Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft
File: rx1xu1v1LBNf8HCGaq1M25U6iZA.mft (raw, json)
Hash identifier: zW/oPD2FreVKDqKLC5rW85aYc9rcAekWPnFrJ3K4WTI=
Subject key identifier: 13:0A:E3:A0:D9:C6:9B:B0:61:06:36:AA:A7:A8:97:0B:33:42:A4:A0
Authority key identifier: AF:1D:71:BB:5B:F5:2C:13:5F:F0:70:86:6A:AD:4C:DB:95:3A:89:90
Certificate issuer: /CN=af1d71bb5bf52c135ff070866aad4cdb953a8990
Certificate serial: 019A71EE96528B281102831BAF11DF8BCF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft
Manifest number: 81
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: rx1xu1v1LBNf8HCGaq1M25U6iZA.crl (hash: QMHxbjmhn1T7vrPcpBIzUha68Qjo5YxHxcUgCmSjYJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:96:52:8b:28:11:02:83:1b:af:11:df:8b:cf:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1d71bb5bf52c135ff070866aad4cdb953a8990
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=130ae3a0d9c69bb0610636aaa7a8970b3342a4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:18:10:1c:a6:e5:87:99:ae:cf:7a:af:70:
14:a7:99:94:9a:6b:82:f2:65:cc:22:fa:47:d6:56:
56:e6:06:2a:ad:d0:fe:cf:5b:69:28:23:c0:78:70:
e6:be:28:83:3b:0e:92:e9:64:5e:87:bd:6b:6f:95:
56:f7:80:6a:5e:0b:a1:37:0a:de:8d:06:75:20:a2:
86:c6:fa:ae:cc:c4:75:60:1f:4b:a2:e8:de:e2:ab:
91:f1:34:8a:20:4d:48:e5:00:65:63:e1:e5:01:0f:
2a:3d:7a:d5:b1:7f:1d:f2:4c:5c:d0:59:2f:bc:fe:
ad:bc:1b:68:34:6d:a3:08:4d:98:87:aa:71:ca:03:
31:17:99:40:97:d2:7a:d4:df:13:73:b6:38:54:cf:
96:5f:05:18:ad:19:d6:f3:bc:57:c2:1b:06:be:39:
ee:1c:60:fb:1a:9b:e7:9d:4f:1b:d2:61:67:f6:d1:
b4:64:7d:cc:f8:88:8c:a3:ea:87:61:d3:1d:c7:60:
b5:e6:f2:5a:08:a6:3e:14:24:6e:3f:03:95:b8:53:
11:1c:53:69:cc:19:99:fa:8f:8c:f2:46:68:e3:69:
a8:b4:f1:66:7a:28:8c:17:00:b1:af:79:74:7e:75:
5f:cf:d0:8c:3f:90:bc:a2:9a:c7:2d:b7:b9:80:eb:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0A:E3:A0:D9:C6:9B:B0:61:06:36:AA:A7:A8:97:0B:33:42:A4:A0
X509v3 Authority Key Identifier:
keyid:AF:1D:71:BB:5B:F5:2C:13:5F:F0:70:86:6A:AD:4C:DB:95:3A:89:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1c:ee:ea:33:14:ed:d4:a0:6e:ac:c2:88:2f:b5:a6:53:7d:
73:6f:a0:be:07:f6:6b:e3:c3:93:b4:02:c8:60:cc:b8:5a:45:
bc:9c:8c:4b:3c:1a:6c:83:63:ed:6b:9d:88:e0:a1:62:d7:a2:
ae:77:98:9d:32:cf:76:74:2a:c0:07:25:44:40:d8:70:8c:e4:
7d:66:98:2f:90:93:17:23:06:91:fa:54:05:f6:f3:2b:40:37:
3f:a2:da:90:b7:6c:60:67:8e:d6:ac:05:61:2b:56:29:1b:1c:
64:b1:cc:1c:11:6d:55:9a:d6:37:63:36:e1:76:78:d5:d2:e7:
ce:de:c8:97:3d:4e:b7:f5:8d:6c:c5:cb:ca:02:c7:95:a8:e6:
c7:fd:9d:d6:88:6b:34:3a:2b:43:30:03:3c:97:eb:29:c4:29:
fc:f4:78:c1:bc:ce:8b:69:d9:b3:4a:ec:95:3c:00:01:e9:9e:
12:93:d6:3a:34:37:fa:dd:16:0b:34:cc:c9:8a:13:f1:9d:38:
b8:b8:25:06:45:f8:27:df:26:7a:fb:cf:dc:f4:52:78:2e:79:
2a:41:c3:50:af:7c:77:a6:90:e2:8d:93:55:2e:17:91:92:94:
cd:59:92:43:13:44:c9:0e:c5:26:80:6e:a4:76:35:5f:09:a0:
42:60:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:01 2025 by rpki-client