Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier: dUyZs7JzYxT77fNRJDEj8wP371tJIPmLolx8dBhi59w=
Subject key identifier: FE:30:94:F5:9C:E9:72:B2:74:7C:A0:82:1F:F2:66:DF:E8:A9:CA:DD
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial: 019A05923A395888C615D74D1F081359CDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number: 16E4
Signing time: Tue 21 Oct 2025 07:01:00 +0000
Manifest this update: Tue 21 Oct 2025 07:01:00 +0000
Manifest next update: Wed 22 Oct 2025 07:01:00 +0000
Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: rHOqHkOp0Xxli8I0cWTyTf9uVLVxW6d9l3Zmh25q/0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:3a:39:58:88:c6:15:d7:4d:1f:08:13:59:cd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
Validity
Not Before: Oct 21 07:01:00 2025 GMT
Not After : Oct 22 07:01:00 2025 GMT
Subject: CN=fe3094f59ce972b2747ca0821ff266dfe8a9cadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:13:af:1b:8a:19:cb:6c:2a:3e:2f:5e:53:
bc:31:6e:62:95:fb:a5:47:0c:a5:8c:cf:8b:a3:2d:
62:da:00:d3:25:90:b9:28:39:12:de:20:81:ed:1f:
54:02:e4:9b:1e:3a:3f:f7:04:f4:4a:3f:12:71:97:
e8:ef:36:cf:35:18:11:28:74:09:b8:26:2a:ed:9c:
8d:32:35:0a:2d:e2:04:95:96:f7:3f:6a:57:1f:ea:
17:db:6b:b4:c1:ef:8b:d5:c5:c8:b3:3b:f9:7f:32:
c7:24:93:a9:73:8b:ea:1e:e5:4d:bb:d5:53:cf:1d:
cd:ce:7f:8a:d0:61:94:8d:80:22:ea:c4:48:88:84:
3c:c4:3a:b2:21:74:e7:ac:01:81:3f:29:27:4f:f3:
7e:4b:c4:f0:42:73:00:d8:77:47:17:d3:3b:7c:4d:
80:a7:99:6d:ad:c0:56:b1:30:9e:a3:71:fe:5e:ec:
b6:73:8b:2f:94:61:6b:7c:9f:6a:1d:07:07:44:2e:
2e:8f:c9:3f:75:78:b9:30:c2:95:af:61:7e:e9:54:
7f:c9:00:76:5d:9d:dd:29:ed:95:10:d6:d7:81:d2:
2a:97:a0:06:65:65:7c:b4:90:75:f8:83:c9:b9:88:
51:96:cf:35:fe:f4:aa:67:8a:d4:de:38:9a:cf:4b:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:30:94:F5:9C:E9:72:B2:74:7C:A0:82:1F:F2:66:DF:E8:A9:CA:DD
X509v3 Authority Key Identifier:
keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ac:32:99:32:60:5e:0b:c0:26:fb:6b:92:62:c1:7b:ea:4f:
d8:00:68:e0:66:ad:8b:f0:73:b6:3f:aa:11:bd:43:65:3a:6d:
01:80:ce:6f:f3:1c:cd:4f:e2:da:ea:73:cd:75:10:4f:9b:c7:
4e:e5:6a:6b:c6:e3:86:39:24:2c:a7:f3:6e:57:35:1b:7c:d3:
bc:69:bc:73:97:9d:03:bd:97:cb:36:33:80:9a:a3:e8:f1:45:
cb:7a:81:c2:9d:d5:84:48:14:86:2a:20:ba:26:ff:ee:35:d1:
30:4e:7d:8b:e0:1b:ca:7a:73:f6:fd:65:4f:7a:c7:43:0f:ed:
a0:9f:72:fc:9c:1c:08:ff:5b:cb:0f:6f:64:40:9a:a4:6a:24:
12:ef:e1:3c:a5:96:48:16:4c:48:92:08:71:1b:c1:20:b9:57:
ae:3e:2b:a7:84:c5:00:7b:aa:5e:77:e6:78:a6:b3:f2:35:18:
86:7a:0f:4b:22:20:c3:06:68:6f:22:c8:be:2d:90:93:84:9d:
b7:6b:0c:2a:18:4b:0d:43:c5:4c:28:b5:85:f1:09:7e:15:c2:
aa:57:56:8a:8a:be:cd:f3:c2:a3:19:21:64:f4:43:63:4e:00:
3b:8a:fb:b3:ac:15:d4:dc:07:3f:cb:2a:7c:6c:53:36:5f:2b:
ca:a6:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:48 2025 by rpki-client