Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
File: fXrxi3mJleFLOBNhoGu2aEm36Fo.mft (raw, json)
Hash identifier: 23g6+jkRwpxNOm8uC260sCTQuZ2BEudq8xfy9SFKegE=
Subject key identifier: 53:79:EA:0C:23:6F:5B:88:E7:B5:96:94:47:A8:15:F6:7C:84:1E:8F
Authority key identifier: 7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A
Certificate issuer: /CN=7d7af18b798995e14b381361a06bb66849b7e85a
Certificate serial: 0199FE7DE0AFFB1ED0B55306C6B21751D7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
Manifest number: 080E
Signing time: Sun 19 Oct 2025 22:01:26 +0000
Manifest this update: Sun 19 Oct 2025 22:01:26 +0000
Manifest next update: Mon 20 Oct 2025 22:01:26 +0000
Files and hashes: 1: fXrxi3mJleFLOBNhoGu2aEm36Fo.crl (hash: esVMkNYnRTfv9yPcNm3ht4nB8S+oeTPdqP2etfSj9w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e0:af:fb:1e:d0:b5:53:06:c6:b2:17:51:d7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7af18b798995e14b381361a06bb66849b7e85a
Validity
Not Before: Oct 19 22:01:26 2025 GMT
Not After : Oct 20 22:01:26 2025 GMT
Subject: CN=5379ea0c236f5b88e7b5969447a815f67c841e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:80:83:ed:e4:2d:84:c7:57:e0:44:4a:cb:
26:72:fd:22:59:5a:a4:a3:98:3e:e8:86:38:34:b3:
05:a3:d2:db:d0:f2:76:1a:f8:c5:c5:52:8f:2f:8d:
21:4b:3f:1b:2d:a5:b1:4e:49:7e:39:ab:3a:2b:37:
4d:07:d2:af:1a:37:47:35:e2:03:14:44:bb:2f:58:
de:a9:6e:56:cf:88:9b:9f:a1:30:b7:ba:02:3c:d2:
f8:3e:4c:d0:01:bc:bf:ab:c1:05:45:fe:50:44:de:
f5:07:78:e4:65:88:fe:11:08:da:52:0b:7b:3f:e4:
06:84:6f:ed:ec:e9:55:65:8e:eb:a3:13:02:8e:fc:
be:93:39:59:9f:83:dc:1f:ad:e1:ff:b0:4c:af:67:
6d:42:da:a7:a4:e0:80:3f:63:96:9b:89:9a:d6:21:
8d:25:33:af:5f:11:7d:c9:b6:c8:94:72:de:9f:e5:
a2:64:b9:1e:66:cb:1c:ab:4a:ac:54:5e:68:35:32:
f6:d4:36:a8:70:5a:45:a8:4b:7a:ba:67:9f:fd:7b:
5c:e0:53:f3:29:96:1d:ce:97:eb:62:4e:4a:86:f2:
bf:8d:81:ff:61:62:f9:2b:b3:7a:35:31:8c:ff:05:
7a:10:30:3c:47:a1:0a:63:43:87:b9:94:a6:46:3c:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:79:EA:0C:23:6F:5B:88:E7:B5:96:94:47:A8:15:F6:7C:84:1E:8F
X509v3 Authority Key Identifier:
keyid:7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0f:b8:04:93:0b:5e:e5:8d:fa:0e:0c:9c:fc:f7:27:47:d2:
cf:0e:2e:5e:0c:f3:3b:6b:33:c9:d9:79:b2:f7:01:e0:43:e2:
3c:66:83:4a:7a:5c:6a:bc:fe:37:3a:8c:97:8d:7b:9d:52:ee:
c9:28:e6:6b:2f:1f:c2:cb:9f:2c:e9:38:a1:4b:23:50:1e:0b:
8a:2e:08:47:0a:55:c2:00:36:41:0e:30:1b:f2:c4:4d:53:53:
57:d4:bf:ae:c0:a6:9f:f8:58:72:c3:f0:61:bf:30:0f:cb:27:
30:86:0e:31:67:06:b0:9c:07:68:05:82:a0:c2:14:03:cf:c5:
a0:e9:91:9d:2e:26:3a:c6:5b:ce:73:05:c4:c0:9a:23:d9:9a:
89:1d:a9:d3:e2:22:30:87:e5:f5:9e:ae:ef:f5:0c:96:e7:c7:
44:37:85:2a:79:3a:87:8d:e0:d1:35:c5:19:b1:37:71:b4:da:
51:d8:3e:14:1a:bb:60:cc:6d:11:89:11:a5:44:d7:29:dc:a6:
09:c5:a6:2e:ac:41:ae:46:b4:4c:ca:6c:e0:61:81:ff:50:c1:
05:d2:5f:48:ec:c5:3d:39:ea:e3:a8:d4:4a:8a:51:9c:f4:40:
0b:e9:6f:7f:0d:75:5e:c2:9c:fa:e5:32:ed:29:45:08:73:44:
09:11:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:00 2025 by rpki-client