Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: 4y/fvUbVS4pxQbbn6Lvx3w43CQtsGYHdbSTq5y4jsHw=
Subject key identifier: DE:69:6C:FC:ED:32:FD:4A:DD:98:4E:5D:43:87:66:2D:31:F1:0D:00
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 0199240D6BF13FA1CCE947D9A007CE54B10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 15AC
Signing time: Sun 07 Sep 2025 12:01:23 +0000
Manifest this update: Sun 07 Sep 2025 12:01:23 +0000
Manifest next update: Mon 08 Sep 2025 12:01:23 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: d5ry5vxrhCb6fiWAFS1IddZ+Nh43fHdT4IMfjvFoW58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:6b:f1:3f:a1:cc:e9:47:d9:a0:07:ce:54:b1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Sep 7 12:01:23 2025 GMT
Not After : Sep 8 12:01:23 2025 GMT
Subject: CN=de696cfced32fd4add984e5d4387662d31f10d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:9d:d7:ec:24:b9:1d:88:f8:f7:0b:60:1e:
0d:02:e6:9d:a1:b1:79:de:a4:3b:52:00:b3:ab:65:
37:5b:c2:80:58:e9:91:4f:b9:e6:ce:e6:4d:30:d8:
fc:47:2c:9e:cc:b9:6d:0f:97:cf:b4:1e:83:2c:a2:
c6:c4:2b:b9:48:b1:42:f3:0d:83:45:93:61:dd:c2:
2d:ce:de:a7:79:21:8e:de:26:56:d8:38:a7:4d:18:
7c:2c:7d:eb:9a:02:0b:b1:ef:f5:f5:8a:10:77:8d:
70:a5:1e:22:20:01:50:89:d1:e0:71:5f:b5:02:3b:
e7:25:6a:da:e8:6d:54:96:db:c2:77:d5:ba:f3:af:
59:69:de:6b:1d:89:ab:14:1d:7c:99:07:06:39:91:
af:f0:40:1d:16:36:03:4e:37:a7:b1:1f:1c:f3:4b:
9a:fe:34:e0:1e:d2:ac:a6:0b:45:81:b9:8e:0d:0c:
15:5b:86:85:10:b8:29:51:4f:57:f3:7f:77:3d:a5:
d9:dd:63:58:60:6e:ae:9e:fa:f5:9b:c6:bf:c8:86:
29:15:94:20:71:e5:7a:86:c7:e4:e1:de:16:f1:8f:
11:18:20:21:2a:f2:b8:7d:27:e6:f6:64:3e:0c:65:
19:33:b1:63:59:45:43:a3:84:e5:7c:94:3e:38:44:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:6C:FC:ED:32:FD:4A:DD:98:4E:5D:43:87:66:2D:31:F1:0D:00
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4c:57:1c:48:07:1a:ed:85:23:fd:99:bb:0f:ac:de:50:7b:
04:96:45:17:67:69:72:04:60:58:23:a2:8a:74:27:fa:ab:0c:
b6:f7:3c:fd:ac:a0:13:a5:0a:15:94:29:d5:3e:0c:20:b3:bd:
7b:0a:ba:a1:35:d7:bb:18:6d:7b:43:96:00:f9:45:f7:d8:c0:
5d:a3:7a:68:db:74:e0:d2:eb:4c:51:f9:8e:93:f5:64:30:2f:
66:f7:c0:14:cf:98:6a:a8:bd:e4:24:3b:6c:92:42:13:dc:a2:
86:81:36:e2:0d:7d:b8:e0:02:fd:31:a5:54:70:b4:77:a4:4e:
73:d9:b1:5c:0d:39:9c:60:2d:93:6c:5d:f8:40:eb:24:d4:d5:
4b:aa:40:58:7b:56:07:1f:72:cc:26:58:15:b6:10:55:fc:57:
b0:af:99:a3:35:1b:3e:6b:9a:09:28:2b:57:31:29:c8:17:34:
7b:a2:46:43:80:27:13:cd:74:ba:38:8d:0f:13:24:a7:d5:b1:
56:70:e9:07:8f:2f:5e:25:b2:c0:a8:08:65:50:19:1d:0d:d9:
ab:50:bd:f2:79:e9:1d:e9:65:a9:d5:28:b3:6f:6d:a5:af:93:
fa:3d:ab:57:44:05:b6:a7:78:91:b3:93:ff:83:7c:b6:ec:33:
54:cd:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:59:15 2025 by rpki-client