Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: dHr/+l+LBJlZ3L271cawVExQRNh8KlYKIyEt2ivm2Zw=
Subject key identifier: 74:A5:A3:A9:3E:09:6B:61:D6:B4:BB:5C:45:AF:D8:78:F2:B4:D1:DF
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 019A71B88A801D150F738F220A2823D02FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 11F8
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: mGBeKa6vW1O8MEosTSK/ygeiFplD/BCN6Uft6PirdR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8a:80:1d:15:0f:73:8f:22:0a:28:23:d0:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=74a5a3a93e096b61d6b4bb5c45afd878f2b4d1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:c8:2f:b9:30:63:b7:e2:ae:fb:c2:d8:08:
36:8e:bd:92:c7:37:10:9a:3a:ad:4b:9f:75:09:30:
b7:95:d4:71:07:a1:49:4b:a8:13:6e:f3:3c:ff:1b:
76:3d:59:d5:91:ab:92:ca:eb:0a:23:5b:c3:1c:4f:
01:dd:9d:46:52:82:21:0e:ec:39:ef:ed:0c:1e:9e:
a2:6a:94:32:14:5d:02:52:7c:f4:97:72:ab:8d:b2:
09:1d:d8:43:82:f6:50:00:76:c9:69:a2:44:d4:8f:
90:8a:ea:db:5f:94:a3:91:37:65:95:d6:85:65:bd:
f0:ba:f7:04:7d:e4:1c:9e:66:cc:07:0a:d7:f5:38:
38:79:a0:8b:6e:ac:cb:3f:5f:2e:18:c6:2b:5b:26:
6c:82:91:64:95:10:ea:68:f2:21:a3:0e:0e:a8:b4:
8e:01:3d:86:b0:fb:32:9d:bd:c6:1e:d8:f5:9f:07:
fb:92:f2:5f:e3:a2:b2:b5:4f:21:08:37:d3:05:58:
52:2f:ae:1c:a4:e9:fa:c1:73:61:29:95:e7:c1:61:
d4:32:c1:6a:0e:d0:19:05:e3:f3:64:59:a2:c2:aa:
36:bd:e4:07:79:a2:8d:02:67:8a:94:4d:8b:88:21:
27:e4:ff:34:df:77:df:25:8b:a0:b2:50:0b:4b:31:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:A3:A9:3E:09:6B:61:D6:B4:BB:5C:45:AF:D8:78:F2:B4:D1:DF
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:53:0d:9c:66:d6:59:71:0a:2b:67:55:bd:b5:48:19:a1:e3:
35:b7:5d:05:80:03:ff:0b:f9:c2:26:3d:ba:fc:11:ae:37:8d:
f4:ea:19:8a:f0:76:cb:63:85:7f:52:b9:69:83:37:ba:27:9e:
eb:8f:e0:a6:1c:b1:e5:db:b3:c1:a5:86:2c:8e:a4:cb:c9:7f:
55:1b:66:c0:46:c6:61:62:64:32:58:3a:08:9a:61:c5:de:d3:
29:ec:41:d3:c4:5a:9b:1c:d2:37:c7:7a:7d:d3:32:0b:ba:88:
7f:8f:ab:15:5e:dd:4b:5d:4e:bf:d2:02:7d:26:4c:18:ef:29:
04:9b:5c:b0:31:b5:a4:7b:52:25:53:a7:f3:a7:51:e6:4b:b2:
16:a3:30:22:24:b7:53:00:f4:67:ce:40:a9:4f:69:2e:36:85:
04:01:83:d2:8d:d0:60:bc:e6:ea:f6:a7:9a:bb:a4:dc:28:21:
8e:85:cb:b5:7b:d4:35:4b:24:28:1d:fb:bd:e1:22:bd:96:be:
96:64:f1:94:b5:15:ab:44:89:09:e2:8f:d1:4f:70:8d:9d:e6:
3c:c2:e6:d1:14:bb:65:0d:93:3e:70:f1:8d:e0:e9:f3:89:ac:
2b:2e:7b:32:db:36:f1:66:31:84:85:6e:c2:5d:e6:16:fd:cd:
84:cb:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:43 2025 by rpki-client