Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: 4eTnoZhjzj/lg8j+nynCPcgCcxsCX04GD3RCw38GF7o=
Subject key identifier: 54:F3:C5:BE:BF:D3:6C:E5:82:60:42:1A:C6:F8:90:84:6D:63:D8:A6
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 019A71B7E31671D10F0F72D0142E92DA7522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: clBWlkKRoBcLOdK8pAAnu/wJzPlNFpW6QWRZyUiQ5FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e3:16:71:d1:0f:0f:72:d0:14:2e:92:da:75:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=54f3c5bebfd36ce58260421ac6f890846d63d8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:ec:87:fe:98:4e:3c:e4:94:f5:4b:36:0b:
f2:f6:c7:62:76:d7:cc:7c:8f:5f:fd:96:7d:71:c2:
2b:d6:b1:96:61:ac:16:66:10:31:01:64:af:26:95:
2c:7f:8e:19:d0:97:83:6c:f3:2c:0c:96:4e:97:3a:
46:5d:9b:a8:00:1d:e6:c6:8a:ea:fc:71:d5:6c:71:
20:41:f4:6d:ef:d1:68:a1:ad:a3:2a:df:e4:78:e7:
cf:cd:3b:77:e3:fa:db:06:1f:24:4b:30:95:d4:52:
24:c6:55:21:82:29:6e:3d:2f:97:8b:09:66:65:77:
b8:32:3c:26:b1:d4:4d:8b:05:0e:b4:0f:f8:99:42:
aa:2b:84:6f:80:3c:8c:05:b6:f2:36:9e:e8:a4:2d:
d9:6c:3f:ed:5d:d0:69:d0:68:f2:fa:0f:fb:f6:df:
dd:c4:2f:e2:dd:bc:51:42:8b:f7:ba:07:61:ce:f1:
3e:f6:28:da:c5:01:8c:8e:60:bf:21:d2:53:9f:97:
fb:0d:ba:95:fd:14:6f:96:c5:4a:a5:9f:3e:d4:07:
ed:10:e5:83:f9:3f:7b:50:9b:c7:c8:5b:f8:26:ca:
0c:cd:47:44:7d:80:72:04:13:29:6f:1b:9d:37:4b:
59:39:c0:cb:b9:fb:f8:de:fe:aa:b3:95:26:df:d6:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:C5:BE:BF:D3:6C:E5:82:60:42:1A:C6:F8:90:84:6D:63:D8:A6
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f8:5f:c0:d3:93:6d:e0:35:41:ba:e5:d8:29:4c:7c:c9:9c:
03:36:94:ae:a8:ee:00:1a:1b:0f:3d:f7:94:e7:a5:57:55:7a:
dd:00:57:8e:99:9c:73:eb:99:24:e6:c8:40:10:b2:76:cb:a1:
85:66:b7:f0:4e:e1:06:97:3a:86:3c:dd:df:42:a7:83:85:c0:
f9:16:52:b2:5b:fc:a5:fe:23:fe:a4:3d:b3:cb:fe:7f:25:ff:
35:08:af:cb:e2:db:4d:03:fb:0d:79:16:7d:f2:5c:85:5d:94:
d1:18:c1:a2:f9:8f:07:7e:dd:ed:5f:c0:fe:1d:ae:9e:de:be:
d5:59:08:34:54:61:f7:90:04:b0:cd:09:a5:ed:a3:c0:15:49:
08:3e:26:b2:37:99:f5:11:5a:93:7d:9f:cc:b9:38:c1:f9:b1:
e8:78:b2:13:1d:f5:f3:a0:b6:8d:7a:9d:f3:a0:67:7c:df:56:
98:20:14:a0:a6:89:21:3b:28:5c:e5:43:fb:21:f8:26:32:c1:
ab:99:e4:8f:3b:e3:be:46:8a:52:fa:d2:74:18:5f:a6:92:c9:
b4:b7:c5:63:22:ed:2d:8b:99:e1:2d:f7:0c:93:fc:4b:aa:fe:
09:fd:fc:8a:2c:bb:07:61:f8:1c:a3:72:05:7d:3c:0b:84:dc:
6a:d4:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:34 2025 by rpki-client