Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft
File: paxWYvjZJWAF42kgCFIk7TSijq0.mft (raw, json)
Hash identifier: bIWmSsMxFihm/GiBFC0X9I/Pq5dMgZFzL0zpSpO7YoQ=
Subject key identifier: 61:94:44:E6:F9:A8:CF:A7:66:9D:B9:0F:FC:9A:34:05:99:9D:EC:F8
Authority key identifier: A5:AC:56:62:F8:D9:25:60:05:E3:69:20:08:52:24:ED:34:A2:8E:AD
Certificate issuer: /CN=a5ac5662f8d9256005e36920085224ed34a28ead
Certificate serial: 019A71B83B562337BB29DBBADCC8F4A40067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paxWYvjZJWAF42kgCFIk7TSijq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft
Manifest number: 90
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: paxWYvjZJWAF42kgCFIk7TSijq0.crl (hash: dWyi3BdX7yqtLDbYfCDdhwwbrOM1123KSVdlXpuZkBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paxWYvjZJWAF42kgCFIk7TSijq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3b:56:23:37:bb:29:db:ba:dc:c8:f4:a4:00:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ac5662f8d9256005e36920085224ed34a28ead
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=619444e6f9a8cfa7669db90ffc9a3405999decf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:cf:63:3e:29:fe:5c:e9:ca:ae:50:5c:13:
e4:4d:4f:13:35:63:71:6c:a3:fc:6a:83:45:8d:77:
cd:e9:95:02:cf:d2:f5:a0:99:7c:da:14:ad:ba:bb:
b5:2e:59:bb:f8:dd:e6:95:0d:10:01:19:ad:cc:ec:
fc:36:b6:cb:43:e0:8d:0e:4f:da:3c:7e:64:64:86:
ab:69:89:ad:a4:27:12:cc:e0:2a:7a:ff:79:f1:5a:
bb:12:6e:fd:7d:06:8a:96:72:83:c6:3f:b2:aa:da:
60:17:e5:b3:00:74:50:46:04:17:c5:cd:c9:62:7c:
c9:76:fd:24:e3:8d:59:7b:b3:7e:9a:4b:18:3a:4e:
41:59:4c:b1:ff:96:fb:09:af:98:95:da:00:af:16:
21:49:f0:49:27:c4:ab:ce:47:ba:7a:99:76:bc:c1:
d4:a9:33:48:2f:3a:f6:f2:7d:ba:ec:fa:d4:58:5f:
27:ce:5d:7c:75:72:b6:fe:ff:13:b1:f8:ef:d6:2a:
cd:22:0e:75:ad:d1:18:e0:70:6f:7b:d1:60:e7:9c:
5c:52:05:27:89:d6:72:68:80:f9:0d:2b:dd:92:22:
49:9f:51:ed:9b:73:a6:a7:dd:6f:e2:d7:7d:58:05:
1e:b0:6d:fe:bb:12:e5:fd:a8:2e:5b:2a:05:31:eb:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:44:E6:F9:A8:CF:A7:66:9D:B9:0F:FC:9A:34:05:99:9D:EC:F8
X509v3 Authority Key Identifier:
keyid:A5:AC:56:62:F8:D9:25:60:05:E3:69:20:08:52:24:ED:34:A2:8E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paxWYvjZJWAF42kgCFIk7TSijq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/955d9c-218e-4231-8cd3-9cd3d3f89a59/1/paxWYvjZJWAF42kgCFIk7TSijq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5d:27:43:80:c5:db:bc:6b:4d:5b:76:81:96:56:6d:ae:71:
b2:54:80:a0:35:04:9d:e2:d8:0d:a7:27:77:cb:a6:9a:68:28:
cc:9f:39:de:59:49:29:f6:08:60:f8:21:3b:42:d3:13:b0:48:
44:dc:72:8b:e8:60:34:28:d8:af:a0:ce:ff:91:61:66:e5:e1:
8c:f7:64:f1:94:b6:2a:f9:a8:aa:7c:5e:28:c1:20:93:60:0c:
08:1d:f0:1b:05:a9:06:e8:6f:24:12:6b:8e:83:99:b8:83:50:
57:9d:e8:c7:1f:11:67:95:c5:d4:d5:de:c6:a3:a4:1f:3e:87:
78:32:c0:11:c8:d5:9f:d6:aa:11:54:33:75:c8:86:c9:b5:f4:
a7:36:bc:15:58:2a:e1:76:a7:6a:da:d4:f8:31:76:37:4d:e8:
11:e6:66:8a:11:a0:46:f7:5d:38:70:5c:a0:40:bf:ae:4d:ff:
b2:3d:a5:bb:01:6a:34:3f:8e:b1:fb:ab:3a:fc:f2:96:0b:b8:
27:e0:19:25:c1:75:3e:b3:bc:a2:21:d5:d1:70:5b:a1:1b:56:
4f:29:96:21:05:29:0b:75:ab:56:07:33:f7:48:a3:45:35:33:
f9:7e:6c:ae:f0:3c:db:8a:2e:96:2f:31:4b:10:69:6a:3a:a3:
cd:84:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:25:00 2025 by rpki-client