Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: p8cnDxjNTn1gSTwG0ac6nEmuE1HtwpuZPw8RZeIgY6M=
Subject key identifier: D8:31:21:35:68:C5:5B:BE:D1:BB:10:7E:82:3B:D2:83:54:D1:6A:54
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 019A71B91825402ABE66EF610A812A6426FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 0A51
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: wpChd/ifSZRZCYfRTUKvV1kDg0BL5Wqbl9tWKXH2K8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:18:25:40:2a:be:66:ef:61:0a:81:2a:64:26:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=d831213568c55bbed1bb107e823bd28354d16a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:85:2e:b0:75:12:ae:29:bd:dc:5d:85:2b:
f2:38:de:79:23:97:95:c6:88:de:9d:82:89:27:cb:
4d:bc:39:0b:63:c7:cd:62:d3:35:ca:92:48:f7:36:
00:16:cd:16:6f:8a:87:37:82:63:fc:30:e0:55:d4:
7f:0f:27:2b:48:34:32:7b:f7:77:a0:e1:f0:0c:f1:
fe:85:19:bf:39:a5:48:58:49:bb:b6:2c:32:d3:fe:
d9:0c:5c:6c:5a:91:42:c3:ab:68:c0:35:00:fd:20:
c3:f5:92:c9:ae:0f:d3:0c:4e:3b:82:84:51:75:04:
20:10:df:74:b3:6c:ab:73:d4:9c:44:39:96:b2:b6:
e5:40:97:65:ac:35:bf:85:69:2c:90:fa:f8:95:95:
3d:f1:a0:1c:18:01:e8:34:1a:55:48:1b:97:e8:de:
61:f9:0f:36:78:12:34:c8:3c:8f:c0:3d:cd:25:86:
46:1f:22:e9:56:7d:59:67:49:8b:4d:19:25:9a:6f:
0f:ba:90:fb:4d:81:24:c0:49:d7:17:62:94:4b:bf:
1a:9c:b3:b2:e6:4a:25:51:76:55:3d:f4:bc:79:5b:
17:5a:bf:28:3a:27:36:e0:58:68:18:2f:4c:e6:52:
2b:15:ae:12:05:89:69:04:50:73:f5:6d:32:0b:99:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:31:21:35:68:C5:5B:BE:D1:BB:10:7E:82:3B:D2:83:54:D1:6A:54
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:de:be:1e:80:66:16:fd:41:4b:2e:34:e3:94:ae:82:40:8f:
89:5a:3b:fa:ee:60:13:e4:d9:85:20:30:c7:f2:8b:b4:d1:36:
8b:c0:72:62:93:68:79:2d:e7:77:a2:f9:05:bc:a3:9b:bb:a3:
8f:f2:80:fc:c4:60:42:24:34:07:8b:47:9e:e9:83:12:64:d9:
d5:9c:3f:81:0e:6b:f8:d5:cd:2e:c2:28:84:f7:b5:eb:84:8e:
d5:88:13:a3:fa:a5:92:41:84:be:8c:09:03:3d:24:0c:e6:4c:
3d:e2:83:88:fe:78:5a:78:db:52:ad:f9:a6:84:bb:06:ea:37:
32:b9:a1:f5:09:6b:ef:cb:a2:d9:a4:69:1e:42:a8:6b:2d:a6:
02:cc:6c:51:30:8b:8e:1c:15:14:e1:49:97:3e:e4:b7:d9:0b:
bb:b0:6f:d7:0c:51:a2:e7:fe:58:0e:d2:d2:cd:bd:e1:2e:d5:
c2:d6:59:78:19:3c:f9:e8:31:42:46:fc:d9:0f:25:b4:55:6e:
36:28:40:5d:61:8c:1e:9b:cb:cd:c8:88:da:27:21:aa:c2:fc:
16:46:23:05:c9:6c:e2:c4:0c:7f:08:92:62:66:3d:1a:ff:4f:
56:c4:2e:e3:73:26:d9:c2:6e:bb:cc:63:95:43:5b:ed:40:d0:
4c:21:f0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:09 2025 by rpki-client