Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
File: rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft (raw, json)
Hash identifier: xgGILCzW4N9mne27ljY6nPWavz5Q7sMs79hERxFCfz0=
Subject key identifier: 9E:5F:87:D6:2E:6A:D8:2E:2A:10:2E:14:EE:E5:F1:53:03:48:4C:86
Authority key identifier: AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
Certificate issuer: /CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
Certificate serial: 0199FBEB32DCFCE0ED0C4EDE54F8C28D5EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
Manifest number: 0BDF
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl (hash: NmpxQrpmHc6ovkd2fsEVAK/qCUketFDMVmUmoU0ACTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:32:dc:fc:e0:ed:0c:4e:de:54:f8:c2:8d:5e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=9e5f87d62e6ad82e2a102e14eee5f15303484c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:51:60:4f:5e:43:d6:f8:da:76:5b:03:42:
5f:bf:d9:06:f8:a2:f2:27:57:37:2d:98:d1:a0:8b:
54:34:ea:cb:49:d4:30:b4:d9:07:31:f7:35:5d:fd:
5e:84:a6:3e:ad:fd:3f:2e:4d:28:97:ce:2b:46:63:
b7:5a:d3:d9:c7:fc:e6:23:c5:08:a6:10:4e:ab:af:
dd:70:a4:e9:e2:14:28:2c:9e:45:29:d9:90:07:ea:
c6:19:ab:10:2c:95:d1:5c:5c:cc:de:07:31:3e:03:
7e:51:e8:b3:3c:33:fc:60:20:e4:ac:d2:13:66:7f:
dc:60:d8:cc:3b:97:f2:41:f4:71:db:9e:c3:39:b3:
50:cd:93:30:cc:45:a7:7a:4c:40:e7:23:a7:8c:98:
21:b6:eb:58:ed:3e:52:2f:4d:a4:44:0c:cd:ec:c0:
22:b2:56:b9:24:8c:e6:3f:18:de:a8:89:7f:96:de:
74:8f:df:8b:41:74:08:6a:64:0d:8f:a9:7c:96:97:
13:c5:06:fe:65:06:e2:5c:10:8c:e4:6d:3b:bb:d1:
08:4d:11:db:2c:f0:31:d5:c2:88:02:56:82:08:e1:
c7:b3:1f:0a:77:0c:be:1c:68:d6:e9:b0:53:03:df:
d0:50:20:d4:54:90:21:c7:9b:07:b4:38:8d:f3:01:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:87:D6:2E:6A:D8:2E:2A:10:2E:14:EE:E5:F1:53:03:48:4C:86
X509v3 Authority Key Identifier:
keyid:AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4d:a6:a0:d5:b2:af:2e:1c:11:da:ac:7b:2c:f0:79:5a:2f:
88:30:64:86:75:73:fd:e9:20:79:ce:a6:c9:64:aa:94:35:5b:
bd:6d:d3:bd:15:89:4d:f9:25:9d:52:33:32:45:60:95:f8:e4:
e5:48:e3:50:cd:3f:ad:c8:eb:02:41:54:fe:e5:c8:43:40:a4:
af:37:1b:3b:3e:47:36:99:3c:56:31:62:ff:d5:a6:6d:c2:cf:
95:2b:1d:b4:c7:d3:df:eb:88:f5:ec:5d:63:3c:7f:a0:6f:40:
8d:f8:33:14:7b:de:58:11:03:c6:56:40:21:5c:61:f5:18:ce:
56:46:53:66:82:c5:ac:f1:fa:41:11:3d:1b:08:05:3d:84:4c:
71:85:31:4b:a3:f0:a8:29:b2:26:c1:f9:3c:ce:b0:25:12:f3:
1b:93:7c:6b:e6:7e:80:6c:97:3c:54:f8:c8:e1:8a:68:90:b0:
d4:5d:c0:08:0d:12:f9:b3:b8:2f:33:bf:4d:bb:c6:36:38:29:
a3:3e:35:fd:56:46:e9:cc:58:8a:a9:7b:29:65:68:9b:c2:f9:
54:53:8f:3c:bd:44:24:dc:a5:fa:c0:36:3b:1f:2d:ab:ed:b8:
d9:bb:c4:be:f7:2d:bf:14:8b:bf:4f:92:ea:71:78:c3:63:ff:
1e:6f:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:05 2025 by rpki-client