Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: 7Ivik+m103gBHUiec2/VeEmoOEg4zhhv1CVRZNvKMF8=
Subject key identifier: E6:A5:5D:78:41:2A:DD:4F:1A:AE:80:FE:5C:7C:69:AB:94:CB:01:EE
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 019A71B8B0AED459B67C0D77CD4B2B225B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 103E
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: XHYmb4ONIpvJBsIIMAMlEzNSt5fVFSQItoZ37dDsPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b0:ae:d4:59:b6:7c:0d:77:cd:4b:2b:22:5b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=e6a55d78412add4f1aae80fe5c7c69ab94cb01ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:38:d7:6f:7a:28:ef:dc:55:b3:4a:c3:22:
7f:83:88:c3:4d:d8:a0:a5:ff:46:27:34:9f:8b:62:
21:fa:0f:3d:e6:50:8b:fe:d8:83:f6:92:ee:af:a3:
38:c7:04:d7:b0:61:d1:07:37:8e:22:fc:9d:a7:78:
12:12:e2:09:81:78:3a:8e:ad:63:7a:1e:68:f3:ac:
8f:c6:ec:ae:f0:f7:c0:3a:f5:af:bc:14:0d:94:04:
4e:56:49:d3:16:fd:b0:12:e7:30:a0:45:2b:d0:3e:
e5:43:f7:61:ad:15:bd:b2:6c:f7:63:0a:22:ab:97:
f7:de:27:64:be:c6:23:0e:3e:7a:1c:98:e7:02:38:
92:9a:34:13:78:55:43:77:ba:49:cd:84:81:79:47:
9e:25:95:d4:d8:21:85:be:46:4e:58:c0:d8:3e:01:
4a:69:2b:8a:b4:1c:61:1e:89:45:97:03:15:a8:d0:
8a:d1:04:a5:6d:83:56:df:d7:73:32:cb:9e:60:bb:
fb:dc:ac:5a:57:03:cc:ad:36:6a:e9:bc:af:92:14:
05:68:ee:45:e5:f9:17:34:89:fa:43:6b:2d:26:5c:
fb:f8:fb:e5:c0:73:5f:a5:47:45:e8:8a:83:e4:51:
d6:dc:a4:6f:7e:8e:63:8f:46:1b:94:1c:27:ab:f1:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A5:5D:78:41:2A:DD:4F:1A:AE:80:FE:5C:7C:69:AB:94:CB:01:EE
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:49:05:5c:37:5f:c9:46:65:03:71:d9:b0:25:b5:21:ed:31:
56:fc:16:3a:52:d9:bc:12:36:1f:0e:22:64:7d:bf:77:c7:e2:
b8:d5:2d:1b:d0:7b:d0:60:6f:a8:50:83:d7:0f:55:c7:c6:58:
6e:10:9c:cc:54:e8:22:d5:9f:05:c7:2d:00:c3:5a:37:48:12:
ff:89:6f:eb:53:f9:99:4c:8a:97:42:b3:29:f0:e4:5f:03:2c:
d4:3f:50:88:b1:ca:99:fa:92:c4:aa:56:ad:76:56:9c:50:58:
72:6f:94:fb:97:d4:9c:97:bd:d0:e2:d7:7e:22:05:2f:67:5e:
14:04:a2:d8:b3:b7:17:c6:39:d3:fe:c1:b3:cf:da:c1:46:02:
a5:a2:5d:40:eb:e0:5f:e2:9a:23:aa:45:0d:66:99:31:ff:8a:
df:66:08:29:54:b7:c5:19:63:f2:f1:98:e8:e4:57:57:05:98:
ac:d6:3c:60:0b:df:6c:3f:85:cf:c3:8f:0e:5f:2d:af:d1:81:
85:ce:5d:35:31:ae:f2:14:80:5c:37:57:07:2f:1b:9a:19:78:
2b:60:24:12:86:b7:a4:22:09:46:ed:a1:41:57:1a:db:bb:8c:
43:03:68:a8:e0:85:9d:e9:d7:b5:9a:19:69:3e:05:92:ac:28:
d0:0e:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:50 2025 by rpki-client