Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
File: rrlJQmajhxkETYKaSgqPF6QHBOg.mft (raw, json)
Hash identifier: UDlL2YXm3m3ASN9NkkllHMBXzM59kpllm654DlQoANc=
Subject key identifier: D3:6C:47:0F:E3:6F:DC:7B:9C:1D:F8:B9:25:E2:F8:D2:A6:FA:85:A1
Authority key identifier: AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8
Certificate issuer: /CN=aeb9494266a38719044d829a4a0a8f17a40704e8
Certificate serial: 019A73A5F40C894F6A7F981F43FCFB534D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 16:00:46 +0000
Manifest this update: Tue 11 Nov 2025 16:00:46 +0000
Manifest next update: Wed 12 Nov 2025 16:00:46 +0000
Files and hashes: 1: rrlJQmajhxkETYKaSgqPF6QHBOg.crl (hash: OtQnGM4Oj+7uEil9kvGszcGGgzwxf1M4uSENMH/0A9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a5:f4:0c:89:4f:6a:7f:98:1f:43:fc:fb:53:4d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb9494266a38719044d829a4a0a8f17a40704e8
Validity
Not Before: Nov 11 16:00:46 2025 GMT
Not After : Nov 12 16:00:46 2025 GMT
Subject: CN=d36c470fe36fdc7b9c1df8b925e2f8d2a6fa85a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:80:b7:dc:c8:21:23:dc:4f:2c:3c:cd:d9:
57:8c:e5:3f:44:b6:49:7e:a1:3e:22:cf:e7:dc:ad:
ad:a5:f3:cf:a9:00:7b:7b:64:3e:eb:cd:2a:28:d2:
75:96:d8:61:4b:e8:0a:11:7f:c1:6e:1f:3a:ef:96:
24:0f:51:ac:fd:07:fe:c1:c3:91:5d:fb:e9:f8:5a:
68:b9:0d:6f:6f:8d:43:a8:1f:00:1e:2f:20:e9:c9:
16:7f:4f:9b:4f:67:eb:9e:da:ed:f5:fb:3b:73:37:
5b:d9:15:52:2d:0d:bc:8c:7e:dd:66:40:ff:94:bb:
1d:ab:a6:90:ce:30:a9:b9:cd:ca:c6:09:52:3c:2a:
57:5a:62:12:ad:66:3a:78:00:c3:c1:ba:0e:88:f0:
6c:93:a5:1e:67:d4:57:2d:5e:59:e1:02:dd:f4:ca:
72:5e:3f:01:12:24:f8:74:f1:89:de:74:62:db:63:
8d:2c:a9:32:d6:a7:f9:a7:ac:44:01:5a:df:74:75:
b4:06:47:29:ea:0c:a6:06:9b:44:d4:1c:f3:d7:ac:
23:ae:e6:c3:2b:63:29:00:f9:b1:3d:2e:1f:87:5a:
a7:3f:66:a8:2f:ce:c0:ca:e1:8b:39:da:11:1a:e4:
29:f8:5d:5b:49:0b:1b:d2:7a:2d:f0:13:62:ff:4a:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6C:47:0F:E3:6F:DC:7B:9C:1D:F8:B9:25:E2:F8:D2:A6:FA:85:A1
X509v3 Authority Key Identifier:
keyid:AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7d:8e:bb:23:66:d8:d1:c2:89:13:2a:4b:75:e8:05:fe:8b:
ab:29:1f:ab:8a:f0:a4:06:72:a1:d3:76:f0:77:56:aa:ea:4d:
6e:b8:c9:6d:75:a5:8d:09:3a:b1:18:4c:ca:cf:53:4e:5f:e1:
e5:c4:cb:67:ff:dc:74:2e:19:a7:9e:de:6c:df:51:7a:33:30:
ae:52:26:67:58:39:ee:0e:82:38:13:25:08:60:dd:0f:0b:ac:
da:4e:bb:7d:cc:3b:9e:05:98:4e:f6:58:23:49:6a:f6:b0:f2:
01:70:1e:43:97:ed:5a:4a:07:a2:ee:e0:09:3e:19:a2:88:d9:
a2:84:42:07:c8:1a:ac:63:f2:6f:b8:8a:33:cd:bc:a1:49:89:
7c:f2:b0:8a:23:93:2c:91:bf:e7:ed:56:9c:c0:26:5c:31:58:
08:7a:2c:f1:9c:77:bb:1f:7e:2a:9a:e1:04:e6:d9:80:d2:de:
ce:9b:1c:2f:d5:63:be:65:c2:72:67:4c:84:8c:d2:70:73:95:
93:4a:05:5b:57:01:68:74:fe:e3:ea:78:bf:50:ac:06:b3:f2:
36:b2:ea:25:94:41:ff:a6:3d:bc:2e:49:d0:16:87:cf:9d:5e:
29:ee:4d:f6:a6:a1:4c:7b:43:2c:b9:6d:25:8b:46:48:fd:c8:
cb:99:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:43 2025 by rpki-client