Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
File: sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json)
Hash identifier: Z2mLmsezSPejL2A6V+HCs+TuK67CeggTlBY43gyaeuw=
Subject key identifier: B3:B8:09:45:D5:3D:A4:05:DC:7D:F4:6C:3A:71:1B:61:4B:E6:DD:34
Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
Certificate issuer: /CN=b17787aefcacea42ac6439949a568f0dffe777ed
Certificate serial: 019A70A565F9E4FED99D763B37A3FE253798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
Manifest number: 1032
Signing time: Tue 11 Nov 2025 02:01:19 +0000
Manifest this update: Tue 11 Nov 2025 02:01:19 +0000
Manifest next update: Wed 12 Nov 2025 02:01:19 +0000
Files and hashes: 1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: cj0eT9BijI5fxcnwJizO9GvNY8fuUGUvJZUg0Ttu30Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:65:f9:e4:fe:d9:9d:76:3b:37:a3:fe:25:37:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed
Validity
Not Before: Nov 11 02:01:19 2025 GMT
Not After : Nov 12 02:01:19 2025 GMT
Subject: CN=b3b80945d53da405dc7df46c3a711b614be6dd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:79:da:b5:83:c0:52:c6:e1:d9:8f:95:ec:
63:63:a9:63:3c:6b:df:f1:62:b5:98:31:99:55:d8:
9d:16:85:f6:e3:21:01:f1:d9:57:2b:8e:54:c1:9d:
ba:f7:08:04:d3:d9:49:e0:d1:4b:17:98:dd:a2:1d:
18:20:5e:4a:f5:6a:0e:47:fd:c4:26:7b:a0:4c:3c:
48:e8:59:1a:3a:13:90:da:bd:63:ee:98:12:e9:2d:
78:90:d1:27:ce:38:96:c6:3b:21:16:90:bc:21:ae:
4c:7c:8a:67:38:5b:0f:cd:e6:18:0e:29:a7:ef:7c:
e5:de:74:fc:b2:2a:13:10:64:53:8a:3f:e9:b7:05:
5b:3c:bf:ce:4b:4c:79:79:1e:c1:7f:c2:79:6b:36:
9d:5b:a1:c8:db:ba:c0:fd:70:be:1b:d8:58:3a:1c:
dc:1d:94:dd:b2:00:d8:0b:20:cb:39:ca:41:2a:33:
e6:d3:16:c2:46:0b:16:eb:2e:40:ee:6b:71:66:88:
fc:fa:04:69:c9:6c:b3:07:82:89:cf:af:18:ca:c4:
0c:c8:0d:10:18:69:a7:81:2a:32:e4:75:59:07:ab:
04:dc:8b:52:c1:05:f6:63:ce:31:08:5a:25:c9:16:
c5:2b:55:13:3a:49:f5:6a:45:51:f3:db:aa:32:75:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B8:09:45:D5:3D:A4:05:DC:7D:F4:6C:3A:71:1B:61:4B:E6:DD:34
X509v3 Authority Key Identifier:
keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f9:6b:56:50:a0:74:a5:91:8a:4a:15:84:f2:76:d1:94:d6:
55:1b:e0:76:1b:fb:79:5d:1a:34:98:00:ee:ae:40:9f:92:9a:
7a:68:d0:88:46:29:b7:62:6d:9b:40:25:88:65:40:d4:3b:3d:
2b:89:25:71:20:a4:2d:f5:37:0f:fc:8c:43:5d:97:96:0b:36:
8e:b2:06:01:e8:60:a3:49:1d:18:7f:14:c3:8b:e0:5a:34:d5:
01:22:39:e6:8e:1c:8b:73:01:3d:c7:6a:52:ac:d3:d1:46:6e:
14:c2:a8:13:12:d9:35:34:8e:00:5e:c3:7b:6a:9b:27:4e:88:
0c:64:4c:75:7b:13:59:1e:75:b8:99:d0:78:59:6c:17:8c:7a:
1f:35:3f:ac:cc:28:ee:10:4d:8d:a4:b0:2c:2b:4c:74:0b:02:
d9:69:ca:d5:f5:7d:bf:31:ea:4b:7d:5e:04:01:40:31:6d:c6:
3a:1d:f0:5d:1c:20:27:53:fb:0d:0a:2b:e9:11:f8:d9:57:37:
f2:ff:06:0a:ff:ef:7e:bc:7a:53:3b:50:32:37:61:dc:45:9c:
bc:f6:f8:5f:c3:c9:54:c2:24:9e:7f:e9:54:13:4d:c1:07:3f:
07:e1:da:fc:2e:d3:22:a8:da:3a:0f:9c:3c:d5:8f:26:1d:58:
4d:4f:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:55 2025 by rpki-client