Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: JGRt+GBmu2BmcZde8J7AQTJBng2y60P6h85AjHtTrvg=
Subject key identifier: 77:4C:CC:2A:83:C9:A1:80:79:8F:C5:D1:11:1A:50:F4:CC:E3:68:0A
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 019A736EFB5660A96EF63D6213B5CFD61EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0B70
Signing time: Tue 11 Nov 2025 15:00:44 +0000
Manifest this update: Tue 11 Nov 2025 15:00:44 +0000
Manifest next update: Wed 12 Nov 2025 15:00:44 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: w7YVQFJ+HVmJD7I6NaELHrp2rbvOEBcMq8RuMk02Fvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:6e:fb:56:60:a9:6e:f6:3d:62:13:b5:cf:d6:1e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Nov 11 15:00:44 2025 GMT
Not After : Nov 12 15:00:44 2025 GMT
Subject: CN=774ccc2a83c9a180798fc5d1111a50f4cce3680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ef:68:63:22:92:14:32:2c:d3:85:8b:25:2c:
07:27:24:23:b8:d3:d5:f9:33:f9:b7:26:62:cd:ad:
37:4e:2b:38:3b:d1:c1:3c:01:21:0b:1d:60:2d:84:
13:2e:c7:f0:df:bc:96:9b:e8:a1:e0:98:9a:47:cf:
4a:8d:a8:16:59:83:1f:19:da:22:e3:9b:1d:68:fe:
51:1b:a2:38:75:25:0c:16:db:ec:f5:ab:2a:c2:58:
49:27:c1:bf:0b:92:35:36:2b:04:d5:2c:cc:d7:1a:
5b:b0:64:d9:19:09:47:1d:65:08:09:f2:fe:91:94:
0f:c6:20:a0:39:04:ae:2d:c4:2c:1a:f0:e2:c9:86:
9c:51:28:25:89:30:f4:25:8d:1c:6c:2f:ab:22:ff:
83:f7:a2:4f:a5:30:0a:c1:97:a4:ff:25:18:29:5b:
88:e1:7e:e5:a1:0a:d7:39:26:b0:36:ef:d7:48:ea:
a3:a5:c4:fa:47:eb:20:ad:32:92:2b:63:e1:fb:27:
5b:72:04:5e:be:97:06:bb:10:ea:8c:73:fc:6c:da:
15:45:56:2b:75:d6:71:29:39:ad:d5:59:a2:0d:54:
0b:da:8a:71:30:33:52:e5:c6:17:3d:16:da:c7:e7:
0d:50:b6:18:ec:1b:94:67:9f:66:91:c0:21:3c:ff:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4C:CC:2A:83:C9:A1:80:79:8F:C5:D1:11:1A:50:F4:CC:E3:68:0A
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e2:c3:53:8f:3c:86:3f:82:30:4a:0b:56:3a:03:97:0e:c7:
c5:99:ad:01:85:41:d0:21:cf:7d:20:13:00:19:28:7f:a1:58:
fd:a8:28:21:12:18:28:e2:35:74:59:8a:1c:9c:f0:ff:af:a6:
96:85:5f:ac:c3:c9:c6:1b:4f:f3:5b:c5:10:d0:fe:f9:a3:e8:
89:6e:79:ca:f0:d0:db:5f:f7:3f:37:ae:8a:cc:3c:8d:91:bd:
ed:82:cf:50:36:23:ee:12:52:b8:7a:69:25:8a:d9:a9:f1:9a:
81:db:62:c6:2a:c8:52:56:e0:23:ca:df:0d:e8:3f:2d:74:65:
60:91:ff:7a:40:a4:09:ee:c1:b6:a0:b2:c6:95:99:22:f9:36:
13:78:27:81:47:5a:07:0f:d6:6b:ed:a4:a7:2a:48:02:e4:37:
29:1e:5b:7e:dd:3c:98:b7:a5:71:8e:18:b9:c9:97:a1:5c:b0:
76:26:75:b0:7e:aa:fc:93:65:00:f2:42:4f:7e:ab:b9:e8:01:
05:cc:1f:4a:bd:7e:6e:47:17:df:a9:5f:f1:ae:1b:4d:a1:8c:
eb:7a:27:3e:5b:75:d6:32:f7:99:f0:d5:a5:f8:99:8a:be:65:
14:33:63:cc:ea:60:f0:ed:df:17:4e:e1:e0:76:7f:28:a3:05:
ba:c8:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:36 2025 by rpki-client