a:f1:62:
55:93:d1:d5:78:82:c7:49:30:cc:6f:8c:e7:68:15:
d9:f1:79:d0:31:5b:4e:05:6a:62:01:27:8b:e2:ca:
b8:c2:5b:a0:10:39:81:52:a6:db:e3:de:c2:63:69:
a0:bc:58:a0:20:33:5c:c9:1a:0d:48:ed:74:15:18:
94:d3:bb:b5:e8:cb:96:1f:09:02:5e:2e:d8:bf:fa:
fe:23:69:9f:eb:eb:56:b8:f1:0c:81:d8:e8:25:1c:
f9:d9:cd:24:5c:76:78:ea:bf:53:7c:3d:49:7e:f4:
7b:06:48:d0:04:f1:07:a9:ae:ac:7e:90:56:d2:6c:
3c:c9:16:d1:b1:79:df:91:f1:3d:9c:24:c0:fd:8f:
b9:04:4f:eb:21:ff:fe:e6:7d:3d:0f:91:9a:d0:3d:
a7:22:0f:a9:e8:8c:9a:31:d0:25:09:c2:68:22:e4:
48:1e:b3:88:fe:56:32:06:ca:b2:08:0e:fb:e9:4e:
83:61:a4:a6:6f:bb:e1:e7:22:5a:d8:6d:f8:62:38:
02:41:2e:04:d9:2d:57:8d:99:d5:1a:cf:11:c6:f6:
36:5d:8b:b2:f0:79:6b:cb:f6:d1:b7:6c:50:0a:19:
d4:0a:47:19:ea:99:05:b3:c6:e3:96:cf:a6:39:aa:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5A:EF:03:D4:01:E5:C9:B8:7C:C9:60:3F:A1:38:98:05:4B:B5:6D
X509v3 Authority Key Identifier:
keyid:FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0c:90:30:99:04:e6:ea:7e:8e:0b:9a:d4:ba:f6:7f:b5:90:
bc:74:97:ea:ac:b0:b6:f7:c5:ef:aa:41:2a:d4:36:35:88:72:
7e:71:e7:b5:67:e2:23:8a:bf:64:c4:f3:f8:d2:bd:47:f0:b7:
23:43:74:40:49:eb:7f:02:66:26:fc:f2:4a:2a:02:a3:62:3d:
ea:c6:de:eb:e0:f3:e1:dc:fc:98:95:f5:30:47:20:c3:8d:ae:
ea:20:91:e3:2a:8f:27:18:36:aa:f6:5b:16:d5:bd:b7:d9:01:
1f:d0:18:fd:16:53:99:4a:5f:21:4c:dd:46:28:b5:a2:f9:8b:
4f:34:66:6c:3b:8c:35:f3:b2:bf:5f:2d:ad:9a:e9:f8:8e:36:
3e:f1:1c:88:c4:45:43:79:23:f6:e8:46:59:fb:43:17:a3:70:
1e:c1:a2:65:fb:70:86:a0:72:8d:30:bd:1a:61:ab:78:8f:39:
e9:61:e0:1a:b2:94:e5:d3:8e:0d:a9:42:cf:6c:97:7b:79:c7:
2d:f8:d2:43:0b:f8:54:4e:c8:a6:ca:fc:b7:05:69:3d:8c:f6:
af:ba:11:f4:fb:50:31:df:5c:b5:e7:4d:8b:05:9e:5c:65:b0:
9e:f4:6c:e9:30:8d:0c:c2:37:54:57:e5:d0:58:6b:eb:b0:67:
48:bb:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:06 2025 by rpki-client