Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: nfvrN20CgfAmLyp67PO6p7aQ0cpM6MAqu/ZAhGn7YQo=
Subject key identifier: 71:9E:A6:9E:05:53:CA:C8:32:2E:63:B1:A4:02:12:58:1F:A5:0A:9E
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 019A71B7D645465E866B2B453DA39384E604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 0934
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: FT2fb6wICFi2KSFMxylEI49+3ZsY5P3EkHf6cb4Mek8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d6:45:46:5e:86:6b:2b:45:3d:a3:93:84:e6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=719ea69e0553cac8322e63b1a40212581fa50a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:7c:e4:97:e0:f6:00:ed:3f:fa:34:4f:40:
d2:54:a9:65:a0:2b:c3:77:a1:82:d9:93:00:04:d8:
35:34:a1:3c:ac:59:67:78:d7:f5:16:12:ba:1f:d6:
d9:b1:9c:8b:59:2a:f9:6a:95:11:42:f8:0a:04:3e:
1d:cb:07:10:d2:11:da:ce:4f:5b:63:ce:1b:4d:37:
c0:1d:cc:24:be:1e:a6:48:72:5d:2d:c3:08:6f:1b:
4b:83:01:c8:ab:42:45:07:c4:da:e9:6a:bb:70:b4:
3b:05:92:50:12:ce:28:50:71:0d:de:0d:18:79:03:
65:b9:a3:10:1a:ba:a9:51:90:46:75:a0:2b:8e:74:
4c:bd:00:17:f0:07:15:03:f5:5c:bd:4e:9d:6e:18:
e2:d1:ac:6b:44:0d:62:a4:8e:4c:ec:96:63:48:95:
58:e9:2a:3b:ec:4d:6d:3f:3a:79:c8:06:f7:6d:77:
b9:71:b8:f5:ce:59:4b:cc:d7:3e:6e:19:88:ac:71:
9d:50:65:ce:52:b5:6a:9c:1f:cf:90:0e:0c:f8:0b:
60:c6:25:41:d1:0b:38:01:5a:fa:56:b0:bf:9b:c9:
86:66:92:e2:4e:fa:d7:d4:d0:63:5f:01:6f:8e:db:
3c:8a:e9:41:d0:77:70:d0:6e:cc:3d:71:19:39:fa:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9E:A6:9E:05:53:CA:C8:32:2E:63:B1:A4:02:12:58:1F:A5:0A:9E
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a3:fe:55:ed:9b:ce:06:a8:98:68:71:76:6e:12:4b:87:d7:
bd:26:b6:15:e5:0b:72:3c:6c:f1:5f:6c:41:1e:72:d1:ec:fe:
cc:69:51:36:1e:02:49:3f:a3:a3:27:d1:73:bd:ff:92:b2:69:
05:e3:05:36:be:ea:81:0a:2b:c7:80:0a:24:16:84:be:97:e6:
df:ba:f4:2a:a8:e4:f8:75:b8:fd:43:7d:02:f2:29:80:cc:e2:
99:93:ba:a7:44:73:4c:72:98:61:4a:df:58:11:7e:de:a2:03:
d0:a2:21:e8:a9:9c:53:c3:c7:77:81:5b:dd:c3:f9:e7:6f:fd:
6f:e2:16:ab:65:12:59:cc:20:34:51:44:e6:50:39:b4:7b:cb:
ca:bf:00:f3:4a:bd:4e:fe:a8:63:18:48:b1:19:e1:b7:c7:08:
01:e2:d9:e4:81:28:f8:2d:da:2e:11:a8:84:82:08:d3:b1:27:
f6:e3:72:d5:07:ba:98:ac:c2:c6:14:22:39:c9:03:d3:9e:5d:
8d:75:f0:a1:62:71:d5:40:dc:dc:21:c2:99:82:30:ae:a2:84:
c6:25:f1:81:87:e8:c6:c7:71:75:68:a2:5e:44:38:f1:5c:b9:
24:43:db:f4:82:48:04:d3:f8:53:87:50:ff:e0:b1:c2:04:67:
44:a3:3d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:28 2025 by rpki-client