Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: LzNz9bIW8fqnop2LTQy2ZscDH8Cv68ugo3PRdDN4s+w=
Subject key identifier: 95:25:A2:B9:46:1A:5C:44:2B:62:1E:F6:06:A8:6F:A3:CE:6F:AA:90
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 0199FEEC069A7B253FA510C4BBCFAD8E048F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 0111
Signing time: Mon 20 Oct 2025 00:01:45 +0000
Manifest this update: Mon 20 Oct 2025 00:01:45 +0000
Manifest next update: Tue 21 Oct 2025 00:01:45 +0000
Files and hashes: 1: HRoRP4XhhYpU785BEKhZ1q4e20g.roa (hash: G6jwo30XwlnomMCEKD4f2VAkjCPOzmiVIHus+OyycRI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: xg9CMC/Mm0svjoSIqFhpK4GL4oVuoy0gIorMOmEDig0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:06:9a:7b:25:3f:a5:10:c4:bb:cf:ad:8e:04:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Oct 20 00:01:45 2025 GMT
Not After : Oct 21 00:01:45 2025 GMT
Subject: CN=9525a2b9461a5c442b621ef606a86fa3ce6faa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:08:d7:02:f6:a5:66:82:37:3b:13:ed:41:
90:bb:43:4e:d7:56:1d:f5:fd:d3:7e:92:8b:a1:73:
3e:45:5b:30:b6:6c:1d:be:f5:b3:08:ed:dd:80:1f:
5f:29:52:32:36:b3:77:90:24:af:27:33:07:76:2c:
d5:4a:4d:66:9e:e3:1c:cb:fc:93:52:c6:18:16:bc:
7f:5f:ef:68:ee:f4:c8:92:8f:ab:22:97:54:99:5d:
a5:e7:0f:ee:7d:5e:07:ff:96:43:c0:a4:b2:27:79:
5f:52:20:53:cd:85:25:70:0e:ba:f2:b0:67:ba:50:
5a:c9:6f:fe:b9:c2:0d:f7:48:84:e6:ee:f4:30:f5:
37:fe:09:07:f6:08:79:6c:fb:6c:26:ed:13:e3:4d:
19:98:b1:ef:7a:e4:d8:3f:63:95:ea:b9:0c:4e:74:
5b:35:13:f2:7a:8a:4b:52:69:40:b7:7c:2b:fd:f1:
bd:b5:67:8e:c7:77:2c:a9:b2:90:94:c2:07:fd:b0:
55:40:f5:0c:f2:d4:7e:64:9e:7b:8e:c3:3b:14:2c:
bc:4d:a3:2f:38:0c:5f:94:df:38:97:34:e6:14:41:
fc:77:20:05:c5:56:f5:d8:71:05:92:dc:54:41:94:
5d:1d:aa:d7:9c:12:db:4f:a0:b0:d4:d8:c6:ca:96:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:25:A2:B9:46:1A:5C:44:2B:62:1E:F6:06:A8:6F:A3:CE:6F:AA:90
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:37:1d:c1:5b:40:55:38:fb:8a:5e:76:2c:73:fa:2e:77:66:
ab:4f:d8:a2:81:f6:2d:3b:62:d6:67:7a:c1:15:13:1b:0e:ab:
da:9f:fe:79:d8:bf:c1:47:01:2b:f6:40:2b:7e:d8:31:5e:97:
13:01:de:45:03:5e:85:93:ec:33:bc:cf:2f:cb:c1:d6:14:88:
fe:c8:cb:75:09:3e:91:bb:b6:b4:86:13:04:ab:f0:63:74:b0:
eb:74:31:3a:50:0d:30:6c:7d:1d:86:12:4e:98:6b:12:19:f1:
b4:db:1d:04:c9:58:a9:06:fa:79:71:68:47:02:38:9a:55:43:
28:d5:cf:53:87:01:f9:47:9c:94:e9:39:ba:5f:55:6d:32:16:
83:9b:f9:50:db:74:fc:91:e5:c9:77:bf:5f:07:1e:02:cb:42:
ea:46:25:90:9f:b2:db:ea:95:58:b5:1b:00:57:6f:43:3e:e4:
85:d6:0a:c5:bb:b2:3d:4e:0c:e8:dc:02:23:3d:a2:e6:93:98:
00:3f:9c:2f:8a:ec:02:55:ca:a6:ae:d9:a5:47:75:48:9a:8f:
09:d1:1a:2b:e3:c4:cc:08:2d:00:41:23:66:01:3a:bf:ed:35:
0e:75:09:9c:ae:55:cc:57:68:12:10:13:e3:9c:4e:a8:fb:5f:
dd:11:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:00 2025 by rpki-client