Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
File: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json)
Hash identifier: zfJDuKGktWwQda0VLfLvzu9F3lAWVILB9ffdrMHy3XY=
Subject key identifier: 67:AC:B9:C5:F6:C2:11:18:8B:F8:A3:56:F0:09:91:FB:BC:1C:77:21
Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
Certificate issuer: /CN=44b437b31b50670384fa5d20d8924d611b91633e
Certificate serial: 019A7112DEE28A2AFF2949C67361F07AEA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
Manifest number: 061A
Signing time: Tue 11 Nov 2025 04:00:53 +0000
Manifest this update: Tue 11 Nov 2025 04:00:53 +0000
Manifest next update: Wed 12 Nov 2025 04:00:53 +0000
Files and hashes: 1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: W/b8iPcWPnsEsCHKEqUXK3t9mSyG8d1pvHelfbmRkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:de:e2:8a:2a:ff:29:49:c6:73:61:f0:7a:ea:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e
Validity
Not Before: Nov 11 04:00:53 2025 GMT
Not After : Nov 12 04:00:53 2025 GMT
Subject: CN=67acb9c5f6c211188bf8a356f00991fbbc1c7721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:64:aa:32:e9:f2:35:a4:77:d2:39:c4:12:
69:b9:7e:f8:b5:78:ee:86:9d:2c:78:90:ec:9a:b5:
9f:c7:74:75:43:68:ca:25:e4:70:a9:1f:00:16:e5:
8a:a4:a0:13:b5:fe:b8:34:b5:06:ac:08:52:04:ce:
bb:3b:6b:f0:28:ca:7d:d5:ac:e2:b2:8b:7f:e7:22:
99:43:b5:ab:8d:b7:2e:67:b4:4b:5f:47:67:2b:3c:
b7:6c:1a:48:62:97:b1:90:c1:d4:20:8f:be:83:62:
b8:8a:ae:a7:fe:00:d1:ef:b0:fb:11:d4:87:65:a0:
a9:2f:1a:93:9b:3e:f9:bc:22:8c:69:ae:de:9b:b7:
78:67:a6:d1:52:e8:c5:72:6b:ff:44:78:4c:e9:2c:
e4:36:62:0c:02:31:05:c5:7a:98:2c:24:a9:02:e2:
5e:fa:4f:fe:3a:5e:33:1f:6a:6b:29:84:e1:78:cd:
6f:27:32:98:3b:dc:53:34:f3:fe:b2:10:37:63:04:
ad:27:e8:eb:ef:75:69:82:ff:43:1d:52:9a:ce:79:
b1:85:19:ef:4d:c9:4c:7f:23:65:fe:dc:4e:d5:39:
62:3e:b8:fb:b6:b2:6e:fc:88:62:2b:96:2a:69:7c:
7a:aa:17:1b:91:ed:4d:61:00:f0:ce:92:25:79:08:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AC:B9:C5:F6:C2:11:18:8B:F8:A3:56:F0:09:91:FB:BC:1C:77:21
X509v3 Authority Key Identifier:
keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e1:86:76:20:db:e4:d5:a5:81:3c:ff:98:aa:32:8a:70:1a:
e7:6a:4f:5d:a8:fc:c9:46:c0:f0:2f:0e:81:ff:63:ed:88:e1:
aa:61:9a:0e:d6:14:be:8f:40:ef:4c:b2:70:27:6d:df:87:ef:
0b:64:71:8e:31:f8:e4:49:c9:68:d4:5d:b2:cd:a3:fb:e4:0a:
84:23:19:e6:0d:b6:05:0d:d9:58:0d:f1:86:f9:4f:aa:02:a9:
d8:f2:9c:47:11:5d:ca:5e:9e:76:3a:e2:b0:cb:64:dc:8e:30:
24:92:62:1a:81:29:4e:53:f3:67:34:69:92:fe:aa:f7:f9:c9:
76:8b:3f:7e:c1:c3:ad:b1:c7:e2:73:af:13:f3:6a:30:80:35:
a9:3f:f6:77:3e:22:2e:b6:90:8f:05:77:a6:fa:3e:18:b1:07:
fe:cc:41:c9:01:3f:a5:4c:58:50:09:30:18:11:be:59:27:86:
a5:c7:c8:60:cd:86:94:b3:fa:5c:b8:df:1a:d3:12:51:22:af:
46:f0:12:4a:57:90:73:2b:fe:1d:59:af:f3:34:3b:99:57:c6:
88:60:81:ee:e2:c6:f3:9c:88:66:37:1c:03:65:b6:d2:90:1e:
39:dd:3f:b0:12:af:44:6b:f3:4d:a2:ba:9a:a5:d6:b7:2b:d9:
d4:38:7a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:16 2025 by rpki-client