Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: f1FPxtxC3eEOIB/mYMrXV7WkMKZVuwhejiAriqmtO2Y=
Subject key identifier: 65:1B:12:E5:96:16:BD:44:EB:6C:AC:16:1A:0E:5C:98:7B:93:AC:00
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 019A7226728022057CF01B600805D409828C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: O5jhlJzAzo8W0ZKmhod/sO/3eA9Dn+2kX53L9dv3qLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:72:80:22:05:7c:f0:1b:60:08:05:d4:09:82:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=651b12e59616bd44eb6cac161a0e5c987b93ac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cd:af:f8:bf:0a:34:1e:57:f7:9d:43:4a:19:
45:3e:22:3e:7d:c9:4e:67:82:ea:dc:45:20:16:d1:
50:ef:5c:4e:09:5a:af:ca:e9:ce:5e:25:68:af:2e:
f9:89:96:6b:f1:14:3d:04:1c:1f:cc:e9:3e:61:d3:
7e:53:fd:4a:37:6c:81:b0:03:15:84:61:5e:0f:8e:
83:ae:a0:f9:60:d6:6c:f5:3c:e4:51:67:36:e2:ec:
68:47:6d:5a:83:cc:fc:bf:f7:91:d2:7b:91:24:53:
c5:bb:7f:6c:4f:85:64:fd:32:f4:8b:11:b0:c7:f9:
b5:53:a6:92:57:60:5e:dc:48:47:0b:a4:9f:be:6c:
2c:e4:46:d5:5e:d2:87:bc:3a:8f:48:12:2c:c4:4e:
4e:e6:07:47:14:2a:2e:c4:26:73:68:35:bf:48:b1:
fb:bb:1a:a8:e3:1f:93:45:f8:3b:b4:c6:dd:b0:57:
66:ed:33:15:1f:19:95:37:ce:b4:68:73:bb:b1:07:
a8:b1:ac:2f:4d:07:42:44:95:2f:0c:de:a5:8a:f6:
38:78:df:0b:26:b3:81:ba:9a:a5:fc:08:27:67:35:
ce:e5:9b:d0:58:63:ca:f9:ee:39:dd:f5:b4:16:08:
6c:9f:69:64:2a:b5:a8:80:f1:bf:5f:b7:8d:c5:40:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1B:12:E5:96:16:BD:44:EB:6C:AC:16:1A:0E:5C:98:7B:93:AC:00
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0e:f6:49:9c:3e:17:c2:03:be:92:31:b5:88:43:85:20:39:
18:24:2c:74:6e:99:59:e3:c0:23:da:fd:84:81:b0:3a:6d:e0:
46:dc:06:d6:ed:f0:71:9f:0d:0b:1d:eb:8f:9d:28:1e:0e:c0:
19:a4:c5:63:ad:a3:53:76:e6:70:5c:a4:76:05:e1:79:d6:e6:
90:60:54:47:7a:43:7a:cd:f9:c6:11:31:e3:c3:08:75:09:b0:
f6:c8:8c:e0:af:10:29:d8:da:de:6a:ff:a9:31:9d:9b:a0:42:
36:d9:9f:66:40:e9:bf:65:08:04:c7:e3:1d:3f:90:51:24:80:
37:76:fa:89:43:3c:73:a3:b1:40:77:e8:00:6d:76:43:93:13:
5e:9e:58:18:a2:aa:59:6c:58:d9:c0:ce:3d:23:2e:58:c0:00:
0c:5d:ac:3b:6b:4c:38:09:7d:41:63:c7:e8:d7:b7:a8:ec:88:
a4:3e:a5:4a:d4:d5:e3:aa:ab:38:a3:1d:2a:13:41:e5:9f:f9:
00:3b:92:92:86:9a:a2:74:63:7e:a7:71:e9:7d:51:ac:0f:f2:
d3:1b:af:eb:24:e2:ce:f8:16:7d:64:16:07:4c:df:ed:ad:71:
68:57:d6:1e:42:cd:54:f2:6c:dc:92:37:b2:0b:49:06:7e:44:
19:7f:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:35 2025 by rpki-client