Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: zk5uaj0ItU0RgT4jCYR8+f4ZeuaHcRw3C8E+IIXVhaQ=
Subject key identifier: 6D:99:81:7B:7E:41:FD:10:82:0A:E5:32:3A:7B:F3:33:1B:BE:BA:D1
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 0199FB0F420CB838838383F295D8CA9E1737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 06CE
Signing time: Sun 19 Oct 2025 06:01:45 +0000
Manifest this update: Sun 19 Oct 2025 06:01:45 +0000
Manifest next update: Mon 20 Oct 2025 06:01:45 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: X5hP8qGaK3sKlN71r4/pjMu/vke76ev1u4HXZPY0I2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:42:0c:b8:38:83:83:83:f2:95:d8:ca:9e:17:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Oct 19 06:01:45 2025 GMT
Not After : Oct 20 06:01:45 2025 GMT
Subject: CN=6d99817b7e41fd10820ae5323a7bf3331bbebad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1c:c3:fd:d1:52:34:12:bc:e5:23:72:ad:1c:
58:47:cf:2a:59:ed:d8:34:63:19:0e:3c:b1:61:7b:
92:9c:92:0e:75:cc:39:72:e9:f3:63:9d:b0:c4:d0:
7f:d9:13:60:6d:2e:08:56:0a:92:52:da:f1:50:aa:
62:83:0f:3a:a0:f9:98:ca:43:10:54:1f:69:c2:e6:
39:e4:3c:c5:2d:85:c9:c5:90:1a:a2:b5:35:55:70:
d3:71:62:79:54:7f:da:7b:50:5e:10:ed:3d:1d:38:
be:c3:85:3f:3b:0b:5d:28:f4:54:d0:c1:08:61:06:
5f:e2:08:40:11:0a:b7:d4:1c:9a:60:f7:d0:0c:7a:
e4:f9:8d:71:56:3b:73:a1:42:69:74:9b:de:3d:0e:
2d:fe:e1:5e:09:7c:23:b8:d4:b5:73:56:f1:4e:67:
8c:74:e6:65:f5:e3:98:3f:2a:9b:c0:2a:04:55:7c:
57:61:e6:be:96:3d:7a:c0:56:a1:ec:cf:65:71:c0:
be:30:46:d6:fa:91:2b:87:12:48:75:7f:bf:cc:1b:
7f:68:a8:f8:ce:9c:ee:cf:8e:80:76:83:6e:8a:c4:
9f:47:a1:91:e2:7c:41:00:75:e9:32:61:87:d6:46:
d3:03:ac:a7:ec:e3:10:af:c0:78:59:d7:c3:f8:0c:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:99:81:7B:7E:41:FD:10:82:0A:E5:32:3A:7B:F3:33:1B:BE:BA:D1
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:18:ad:f8:aa:50:d5:75:a3:fd:9a:f6:86:88:47:9e:8f:7e:
4f:04:29:b5:14:65:f0:b3:64:f8:d4:21:af:c9:52:43:85:0b:
2e:87:26:52:d0:08:83:6e:d1:d6:3b:e7:e2:b4:1e:cc:4d:f8:
e5:4c:69:5c:86:62:d2:27:0e:9d:4a:53:77:3f:4e:d0:67:f6:
d0:83:94:25:09:ce:f3:80:a9:d7:71:36:01:7e:4d:7b:60:fa:
59:33:b2:83:ba:9c:e3:4f:ca:67:62:df:3b:57:d9:56:93:19:
02:95:a6:a6:c6:33:1f:6b:49:1f:5f:b8:db:de:1a:79:0f:bb:
5b:32:8e:b3:01:2f:85:06:17:4a:c5:2a:ba:bd:3d:92:d0:29:
1c:fa:81:26:0d:1b:be:68:83:c6:84:41:aa:a8:c2:96:b5:d9:
bb:0d:8a:18:4a:19:07:c0:96:73:da:8c:f1:77:3a:09:4b:6b:
a6:12:07:89:b7:8f:e4:99:ee:40:d5:a9:ab:f8:18:14:02:fc:
c9:98:0d:f6:71:20:37:5d:75:a7:24:9e:ca:ad:21:59:dd:ad:
44:25:7f:1b:4e:6c:eb:37:e7:c2:82:c8:b7:e8:4a:19:a1:fd:
d7:63:aa:d6:ff:d6:71:cc:bf:fd:23:60:86:18:d1:0c:03:97:
d0:39:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:47 2025 by rpki-client