Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json)
Hash identifier: DbiYI16EzdWBgl1au9pws2w/+1Z/dPzgv3aG906sWWI=
Subject key identifier: F7:FE:13:17:95:F3:EC:E1:88:64:3A:BE:C7:01:68:C9:D8:1A:AE:41
Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Certificate serial: 019A7225E656991EF9829288A9FEB4F478BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
Manifest number: 0A7E
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: z8Xh1KExycy1Pg0aqEU3BhoH3DDRscEKCecMMzBrdH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e6:56:99:1e:f9:82:92:88:a9:fe:b4:f4:78:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=f7fe131795f3ece188643abec70168c9d81aae41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:64:a4:f8:90:2e:41:06:ae:60:5f:34:64:
58:6b:61:57:d9:36:b2:a0:d8:a0:0b:5c:e4:d3:bf:
f8:9e:f6:10:33:e9:13:54:d0:c2:44:93:d6:24:e5:
0a:72:43:2c:11:ab:12:b7:42:66:18:6a:a5:aa:89:
9b:64:9c:a2:30:dc:be:cf:3a:0e:8e:6d:9f:62:f3:
62:50:7f:c7:cf:68:33:dc:a5:e8:87:11:e7:24:3f:
39:e0:f4:e5:6e:5c:57:95:d3:31:a7:49:1a:b1:07:
a1:41:ef:58:b5:be:91:5e:de:6a:71:86:2b:43:8a:
35:2d:a5:0a:22:53:07:91:ac:e2:b1:60:de:81:5d:
3a:74:07:eb:4c:2f:c0:83:f4:a9:14:e6:43:0d:f0:
82:01:c7:ad:74:86:30:b2:79:b6:6a:80:b7:0a:84:
61:ff:5b:3e:cf:1e:21:52:9b:68:78:76:1c:91:33:
35:05:73:2c:b7:f9:83:02:39:a1:f0:5f:85:fa:65:
a5:05:72:04:ad:fe:5a:e9:35:6e:00:39:85:7f:02:
26:22:96:46:15:6d:28:c7:57:90:51:8f:47:e2:81:
61:a4:4a:92:1a:62:02:1f:68:3d:72:ec:4d:bd:ca:
54:3b:65:38:ec:f4:18:57:d2:89:6b:69:68:55:7d:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FE:13:17:95:F3:EC:E1:88:64:3A:BE:C7:01:68:C9:D8:1A:AE:41
X509v3 Authority Key Identifier:
keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e3:91:84:1b:95:d6:4a:20:c3:55:af:f3:aa:90:d3:99:24:
f2:3f:d4:e4:ce:8b:d8:57:49:3b:f2:c9:c4:a6:79:ce:71:f3:
34:43:01:ce:6e:e1:bb:18:bf:c8:4e:29:38:c3:6c:bd:b1:44:
09:da:3f:a0:eb:11:70:04:dc:ee:20:82:4b:b4:1f:b7:ae:fa:
20:c2:0c:aa:bb:69:1f:5c:ae:fc:13:fe:29:2a:fc:c3:df:42:
05:b4:d6:6c:9f:7b:55:f9:4a:9f:e4:1b:96:3d:ff:c8:89:60:
a9:40:20:9b:76:d6:8b:bb:90:89:93:fb:f1:a3:e2:e4:e4:d6:
63:b9:4c:bd:82:d8:39:e1:2a:4b:ed:eb:ad:13:2b:7d:39:45:
b0:2d:76:f0:e4:c0:40:91:92:45:1b:47:7a:2d:04:f2:4d:f4:
a3:5c:4b:20:b6:e0:31:59:42:ec:13:6b:82:2e:24:9c:cc:05:
a0:45:52:ed:4a:59:27:4e:2e:3e:8a:61:fc:4e:d5:61:5b:c5:
16:69:17:ed:ba:05:cc:36:00:d0:5a:6c:8f:42:b6:55:1e:72:
04:e6:95:42:1f:eb:c9:87:0b:2d:56:64:09:13:d5:fb:3b:33:
77:af:09:25:35:0f:e6:74:16:74:23:13:1c:51:da:88:59:a9:
94:74:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:43 2025 by rpki-client