Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft
File: rx1xu1v1LBNf8HCGaq1M25U6iZA.mft (raw, json)
Hash identifier: y9w7FpTp9Atwv2MMth0vSVpvs6acAZ6Pu3vvEukoB9c=
Subject key identifier: 73:A0:A1:DE:76:4B:12:95:1B:5B:7D:27:16:97:C8:83:4A:8A:CC:79
Authority key identifier: AF:1D:71:BB:5B:F5:2C:13:5F:F0:70:86:6A:AD:4C:DB:95:3A:89:90
Certificate issuer: /CN=af1d71bb5bf52c135ff070866aad4cdb953a8990
Certificate serial: 0199FC21508E3B4C706A3029B77D8F29740A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft
Manifest number: 44
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: rx1xu1v1LBNf8HCGaq1M25U6iZA.crl (hash: u02jpcQKZCDGZqrqG9vZcZ1kTzr/fvMPEcaGOzxo60s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:50:8e:3b:4c:70:6a:30:29:b7:7d:8f:29:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1d71bb5bf52c135ff070866aad4cdb953a8990
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=73a0a1de764b12951b5b7d271697c8834a8acc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:ab:8d:29:43:4e:31:14:da:cf:db:8b:14:
31:d8:14:23:ed:b9:d5:69:10:9b:15:78:7a:9f:a1:
d9:94:d5:ab:12:60:6c:4f:47:c4:1f:8f:e9:fe:e2:
dc:3c:60:f4:3d:9d:2e:6c:93:2f:a4:46:89:d0:cc:
7b:01:6c:a3:8e:41:c7:5d:06:d0:34:42:42:6b:cf:
8a:b9:89:7c:25:2b:d1:28:82:1e:49:1a:cc:20:dd:
aa:17:cf:36:6f:35:3d:98:f1:63:de:55:56:6d:3c:
5f:88:4d:59:27:99:b1:15:65:4c:8d:6c:d5:c9:e9:
c9:cb:67:3f:01:33:96:b9:93:54:86:4f:b9:a0:1e:
53:44:65:10:92:2a:93:64:94:e2:f7:bc:0a:ff:eb:
0e:2a:53:ec:3c:90:1d:5e:77:a5:2a:a4:4e:0b:b5:
de:d7:d9:fb:13:6a:76:31:40:30:8b:3a:da:3d:53:
d2:b4:a8:d1:13:55:db:2c:dc:13:82:a0:9c:b2:5c:
c3:2e:fb:36:6d:37:c8:0c:b4:d9:60:fc:7d:55:be:
6a:db:10:17:6c:46:65:8d:45:ee:5b:04:0f:53:b7:
36:9b:8e:dd:ec:9e:19:5a:83:22:d3:6d:c9:1c:7e:
9a:bb:6f:ac:09:85:1f:f2:3e:db:5b:11:83:e2:2c:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A0:A1:DE:76:4B:12:95:1B:5B:7D:27:16:97:C8:83:4A:8A:CC:79
X509v3 Authority Key Identifier:
keyid:AF:1D:71:BB:5B:F5:2C:13:5F:F0:70:86:6A:AD:4C:DB:95:3A:89:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3f:14:dc:ab:30:18:b8:1b:47:c6:be:93:cd:fd:54:16:29:
d6:df:2d:1d:f2:37:28:47:b1:db:15:ef:d1:00:4b:4f:ba:b6:
b4:11:78:44:cb:2e:09:59:6d:fc:6d:31:0f:ca:ff:84:9b:10:
14:be:1c:1b:f4:a2:af:9a:73:1e:51:f9:1d:b6:a2:91:02:98:
ab:77:99:5f:fc:87:79:91:0f:0b:f6:f2:5c:ec:ff:a8:53:9f:
a1:66:0d:80:7e:e3:d0:05:f1:f3:51:23:83:7f:0f:7d:7a:82:
ec:a2:d0:07:63:41:03:8d:b3:c8:ac:27:7b:e3:54:30:33:01:
e8:6e:59:2e:59:9a:18:22:a1:54:ed:18:70:09:79:3e:8e:d0:
d2:df:76:66:6c:39:38:9d:52:9c:20:79:c4:78:bd:a7:42:18:
46:30:4d:40:bf:6b:47:82:b8:0f:16:cc:10:18:86:7d:c3:88:
21:56:69:2b:fe:d1:19:14:5c:9a:c3:9f:ac:93:f7:af:89:8a:
49:00:03:e7:52:18:1c:3e:62:14:a0:ba:d7:bc:4a:8c:42:50:
67:64:c3:e1:b5:c0:64:dc:95:7e:29:c6:84:7e:cd:d6:11:46:
92:a3:c7:b7:fc:9a:b8:0d:1a:3a:8b:9f:19:83:de:ae:e1:1f:
ed:5e:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:19 2025 by rpki-client