Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
File: rxFguAPrImHBP4yK3JU9O1r7V8w.mft (raw, json)
Hash identifier: r+5+UO6srqdtfntNvk6At2cbGYzfghIQLHPYWnWSujY=
Subject key identifier: D7:81:61:C9:7D:79:11:65:59:EB:B5:21:9A:5D:61:83:DD:9E:45:C4
Authority key identifier: AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
Certificate issuer: /CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Certificate serial: 019A72CA41B794BC06F3ECC92FD523926B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
Manifest number: 023E
Signing time: Tue 11 Nov 2025 12:00:48 +0000
Manifest this update: Tue 11 Nov 2025 12:00:48 +0000
Manifest next update: Wed 12 Nov 2025 12:00:48 +0000
Files and hashes: 1: rxFguAPrImHBP4yK3JU9O1r7V8w.crl (hash: xZBhDpD591rPu7vfICB75igHsz4Iqab1LzCVdPjjaiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:41:b7:94:bc:06:f3:ec:c9:2f:d5:23:92:6b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Validity
Not Before: Nov 11 12:00:48 2025 GMT
Not After : Nov 12 12:00:48 2025 GMT
Subject: CN=d78161c97d79116559ebb5219a5d6183dd9e45c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:7b:77:7f:46:ec:bb:83:06:28:a0:a8:7e:
35:54:61:65:6b:ea:63:43:8f:25:1d:88:27:64:a9:
36:ce:ee:01:6d:83:34:f3:9f:14:6a:1f:b1:e6:9b:
8f:ae:9f:81:35:60:ab:e9:49:b3:51:e2:5f:0a:69:
79:4d:70:b1:ab:2e:b1:b9:79:32:c0:fd:4b:a7:c8:
71:3e:6a:bd:ad:f4:25:64:42:77:b8:9e:aa:56:9f:
16:b8:0e:13:fd:33:c8:e6:20:48:ac:91:c1:f1:39:
94:9c:a1:2e:2d:c4:26:5d:46:02:31:bb:f7:15:a5:
b6:41:6f:ba:50:80:5e:7b:87:e6:39:78:50:d7:77:
7e:aa:68:0a:b4:22:1c:05:85:53:2f:d3:bc:08:4a:
29:e2:ca:92:3c:59:9e:7f:5d:f0:c7:8e:f2:c2:72:
c6:4b:c9:1f:77:21:1b:39:0d:a9:0f:08:67:49:9d:
0f:66:f8:55:ab:62:49:12:e9:ee:d7:d0:1e:8b:22:
59:b5:4a:7e:56:c6:f5:c5:76:45:f8:0b:18:08:23:
f6:b2:2f:db:28:82:ed:b4:f7:80:47:3e:80:19:82:
d2:92:47:c4:f1:78:61:60:40:af:3c:a7:11:d5:38:
e8:3e:fd:ee:06:aa:87:07:32:68:29:7c:af:e9:38:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:81:61:C9:7D:79:11:65:59:EB:B5:21:9A:5D:61:83:DD:9E:45:C4
X509v3 Authority Key Identifier:
keyid:AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f0:13:3b:68:76:7a:f9:b1:63:55:0d:e4:ab:9b:1e:7f:18:
a3:4b:7d:fe:c5:29:b5:28:9f:da:fa:cb:7b:a4:12:c3:3a:fd:
ef:b8:f7:80:1a:6b:ce:a9:00:9c:c4:62:8a:8a:b6:e3:5d:2e:
c4:14:7d:62:bb:aa:b4:78:16:19:dc:11:3e:3d:59:ef:bc:34:
b9:f8:49:48:3d:46:b7:b3:a7:ed:77:0e:7b:c9:0f:1b:9e:29:
69:c8:25:e7:6d:ce:db:21:39:25:92:33:3a:1d:6a:4d:22:c1:
7f:3b:50:71:0d:32:d7:23:a8:8c:f8:c7:80:d9:7e:1e:78:bf:
de:20:fd:e2:fa:ed:fb:7c:38:1f:ef:c0:8e:7c:79:a9:4b:81:
e9:0a:c2:a4:35:2a:d2:49:e0:5d:d5:68:8e:07:21:09:2e:c0:
4f:fe:55:ea:fc:85:04:59:5a:18:4c:8c:4d:0a:d8:01:23:e2:
6b:8b:71:da:73:21:56:82:17:70:e1:89:06:e7:db:14:6f:af:
ff:aa:67:68:83:c2:0d:68:21:f7:15:aa:7c:e8:ba:28:19:61:
f2:f2:22:50:82:5f:e2:5d:29:37:2e:78:70:76:48:a3:69:63:
46:04:fc:36:10:9e:b8:09:89:00:23:28:41:5b:96:88:27:5c:
b8:2c:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:48 2025 by rpki-client