Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: Ywpno29iLEqljnv5G5hkTJOyjXMZdD6zo0Hs/SQntak=
Subject key identifier: D6:45:BC:99:55:ED:5A:73:74:D3:62:DE:60:83:D8:BE:64:34:9B:6E
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 0199FBB372E5CDA143D1D97236391062FD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0B32
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: aRomRWtFYt9cOwhCDX36VB37PMdD2M6XePFXeZg225c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:72:e5:cd:a1:43:d1:d9:72:36:39:10:62:fd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=d645bc9955ed5a7374d362de6083d8be64349b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:bc:91:6e:27:9d:48:ec:ce:5b:af:d3:4e:
59:a0:44:6c:f0:84:9e:76:ed:41:a8:f3:60:d1:0b:
2f:d3:70:c4:c4:e6:03:e6:1d:fb:01:df:b9:46:c0:
a5:4c:64:b2:d2:93:a0:74:5d:60:0b:e5:71:8e:b2:
65:e4:22:44:bd:3d:0f:c7:02:ec:42:72:93:42:d9:
f0:91:ac:2e:8c:1e:9c:b3:57:d9:ea:98:b5:74:bc:
4e:16:a0:78:83:2c:c5:de:d5:a0:d7:70:5f:4e:f5:
a9:92:41:f7:39:32:96:dd:6b:73:09:f9:d8:42:2c:
61:79:2a:54:e6:0d:5e:0a:ca:d1:4c:3f:e4:56:90:
3e:80:de:d5:69:15:84:f9:fa:41:3f:33:48:c9:64:
1b:61:b0:94:1b:67:48:4a:18:d2:64:78:0c:80:21:
84:89:c8:21:cc:eb:85:37:e7:e0:08:4f:ba:8a:70:
87:39:50:af:7d:de:9f:7e:b8:69:c5:c5:69:a7:20:
e6:12:24:b3:64:74:e0:3f:58:fa:4d:c0:ba:88:69:
44:be:c1:e4:ac:c6:ae:dc:52:33:ea:9d:e6:97:13:
b0:28:fb:73:1a:0c:b4:30:3c:41:12:b4:15:17:5e:
5b:b7:a5:79:36:16:03:7e:96:18:cf:14:6e:31:f1:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:45:BC:99:55:ED:5A:73:74:D3:62:DE:60:83:D8:BE:64:34:9B:6E
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:52:fc:fd:56:b0:f3:9b:3f:b3:e6:de:1e:6d:a8:39:b8:98:
e7:23:f1:3d:91:f5:c7:f1:2e:26:ef:48:71:75:f4:bb:88:7a:
cf:cc:4a:d6:ab:ac:29:0d:72:b0:c5:2a:f4:e2:43:75:fd:26:
f7:be:09:e9:c9:74:37:96:8f:33:bc:b1:97:b8:52:07:f4:b9:
be:9d:16:d3:97:d8:f7:13:a5:f6:76:1d:0b:8e:59:05:51:25:
8a:3d:62:36:15:cf:5f:ca:6e:ec:f0:76:f6:f2:c3:30:cb:9b:
94:e4:a1:ae:2e:3d:36:82:52:d7:7b:95:d2:01:32:cb:b6:0f:
c0:77:43:0a:f3:57:18:dd:87:ec:d1:90:12:cd:02:23:12:cc:
50:98:49:17:43:83:d4:02:f5:fe:33:b5:99:9d:6b:79:46:39:
e8:7d:c7:26:af:22:31:95:a6:8f:28:8e:5a:53:ea:69:db:5e:
32:2a:25:5f:33:d9:71:37:54:a3:fb:79:f8:d1:c0:0f:11:da:
6f:56:a3:5a:97:46:da:1e:28:96:ba:47:5b:83:4e:90:f4:05:
d9:1f:63:0a:e0:62:15:f7:15:3f:6c:c9:b8:1d:7a:e3:3a:db:
3f:ca:6d:ec:05:61:34:2c:72:30:0f:67:a8:7b:d5:53:6a:67:
9c:e6:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:41 2025 by rpki-client