Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
File: xljr82IzPBhfPBI8Qr5En9KneTg.mft (raw, json)
Hash identifier: xMp7Qy0gXpHJbaeDikkgJl28cvdcdlxmY0Xc2PFAeLY=
Subject key identifier: F7:3A:3F:B3:C3:90:41:A6:F5:66:31:6C:2D:E8:E7:B9:CC:27:AE:34
Authority key identifier: C6:58:EB:F3:62:33:3C:18:5F:3C:12:3C:42:BE:44:9F:D2:A7:79:38
Certificate issuer: /CN=c658ebf362333c185f3c123c42be449fd2a77938
Certificate serial: 019A71EEDA0C7D5BAD47885042308D1DC2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
Manifest number: 46
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: xljr82IzPBhfPBI8Qr5En9KneTg.crl (hash: JimCMGo0tDPvhllaPeEenl1Ozd6aH1oYqeD33ElUIoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:da:0c:7d:5b:ad:47:88:50:42:30:8d:1d:c2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c658ebf362333c185f3c123c42be449fd2a77938
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=f73a3fb3c39041a6f566316c2de8e7b9cc27ae34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:3c:c5:0d:5b:7b:d9:d2:de:ea:77:ca:ab:
54:b7:93:6b:d9:74:4a:c8:e4:ed:b4:d6:f2:bf:82:
dc:57:fb:c4:89:61:70:fe:a8:53:5c:67:63:bd:99:
77:27:84:d6:10:69:c8:8b:1b:5f:59:8a:5c:d7:b8:
99:84:22:04:66:42:2e:f8:77:18:3e:fa:ee:8c:4f:
f4:98:a4:94:96:8f:d4:a1:a8:ce:07:13:61:24:3f:
6d:9d:9d:e6:10:6a:c9:40:89:b0:ce:95:da:8b:fd:
79:cf:d5:37:52:3a:0e:ee:69:27:2d:45:79:75:dc:
22:fd:8f:e0:e6:40:01:a5:77:d8:a2:2c:4c:cb:ff:
6a:48:c9:1c:5d:3f:e4:d1:d9:a3:aa:35:4b:2c:4f:
f3:72:7a:bd:ca:0f:e2:f5:6b:79:8f:f0:7b:f6:b5:
ec:cc:61:39:bc:51:5d:55:d0:82:38:25:bd:e2:46:
46:d8:1b:4c:0d:b3:93:af:88:4f:1d:ff:c3:44:91:
11:c0:88:13:ec:dd:c2:ad:1e:3a:86:f4:6f:a5:ea:
21:1c:ea:ff:81:2a:0a:37:01:bf:c8:f1:19:04:5b:
06:41:d2:78:e4:10:e2:03:a1:80:5d:cf:79:c7:61:
3a:10:0b:fc:a2:ec:60:41:42:00:e9:99:5b:9d:16:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3A:3F:B3:C3:90:41:A6:F5:66:31:6C:2D:E8:E7:B9:CC:27:AE:34
X509v3 Authority Key Identifier:
keyid:C6:58:EB:F3:62:33:3C:18:5F:3C:12:3C:42:BE:44:9F:D2:A7:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d3:f6:8c:54:34:7c:0c:a6:93:a8:b9:81:3a:60:c9:95:72:
70:b9:48:02:71:e9:02:c5:bb:25:13:c2:49:92:57:6e:30:a6:
41:5d:7e:e3:79:82:8c:99:80:94:60:ab:2d:cf:74:5d:62:da:
dd:28:25:e1:b4:2e:ba:de:24:7c:5b:78:9d:5b:dd:73:dc:12:
14:9a:08:7d:f8:a5:4d:b5:49:8b:42:25:35:ce:44:2d:ca:b4:
b5:76:49:77:7d:cc:ce:3f:e7:f5:92:4d:6a:46:af:df:58:4e:
07:76:db:b8:5f:80:cb:75:bb:a4:06:4b:62:11:81:83:cb:90:
e9:67:2d:23:88:1b:40:b6:75:39:61:b2:8e:d7:53:93:bc:08:
28:b8:ef:d4:ad:17:80:59:bc:03:84:d8:5a:ff:25:e7:a7:01:
67:96:dc:0f:2e:8b:be:f1:bc:2c:38:a4:d0:bb:e3:21:a1:05:
32:8c:b0:49:af:35:84:f0:dc:4b:80:73:08:ae:19:71:33:61:
2c:e3:54:37:e0:88:40:c4:ee:49:04:04:73:37:07:bc:a2:a6:
6e:49:73:3e:eb:59:c5:25:b4:c0:e2:3b:5d:bb:95:75:4a:86:
37:53:28:d2:0e:46:b6:7b:3b:8c:a7:15:9e:ca:27:fa:a9:4a:
37:aa:f1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:46 2025 by rpki-client