Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
File: RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft (raw, json)
Hash identifier: KKkFvP6Vx+Leie7J4CF7T0pJVB82RvjgMzcT/MizVUQ=
Subject key identifier: 4E:B5:91:D4:9B:13:56:95:F1:1D:88:07:95:8B:BD:75:E9:EB:94:3B
Authority key identifier: 44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
Certificate issuer: /CN=440586c54614b96edb84709524a334b31c9999fd
Certificate serial: 019A71B773D6EEB8B6369AA322042FCCC8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
Manifest number: 0A27
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl (hash: /r7Yurob0/HSKTpR1efBqT03WTru9uaFb/pM6bIAVFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:73:d6:ee:b8:b6:36:9a:a3:22:04:2f:cc:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440586c54614b96edb84709524a334b31c9999fd
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=4eb591d49b135695f11d8807958bbd75e9eb943b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:05:27:d1:7a:7e:2d:75:07:ab:67:fd:e4:
3e:62:a6:67:4e:1f:f0:c8:ca:b7:06:d4:a4:eb:2b:
3d:58:a6:72:21:c2:00:dc:d2:df:32:1c:dd:0f:5e:
d6:f8:6d:68:bc:43:15:51:73:89:cd:77:3a:30:6e:
c6:bb:c7:c2:0d:ad:c2:3f:ce:82:c8:fa:2d:4c:01:
60:21:e1:6c:e7:a8:cb:51:85:da:6a:d9:f6:0c:7c:
a7:43:ac:29:33:80:37:d1:34:b8:6a:07:db:ac:c2:
e5:09:cd:0b:5c:a6:39:67:89:e3:64:98:86:eb:a1:
76:96:38:6d:7a:55:14:f2:2f:48:27:f8:db:21:ab:
40:d5:d1:1e:74:f2:bb:eb:5a:b6:80:b1:0a:26:dc:
50:64:7e:4f:28:86:57:f4:40:6c:0e:0c:2d:02:52:
18:e8:99:08:c9:80:a7:a5:84:33:f0:6c:34:c9:81:
53:fd:ca:a8:af:24:8c:0a:53:e8:90:a2:ba:11:a0:
57:c7:ed:15:ac:84:e6:44:eb:c8:fa:e3:e5:42:dc:
77:40:eb:ab:d1:73:49:f3:f8:2b:ed:64:f3:87:80:
57:30:de:f3:42:d8:74:df:95:de:97:79:4a:37:d5:
ca:da:e2:18:5b:7d:75:36:90:5d:0b:66:60:cf:d4:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B5:91:D4:9B:13:56:95:F1:1D:88:07:95:8B:BD:75:E9:EB:94:3B
X509v3 Authority Key Identifier:
keyid:44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ff:33:d0:e7:d9:29:78:ef:74:9a:6d:e1:47:69:01:56:fe:
d2:67:4e:ea:48:06:0b:14:dd:b6:5e:be:a5:31:6d:18:6c:92:
4a:0d:8c:06:50:c1:19:ab:88:5c:6b:79:4e:02:fb:cd:c8:ef:
67:ec:6f:fa:5a:14:5f:f3:0a:a0:71:6a:14:0a:cf:ee:5d:3b:
44:b1:96:e1:21:57:bd:62:05:d9:46:b3:b9:5d:d6:ec:15:31:
96:01:96:e1:6b:1f:ba:da:01:c5:ce:1a:39:ee:62:fb:32:1d:
2e:ba:98:d6:cb:3f:76:10:f8:ca:c0:32:f4:d3:e2:c2:b3:6a:
fd:c3:d5:9f:af:5c:b7:09:d9:94:98:d4:3b:b4:bf:07:f8:8f:
86:bd:68:87:68:ee:4c:9d:23:a6:3c:96:e8:87:84:f2:1a:65:
cd:c0:cb:7b:fc:bb:4f:9e:28:b6:4c:bc:be:c9:d5:bc:38:5a:
d3:06:e1:fd:be:77:d5:99:08:d7:a5:69:57:ad:e4:ff:07:2d:
c3:c0:5a:73:82:3d:c7:66:af:a8:3d:55:b9:ea:39:3b:38:c4:
7c:26:9a:f9:dc:4c:98:e3:c4:f8:75:22:ee:45:58:aa:dd:b4:
6a:ca:89:41:94:88:84:47:a3:27:fc:01:79:37:11:03:50:99:
29:c8:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:09 2025 by rpki-client