Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: 7urIycHfxxvVKk/wVecbc2LLo62HQha9IS7xvWkHX7A=
Subject key identifier: 12:18:09:47:CA:83:13:83:3F:BD:13:C2:32:C4:68:3F:D8:6E:94:27
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 019A70DC440A3FE7432A55ACD55E6A1E1A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 070B
Signing time: Tue 11 Nov 2025 03:01:14 +0000
Manifest this update: Tue 11 Nov 2025 03:01:14 +0000
Manifest next update: Wed 12 Nov 2025 03:01:14 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: Hu1o4T4VQGV9IsPOmvfe8oWW+H8PSnQPTevBfKtqI8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:44:0a:3f:e7:43:2a:55:ac:d5:5e:6a:1e:1a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Nov 11 03:01:14 2025 GMT
Not After : Nov 12 03:01:14 2025 GMT
Subject: CN=12180947ca8313833fbd13c232c4683fd86e9427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:07:c6:39:b2:a2:0a:39:32:5b:2a:33:47:
79:21:6d:57:71:d9:48:11:42:9f:f6:57:de:3e:a1:
30:f6:11:4f:fe:36:18:74:fb:62:46:d4:ad:2f:4d:
77:b5:7c:89:93:82:2a:88:92:b5:10:e0:67:21:eb:
0a:f3:62:8c:95:b6:4c:7f:c0:5b:f1:14:b3:cc:a8:
da:6e:ad:2f:bf:82:15:86:ce:88:80:e4:d2:da:a4:
4d:79:07:5e:d4:0c:11:81:87:a3:00:c9:cb:b2:ac:
54:4a:74:1f:e4:bf:24:49:ec:2a:81:3c:54:64:a2:
ce:32:17:dd:d6:94:c6:2f:6c:46:0a:71:c8:99:22:
d7:e3:b8:aa:5a:9f:2e:20:2f:ca:cf:21:08:f2:1e:
9e:23:db:a5:a1:f8:27:dc:28:5f:6d:da:47:f2:ad:
78:7e:b7:7a:49:3d:ce:d4:df:f6:a9:e5:fa:6f:dd:
30:8b:c7:e4:c9:fa:9e:e3:71:cf:4b:49:9d:0f:a3:
3a:6c:4c:8f:88:e1:b4:d8:38:50:e0:23:68:84:5a:
aa:bb:4f:73:fe:c0:6b:87:40:81:8a:35:a3:7b:d1:
8f:c3:04:b2:98:b9:2e:28:b2:16:b1:a1:99:4b:23:
2b:52:e0:27:31:9b:50:46:75:b1:20:4b:4f:74:6b:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:18:09:47:CA:83:13:83:3F:BD:13:C2:32:C4:68:3F:D8:6E:94:27
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ad:fd:6e:be:e3:cf:30:1c:27:8e:ff:37:0b:55:ff:ce:21:
54:5e:a6:b5:ed:5b:09:5f:42:13:c0:6b:4e:cf:ce:88:e7:d9:
01:c4:4a:4c:c3:00:45:cf:e6:b2:e1:f7:d6:80:fa:9d:e6:f6:
5c:33:24:02:3a:b2:95:78:6c:db:ef:d8:bd:ec:a2:18:6e:c9:
54:82:32:bf:d5:31:10:33:43:6d:d1:f1:35:9f:5e:d3:42:df:
53:3a:74:ef:db:1f:ba:02:47:ee:96:63:f2:17:70:90:92:f0:
c5:54:b5:a2:9e:db:b7:f5:60:8f:42:5f:7b:a5:0a:ed:9a:28:
c2:b6:e0:c3:fe:cc:2a:6c:42:34:bd:c0:b7:0b:3f:db:22:e3:
9d:fa:95:f7:68:4c:ce:90:d3:33:f9:b0:10:0b:82:28:9c:bf:
36:64:29:f0:56:53:b3:7d:74:83:5b:3c:f2:e1:d6:1a:ac:68:
b5:c7:9d:ca:1e:26:3a:7a:cf:71:a3:cd:af:30:42:73:b7:ce:
6e:24:61:fb:38:1d:75:92:cf:0a:34:85:75:b7:ea:0f:6e:2f:
21:87:58:9b:58:4f:09:8e:5a:eb:ba:e1:0b:64:c5:4c:26:f0:
fd:af:96:c2:ba:3e:0c:72:d8:fa:95:43:1a:92:7c:46:01:22:
13:81:2f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:02 2025 by rpki-client