Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json)
Hash identifier: R1y6QM/U9esu1MB0sZELD0PO9ro1O01JjOWA3yCJhag=
Subject key identifier: 90:F5:25:77:D1:5E:05:55:48:56:62:FF:F3:F0:49:CB:9F:4C:73:0D
Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Certificate serial: 019A71B83B388521F862C7AC7E316E896A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: kAVDBPPJ8SjDAbwtgNi1hl9H3qcWDH9t9YOY9bKrkRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3b:38:85:21:f8:62:c7:ac:7e:31:6e:89:6a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=90f52577d15e0555485662fff3f049cb9f4c730d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:42:7e:be:81:2e:73:7d:a2:cb:c9:2a:8d:
41:88:61:3a:fb:62:59:72:b3:63:15:66:ac:eb:c9:
1a:6d:ac:00:29:7e:a0:49:3e:3b:44:06:ea:67:9f:
f3:c9:10:34:c3:35:94:60:02:75:de:9d:69:01:0a:
0e:21:80:7e:22:c2:41:1a:bf:1d:13:79:db:f4:67:
8d:d8:4b:0d:f8:f0:70:aa:5f:e4:de:fe:4e:c8:cb:
fe:d3:82:55:a1:e9:b0:2c:78:30:49:57:1b:b2:9f:
26:3a:a7:4c:a7:db:54:75:9e:59:23:93:50:2e:50:
9a:39:6f:b7:48:dc:ab:ea:85:d8:f3:da:f7:63:f5:
5b:bc:7c:03:61:61:64:c5:54:6e:22:c4:ee:e8:f6:
12:e8:e1:d6:6d:fd:c9:94:db:d4:0c:0a:75:29:b5:
97:0c:74:f5:09:4b:5b:8d:ad:7c:b1:13:d9:c7:4a:
f6:51:64:bb:e8:a2:e6:7f:ef:90:28:f6:1c:f1:aa:
11:9c:1e:34:72:b5:b2:5d:37:20:5c:ca:61:71:26:
fc:8a:7a:37:0a:2a:ad:da:5f:a8:f1:51:d9:76:4f:
91:3b:d5:da:03:f0:0f:33:03:68:7a:d9:7c:89:31:
7c:83:86:4c:cc:e8:c9:43:02:23:45:38:4f:55:e1:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F5:25:77:D1:5E:05:55:48:56:62:FF:F3:F0:49:CB:9F:4C:73:0D
X509v3 Authority Key Identifier:
keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f3:de:62:83:f6:46:d8:7b:2e:f7:72:92:33:d3:4c:b3:5d:
a4:e6:fb:90:6d:10:80:a0:b4:b5:ba:9c:b0:de:9f:69:04:0b:
66:23:5d:ba:e9:ab:82:75:69:63:65:a9:5c:bc:44:b7:e6:d8:
23:21:50:95:9f:9e:6a:5d:ac:8b:63:a7:4a:6f:75:6f:cc:18:
79:5d:25:fe:3a:d5:55:aa:a4:06:a5:6b:19:38:31:c6:09:5e:
7e:2c:82:2c:15:ad:e8:d9:03:a9:7d:b1:ff:92:bb:0b:9b:fa:
86:6e:1d:d2:b2:58:ac:ed:6b:75:3c:8a:42:07:05:25:7f:06:
b4:77:0a:fa:ee:e6:e7:d7:54:77:56:b7:0c:c3:6d:d2:84:3e:
7b:7e:9a:63:22:4a:33:03:4f:2a:7b:c0:81:aa:48:9c:cf:f4:
92:84:e9:91:4e:b5:64:4a:9a:35:b6:13:91:90:65:e6:70:87:
70:28:42:9e:f2:fe:de:5d:68:85:64:ea:5a:35:bf:a9:30:cb:
3d:aa:fa:2e:c0:09:29:54:e5:6f:d8:7e:14:47:20:cf:cc:e4:
67:93:3b:aa:aa:ca:c3:20:3d:d9:d6:c0:f4:7d:ae:d7:b9:43:
39:d7:30:75:d0:66:00:6c:ea:53:86:8a:4a:3d:48:c9:75:06:
49:f4:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:56 2025 by rpki-client