Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File: p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier: Ep6rcv1CRECPQTQTf1iMNNmKe2lnKvNKlDxDlNEVQmw=
Subject key identifier: A7:DF:03:23:B6:20:8F:4E:3B:14:35:0A:FB:B8:50:3A:77:3B:45:2F
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer: /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial: 019A71B89D9B1153C2D6C5997BC20426E781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: JlhcjOQhnk+XSg2pHu/5okAW6RIlh1ggwl6lCyOr8ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9d:9b:11:53:c2:d6:c5:99:7b:c2:04:26:e7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=a7df0323b6208f4e3b14350afbb8503a773b452f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:f7:a1:c2:1b:35:9a:0c:a4:c1:3e:8a:ec:
70:d3:5c:2f:a5:bf:ce:4f:b1:38:d0:d3:fe:ae:45:
26:72:d1:51:9d:36:bc:b1:47:a9:99:bf:6d:c3:56:
0b:2b:61:3b:7e:8b:6c:3f:b0:9e:41:24:6d:5a:e3:
61:c9:69:d5:2c:52:28:41:11:f3:58:f3:d1:68:2e:
48:c0:92:2e:55:bc:de:20:18:af:2f:ee:e4:b7:27:
e9:cb:42:3c:82:d5:5a:52:51:15:e7:e5:66:db:33:
d7:8e:a5:68:d1:54:ac:17:6c:16:f5:db:f1:d2:90:
96:ef:fa:11:c3:81:4b:2e:0c:a4:29:1d:0d:c4:ac:
0c:d1:a3:84:26:9a:0d:b7:70:3c:a5:f4:ad:32:50:
b5:f3:e6:5c:8f:68:16:ee:2c:29:fe:3d:66:5d:40:
c7:72:d5:8d:e7:b6:49:57:61:62:c9:a3:fd:0c:d6:
3c:23:58:aa:19:01:d4:5a:2e:a4:08:95:4d:3b:72:
b6:60:ac:e1:42:60:0b:a8:fa:be:a1:c9:9d:15:d1:
91:e8:fd:63:90:d9:7a:07:cf:cc:dc:ec:3d:e9:04:
4b:43:3b:45:55:3e:98:9d:0e:0b:7e:92:10:3b:33:
84:a4:d7:92:c2:21:d7:e6:ed:6a:7b:8c:98:5f:d6:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DF:03:23:B6:20:8F:4E:3B:14:35:0A:FB:B8:50:3A:77:3B:45:2F
X509v3 Authority Key Identifier:
keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e1:5d:ed:83:0a:83:a4:fe:cb:77:b2:43:11:89:bb:3b:67:
34:af:1c:c8:cf:06:7a:59:97:af:e5:08:e9:a2:da:32:9e:53:
99:12:af:8d:29:59:47:79:51:1b:7b:c3:9b:ac:b1:68:a8:9d:
20:64:c2:f6:3a:7a:96:36:8c:a8:0e:b7:1a:f0:20:d9:3d:82:
fa:21:c9:10:6f:94:bb:3f:b5:70:b6:34:06:14:55:88:09:c9:
27:65:31:e0:45:d9:be:51:94:84:be:e0:19:9d:e5:c9:7d:13:
4f:c0:12:10:3a:2a:e0:ff:fa:0d:4d:e2:d9:9a:c9:89:37:08:
ad:93:18:33:98:db:dd:19:dd:3e:bf:9b:72:ae:8b:92:e2:d5:
a5:46:8c:51:f7:ed:ff:7a:e2:d0:2f:f5:ac:ea:3f:16:b3:96:
6b:f3:d3:29:03:28:a4:f5:f6:a9:e9:e5:0a:f6:a0:93:2a:cc:
d5:cf:d4:9f:b6:e5:98:e9:4c:22:e2:0e:57:78:e2:49:9a:d4:
78:2f:dd:f7:82:7f:32:6f:44:91:21:38:7c:ea:51:f0:e0:c0:
94:c4:0f:51:15:cd:93:d6:56:e7:26:90:51:ca:86:c8:21:d3:
7e:37:ea:21:08:ee:48:53:0f:05:08:0c:99:53:d7:33:0b:bb:
2d:3b:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:22 2025 by rpki-client