Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File: rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier: N5hVhASmNo9rX5/GdyGyiot6j5yIjiJFM7AEAyUxH/I=
Subject key identifier: 43:C4:1A:3B:20:68:DC:AA:30:B0:6A:13:81:DA:A7:BC:36:13:EA:AD
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer: /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial: 019A72CA52E11CA3252E80240E090B17CFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number: 161B
Signing time: Tue 11 Nov 2025 12:00:53 +0000
Manifest this update: Tue 11 Nov 2025 12:00:53 +0000
Manifest next update: Wed 12 Nov 2025 12:00:53 +0000
Files and hashes: 1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: IqyoaLKOcfpzgCFHsLMYaru71T9YR6jTJOAO88ZWhZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:52:e1:1c:a3:25:2e:80:24:0e:09:0b:17:cf:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Validity
Not Before: Nov 11 12:00:53 2025 GMT
Not After : Nov 12 12:00:53 2025 GMT
Subject: CN=43c41a3b2068dcaa30b06a1381daa7bc3613eaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:f6:3a:d4:40:f7:50:03:da:63:2a:f9:29:
42:69:f9:7c:ea:d3:3f:a6:16:f1:8b:5a:88:17:e4:
e6:b3:ef:c8:ee:d1:97:8c:43:a5:b7:e1:5b:24:25:
5b:9d:3e:4a:03:21:91:13:17:a2:80:59:89:ef:5e:
a9:b8:58:1a:ee:52:1b:9c:7e:d8:37:da:fa:e6:31:
ce:2b:8d:cd:eb:c3:9b:45:f5:8e:44:8f:07:fd:a3:
03:59:f7:e7:2f:26:43:71:e1:00:b0:5f:9a:cb:1d:
98:9d:e8:53:16:ce:1d:e9:f2:69:f6:47:4b:a6:e4:
02:a0:71:16:ee:95:b3:03:61:b7:c0:19:f8:16:ec:
ec:e1:5a:8f:dd:a7:b2:6f:f7:1a:4b:e3:b2:77:f6:
11:dd:06:2c:d6:ec:31:60:44:b1:c2:53:12:da:47:
b1:7e:7a:6b:b7:85:85:cb:78:32:1d:4f:1e:e4:27:
a9:bc:3b:17:1b:db:af:4f:17:60:33:87:87:e9:25:
31:98:dd:7a:ef:6d:e2:85:33:33:0c:41:e8:b7:f2:
ad:d0:07:07:3f:76:cd:ff:08:09:da:af:b9:10:b3:
97:89:5e:6c:31:e8:4f:1b:c3:f8:bb:e3:4c:b5:e8:
9f:9f:c0:84:93:9c:b4:6b:4a:1e:0c:07:a7:a9:9c:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C4:1A:3B:20:68:DC:AA:30:B0:6A:13:81:DA:A7:BC:36:13:EA:AD
X509v3 Authority Key Identifier:
keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b6:99:95:56:be:d6:4f:be:bb:af:34:7c:9a:25:56:d2:cc:
7e:cc:12:ed:7c:80:13:21:38:5a:20:eb:3f:8d:cc:f6:97:57:
b2:45:3e:06:3c:c5:ce:ca:59:de:2b:cb:f8:39:f0:55:f4:21:
c1:bd:f0:a3:eb:4c:16:b4:c1:d3:82:42:a8:34:4d:56:4e:6d:
b9:1c:f9:71:8e:5f:a0:a8:17:f9:e9:66:cf:54:38:41:f9:5f:
58:ac:73:d8:f6:0b:08:f7:e7:39:06:61:97:e4:6d:43:80:f9:
ff:ff:20:d2:b1:07:84:fc:eb:d4:7d:a7:01:05:d3:6b:94:dc:
dc:a3:b5:bf:c3:6c:68:44:50:19:65:b0:47:bb:13:a2:22:06:
95:f4:21:a9:83:a6:ea:39:02:ee:1d:d4:6c:fd:17:fe:88:12:
04:30:94:8f:d6:a2:98:d9:31:71:83:33:e4:f1:aa:de:bd:3b:
60:7d:b6:80:10:df:57:74:21:ec:7b:3c:30:70:b7:ee:6f:18:
8f:0d:f3:4b:ec:97:65:48:4f:09:05:33:df:66:c0:1a:bc:cd:
88:00:fb:17:25:25:b4:07:d7:ea:35:7a:23:8e:b2:34:67:e0:
9d:ad:6a:1d:67:fd:8c:a1:f0:30:1e:d5:72:05:0c:1e:93:fb:
c8:2c:c7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:20 2025 by rpki-client