Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
File: m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json)
Hash identifier: vR3mtUm4oIEPUa9pQjElKwgcK5eVIFM/xNlTPrPLmJc=
Subject key identifier: B7:F4:FD:73:54:06:E8:6F:C3:94:C5:C1:57:2A:50:52:35:56:58:62
Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
Certificate issuer: /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Certificate serial: 019A239C526105607937E8BDC5E65173E740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
Manifest number: 1249
Signing time: Mon 27 Oct 2025 03:00:38 +0000
Manifest this update: Mon 27 Oct 2025 03:00:38 +0000
Manifest next update: Tue 28 Oct 2025 03:00:38 +0000
Files and hashes: 1: QEBRn3jAI_lp2ryrgLPg_-qD0_w.roa (hash: 4DrVU+ddF+HESS/HTUefXV0kpzIAWWdGYlZL3aihd10=)
2: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: cgA8+vdsPilkrSwy1NMp0jedDeK/6sCvDSeD6ESl1Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:52:61:05:60:79:37:e8:bd:c5:e6:51:73:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Validity
Not Before: Oct 27 03:00:38 2025 GMT
Not After : Oct 28 03:00:38 2025 GMT
Subject: CN=b7f4fd735406e86fc394c5c1572a505235565862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:15:d5:51:f2:85:4c:2e:02:49:73:e1:fb:
c0:a4:57:2d:c0:ae:30:34:5f:a4:42:d2:f4:39:b7:
b6:70:a9:df:26:87:5a:e3:98:e1:04:1d:f5:bc:3e:
71:f4:f5:09:c7:7f:1f:59:c6:a4:e7:32:7c:82:fa:
a8:60:46:a0:2d:75:58:d8:e1:61:0a:a8:62:3a:fb:
25:59:3b:c5:ff:7a:df:1f:6e:5c:ac:17:d9:2c:73:
ac:34:bf:8e:7d:f0:12:98:45:2e:3f:41:1a:79:91:
9b:8b:88:5b:64:57:6c:6f:a6:39:6e:b4:28:3d:6c:
48:39:a2:7a:4a:b4:9a:17:01:44:a8:5d:48:9a:77:
7a:57:16:9d:17:c9:51:36:61:de:74:49:78:f8:11:
c9:df:4f:25:3b:a6:b5:ec:7a:2b:44:55:48:f7:d3:
b5:74:ea:f9:44:02:9f:85:d9:1a:bb:94:8f:c8:4b:
d2:0e:d4:d2:8e:18:81:b7:2a:33:48:87:f8:2e:07:
1c:d5:b7:8c:62:dd:63:4f:24:b2:0f:b0:5e:a9:98:
4b:7d:c3:e5:3a:0b:fe:aa:65:44:4f:e5:c9:75:8a:
24:28:66:8c:a4:60:ab:ec:7d:ef:49:05:06:73:87:
20:eb:80:3a:b0:cc:b2:a8:e2:d6:3b:92:fb:65:f3:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F4:FD:73:54:06:E8:6F:C3:94:C5:C1:57:2A:50:52:35:56:58:62
X509v3 Authority Key Identifier:
keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:77:67:92:5c:78:b3:09:29:19:d5:d7:22:ab:7e:2f:72:e1:
d4:65:5a:8d:43:43:fe:65:b3:90:0d:11:99:20:bf:c9:b6:f5:
bf:b9:40:18:c9:f6:4b:df:6c:61:89:3a:2a:c8:49:86:3e:9e:
bb:c3:f6:cc:63:46:4f:62:49:89:b0:de:31:f3:1b:bb:77:b9:
8a:1a:ef:e6:66:17:fd:70:69:ae:45:50:49:95:a6:3c:ac:22:
30:ad:fb:f1:de:a9:17:7c:37:4e:51:e1:8b:bb:d1:a5:d4:49:
cd:b8:54:2f:7f:9b:fa:73:c1:d6:9a:5c:0f:ef:ab:7a:a2:9d:
f2:c1:8f:4d:c8:61:5a:82:c3:34:4e:6a:9f:1d:40:88:9b:06:
fc:ec:a2:ed:91:b3:b7:fd:20:ff:cb:36:f2:a8:2b:a0:8a:23:
b0:a4:66:7d:f7:d9:c9:9c:35:e3:8b:2d:4c:9c:c4:cc:7a:af:
d2:33:fd:84:17:57:e5:90:1b:ec:16:a0:be:c2:a2:19:86:20:
cb:cf:d6:06:68:11:9e:87:d7:d9:8d:40:00:63:1f:54:45:ca:
dc:5a:cb:06:dd:cf:3f:64:4c:5e:cd:d0:af:98:da:48:5e:dc:
1b:42:54:90:bf:b2:12:66:c4:e5:d9:33:fb:1a:11:03:d5:04:
75:ba:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:55:26 2025 by rpki-client