Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
File: adEXVt0Db1nuEef4Gkh6b90jE20.mft (raw, json)
Hash identifier: +OoGmwNXu+9fOXbofvp5CycKmvp/XzjCuf0grgmdzD4=
Subject key identifier: 23:AA:F3:A3:FD:EA:A0:A8:57:E0:82:C0:5E:35:4E:A1:D5:BD:C6:C8
Authority key identifier: 69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
Certificate issuer: /CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Certificate serial: 019A71B79B6C7C68BCDF7E3E49C44741107E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
Manifest number: 0931
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: adEXVt0Db1nuEef4Gkh6b90jE20.crl (hash: ElIVVBKP96KbaL9UsXa0oool8hQ+WTUg58tOXssOB6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9b:6c:7c:68:bc:df:7e:3e:49:c4:47:41:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=23aaf3a3fdeaa0a857e082c05e354ea1d5bdc6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:cd:b4:89:63:15:3f:f3:33:44:11:e5:5d:
8e:10:d5:0e:8f:73:73:52:4c:90:72:b5:08:84:bf:
f3:6d:17:a9:be:7a:b8:45:14:95:38:3b:1c:cc:45:
87:64:0a:8d:36:bf:a9:1e:0c:9f:c6:a5:cd:54:0c:
28:33:fc:d5:bf:7e:80:83:39:73:02:d2:1d:99:85:
d2:ee:c4:08:4f:21:c6:61:15:79:2c:3c:55:e6:3e:
1d:a2:b5:1d:3d:c0:11:bc:58:b6:b4:a0:65:ed:50:
a9:a1:ea:4b:00:65:7b:a3:9a:a1:61:e7:2c:12:3f:
3c:6f:a6:e7:40:9b:03:6f:69:93:0c:88:df:16:a4:
0f:a9:33:db:d0:92:c6:93:b7:8e:bd:0b:aa:a7:9e:
35:74:25:93:5c:0b:70:d3:58:27:f9:e0:60:3f:49:
38:81:5c:d1:58:0d:5c:f8:e3:44:e5:28:52:fd:94:
63:46:cf:ab:77:a6:db:d3:81:ed:7e:23:dd:f8:59:
74:17:65:a2:6b:1d:59:6f:fb:21:26:02:13:20:ce:
54:35:94:c6:e6:08:6a:02:25:1b:a0:9c:d6:4a:46:
f4:15:f0:8e:d1:2e:1c:c9:6e:40:e3:19:53:f0:04:
7b:42:a0:90:fb:98:3b:2e:c7:07:40:47:f5:b9:a9:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:F3:A3:FD:EA:A0:A8:57:E0:82:C0:5E:35:4E:A1:D5:BD:C6:C8
X509v3 Authority Key Identifier:
keyid:69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0e:cd:0d:1c:0e:0b:83:b7:65:09:90:35:78:48:fb:7f:e3:
60:71:4a:ec:76:a1:df:4b:2d:9d:53:24:c3:31:2d:49:f7:2d:
84:80:36:6a:9b:ba:12:45:72:3e:57:39:a5:52:ff:ee:24:89:
0d:61:c6:19:8d:93:de:91:e5:ca:05:b4:69:17:03:e7:34:97:
c9:b5:8b:f2:6c:de:48:24:3b:fc:b5:0c:60:9f:73:c3:25:ba:
3c:02:02:63:22:f9:c0:ec:1f:33:fd:a4:69:8c:c6:ef:ab:3b:
29:a8:15:47:b5:57:8b:b2:16:82:f1:92:a4:f6:bd:bc:11:92:
62:49:41:9c:e0:d5:34:5a:ad:b3:f0:79:ca:fe:58:b5:66:46:
45:0f:25:65:f1:b1:47:6b:1c:c7:2c:f6:cb:8e:04:c3:15:88:
a8:d9:88:d0:f2:0b:3e:a7:3f:70:c0:13:b0:7c:9a:be:a1:fd:
c1:12:b9:92:21:81:ee:fa:10:25:2f:45:39:2b:57:cc:ac:9b:
b4:62:75:fb:b3:69:09:85:19:d2:87:67:9b:14:4b:3e:0f:e4:
9d:96:37:6b:9f:fc:71:d6:a4:52:39:50:80:68:81:d3:e9:c7:
ae:31:be:89:62:1c:01:43:c5:f5:9b:0e:cd:6f:cc:12:14:cd:
2c:7e:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:52 2025 by rpki-client