Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
File: X9-gmGf3f6_At75-PE3iDirEN3A.mft (raw, json)
Hash identifier: KFSPI95JyqoK4SgMwlRbkPi8UOP8qSa46WdaQtqnrEw=
Subject key identifier: 3E:E9:F6:25:00:00:7E:6B:AB:9C:1A:BA:41:5C:1C:CA:AF:5A:76:8C
Authority key identifier: 5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70
Certificate issuer: /CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770
Certificate serial: 019A725C84FBBC1C074CC1FF7B72241D92EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
Manifest number: 38
Signing time: Tue 11 Nov 2025 10:00:57 +0000
Manifest this update: Tue 11 Nov 2025 10:00:57 +0000
Manifest next update: Wed 12 Nov 2025 10:00:57 +0000
Files and hashes: 1: X9-gmGf3f6_At75-PE3iDirEN3A.crl (hash: bw/gel3Ator0xM2fBheTE8usJhbz0MCYIA9Va4KQL7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:84:fb:bc:1c:07:4c:c1:ff:7b:72:24:1d:92:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770
Validity
Not Before: Nov 11 10:00:57 2025 GMT
Not After : Nov 12 10:00:57 2025 GMT
Subject: CN=3ee9f62500007e6bab9c1aba415c1ccaaf5a768c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:6f:67:5d:40:89:f7:47:5d:7f:2b:0a:e6:
31:52:d7:15:bd:fe:0f:c7:4b:d1:83:82:86:74:66:
b1:52:32:6a:a3:88:5f:f7:d4:a2:04:b8:9a:56:52:
e6:7e:72:4d:3e:cd:ab:52:78:00:3c:63:a0:e9:8d:
7a:bf:82:d8:09:5b:66:d6:b1:c8:71:a9:4b:5a:5b:
17:0c:8e:7d:49:e2:de:b3:7c:86:5c:02:10:0b:64:
7b:e2:83:17:43:01:2f:4a:0f:c2:d3:a2:ee:c8:88:
44:7f:ec:57:14:87:82:67:02:a3:b4:f1:e1:80:9e:
51:db:0d:40:26:2e:f5:9a:b6:86:a3:81:72:39:04:
33:08:30:64:ae:16:bf:49:1f:80:97:d6:8c:44:9d:
43:7a:f2:71:a7:ae:07:12:f1:bc:9d:ff:5c:bf:4d:
f5:20:53:e5:fd:ee:e5:57:f2:51:81:7a:d9:d0:b9:
1a:84:1a:9c:6d:a2:ec:ba:3f:03:ca:a5:8a:66:89:
0f:be:63:ed:5e:b6:6f:e7:ca:f5:82:70:a3:ae:d8:
36:c8:af:ad:ff:2b:19:18:b9:5a:de:de:e4:41:79:
bd:c8:a6:84:de:2b:61:37:25:0c:6b:fa:58:d1:f9:
86:3f:ed:fe:76:cd:4b:e0:18:71:35:22:71:57:86:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:F6:25:00:00:7E:6B:AB:9C:1A:BA:41:5C:1C:CA:AF:5A:76:8C
X509v3 Authority Key Identifier:
keyid:5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:15:da:82:a4:5e:7c:80:0e:5f:c8:69:3d:ce:4c:97:ac:82:
f4:53:bb:4c:dd:3f:28:e5:69:71:55:9c:53:1e:bc:9c:3f:b3:
04:ea:ab:40:0c:4a:92:61:4c:e0:8a:47:74:c4:51:1e:6f:c7:
47:7d:f9:1a:01:6c:5e:da:c3:38:89:56:d8:c5:d3:23:ad:3b:
3a:22:fb:33:05:cf:f8:34:e4:53:34:39:9e:59:3a:ac:98:7f:
cf:fb:28:1d:ac:c0:bd:63:3a:7d:fc:fa:4b:7c:f9:ea:49:0b:
48:82:03:49:3a:c2:68:38:37:82:8d:04:2c:13:76:e0:43:c4:
73:9a:6d:bd:3a:8d:db:d5:d9:b6:9e:fe:dd:d6:f5:1c:c2:bb:
4c:35:8d:dc:c7:26:f4:51:53:89:b2:9e:e3:c6:21:8f:0e:50:
58:c9:5a:0b:d2:ad:a8:9a:f8:b6:fb:b0:a4:62:dc:9d:de:f5:
ab:c4:1a:dc:80:45:71:15:e6:77:0e:43:bf:ec:36:0c:79:d1:
e1:15:3d:8f:73:39:8b:e8:62:18:6f:de:bb:39:60:fe:f7:00:
6b:d3:c7:8c:ac:56:02:7e:bd:75:fa:55:1c:0d:a7:55:4e:4a:
5e:42:9a:8c:4b:a7:0f:c6:fc:4e:f4:d4:a9:52:eb:75:27:42:
07:81:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:19 2025 by rpki-client