Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json)
Hash identifier: OSAoPucpoVe4uMVlRyz1ppZVvU2bcQwsOOdPTiBBbU4=
Subject key identifier: B7:07:43:60:79:19:20:2F:D6:B8:75:A3:48:58:EF:5A:EF:D0:CD:A5
Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Certificate serial: 019A70A545C4CD24DDD88F2FC831E9E77B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 02:01:10 +0000
Manifest this update: Tue 11 Nov 2025 02:01:10 +0000
Manifest next update: Wed 12 Nov 2025 02:01:10 +0000
Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: NVacTkxlkrRFV+7Jsg+qm3kSSWB+mXU6XM3s8hKg7Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:45:c4:cd:24:dd:d8:8f:2f:c8:31:e9:e7:7b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Validity
Not Before: Nov 11 02:01:10 2025 GMT
Not After : Nov 12 02:01:10 2025 GMT
Subject: CN=b70743607919202fd6b875a34858ef5aefd0cda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:96:35:1b:b6:0e:98:dd:24:1e:7c:70:21:
9a:71:21:44:53:cf:56:55:40:80:91:d7:ac:6e:78:
33:d9:11:68:b3:a4:87:fc:79:00:1e:22:3d:26:8f:
d2:03:27:00:99:e1:ac:32:26:e3:e1:80:80:01:d9:
88:92:f5:88:69:ed:7a:c7:b7:fc:a2:e8:1b:3b:62:
75:aa:3f:52:7c:61:f7:63:07:2c:44:5f:d7:8d:78:
87:0b:18:6e:18:35:34:e1:98:95:99:13:19:a0:d7:
5f:5d:93:5a:99:e6:b8:8a:10:2c:a9:b0:a9:92:69:
b4:34:a3:61:91:73:e4:a0:85:f3:74:60:d0:56:80:
4d:e0:6b:1d:07:fa:78:f9:48:52:19:3b:68:cd:0a:
eb:47:3a:4c:7b:25:3e:ec:eb:5b:4d:6f:69:90:17:
27:40:84:27:44:c1:e4:20:02:76:b4:8f:dd:c1:d0:
33:cb:1f:ad:12:4d:dd:35:cd:cb:12:f6:67:65:cf:
cb:28:2c:2c:a7:2a:23:bd:50:d0:fb:a6:f4:64:cc:
7a:ed:13:75:1d:36:12:ca:b0:75:dc:10:8d:05:0c:
6d:a3:f2:85:5f:d3:90:9c:b8:71:02:ad:eb:5b:48:
36:bb:32:8e:fe:1a:b2:07:71:ea:07:4e:6d:f4:6c:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:07:43:60:79:19:20:2F:D6:B8:75:A3:48:58:EF:5A:EF:D0:CD:A5
X509v3 Authority Key Identifier:
keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:05:47:19:d5:e3:4e:e4:ef:ee:de:41:a9:f7:23:60:32:38:
af:99:a6:8e:29:e3:70:b8:ce:7b:97:b4:1b:8a:52:b0:17:2a:
47:2e:f7:1e:c0:11:9c:cf:fa:e8:c2:f5:84:c0:50:ce:36:3a:
a9:b8:c9:bb:e8:4c:58:7a:4b:03:c5:9f:29:47:e0:44:b5:99:
aa:f6:50:22:b1:35:7f:43:5c:e3:bf:f6:e3:98:57:89:68:c5:
f6:d3:f5:cf:c6:43:d6:cf:70:97:b7:4c:99:7c:2e:62:be:26:
6f:9d:bb:24:a7:85:37:ee:de:cc:93:b1:1e:f6:7e:49:32:7e:
67:b1:6e:fe:e3:cd:8c:ac:a8:8d:d6:d7:d1:14:3a:26:26:39:
d2:28:ab:34:1f:0f:cb:9f:5c:0c:16:89:d4:3c:2d:a8:a6:65:
fd:ab:dc:32:85:80:a5:ae:34:88:59:5a:75:c3:b0:55:54:e7:
33:3b:db:a8:67:e5:cf:81:12:5c:cb:85:73:5e:3f:50:b9:75:
88:37:bb:2b:bc:fa:82:40:a0:25:3b:43:83:63:d6:f3:44:1b:
85:45:ba:10:a6:fc:6c:30:14:e4:4a:4d:7c:a8:18:56:1c:c2:
e7:96:68:5c:65:3c:3c:c1:4e:b9:78:45:70:04:b5:d3:92:63:
e4:b3:dd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:12 2025 by rpki-client