Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
File: mdXL9__sUlSnHvex7fem12x1liU.mft (raw, json)
Hash identifier: dwf/u/x45ulb8ooX5y3lO2K6+Kjo6aef+7IFdlijnU0=
Subject key identifier: 65:B0:A3:A6:95:0E:8F:4F:0C:C6:08:41:D3:5C:BB:C9:0B:0F:F0:16
Authority key identifier: 99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
Certificate issuer: /CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Certificate serial: 019A71B7F0192FD2E766259C684FB1A1CB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:11 +0000
Manifest this update: Tue 11 Nov 2025 07:01:11 +0000
Manifest next update: Wed 12 Nov 2025 07:01:11 +0000
Files and hashes: 1: mdXL9__sUlSnHvex7fem12x1liU.crl (hash: 7Hk9iP+NHZaraNrWUOt4+pMt/eI9Qufe0Vn3gBEOhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f0:19:2f:d2:e7:66:25:9c:68:4f:b1:a1:cb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Validity
Not Before: Nov 11 07:01:11 2025 GMT
Not After : Nov 12 07:01:11 2025 GMT
Subject: CN=65b0a3a6950e8f4f0cc60841d35cbbc90b0ff016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:eb:0c:d8:8d:2b:ad:dc:4d:6c:bc:f1:22:
a1:20:d7:d4:06:85:0c:80:85:8a:38:78:f4:e3:1a:
32:aa:5a:0f:e6:25:29:70:29:8d:dc:7c:86:3e:b1:
57:5b:62:e8:58:a8:ba:35:25:cb:a6:f5:bf:7c:3c:
77:64:13:3a:44:8f:9d:9a:5a:b9:8a:a1:93:9a:43:
1c:40:e6:fe:5d:94:a2:e5:d5:1b:d9:19:4f:dc:b6:
dc:d7:2a:08:1e:d4:a4:8b:68:85:a6:fd:cd:f6:79:
43:1d:3d:89:2c:c2:7a:6f:b9:15:80:cf:a4:88:40:
14:54:5b:c3:48:1d:2a:e4:51:7f:9f:ab:37:34:1e:
28:8e:44:11:4f:0c:7e:39:c9:1e:28:c5:6f:99:27:
38:ce:a5:52:5f:c2:a0:6b:41:20:2b:0a:36:ea:62:
04:86:fc:f0:ed:e6:60:22:da:40:2b:3d:5b:d1:77:
7b:a9:b1:3c:83:27:f9:ce:7d:fd:83:a4:ad:0c:2b:
60:57:b3:b8:11:d2:83:59:53:c5:e5:26:ed:7f:a7:
1b:9f:ad:77:b9:3a:ae:7e:61:53:4a:98:bf:d8:ef:
eb:f8:ec:db:08:94:90:85:38:f6:7b:b9:5a:08:65:
8f:76:68:a7:01:63:1d:a0:03:c4:c1:b1:1e:66:45:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B0:A3:A6:95:0E:8F:4F:0C:C6:08:41:D3:5C:BB:C9:0B:0F:F0:16
X509v3 Authority Key Identifier:
keyid:99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:60:3b:8b:bf:e5:69:f2:fd:f5:07:e7:f1:c6:a5:ef:57:99:
9c:84:03:97:54:4a:08:0d:1f:75:a3:bf:34:1f:9a:4f:0a:6e:
98:2f:75:8f:2b:c9:4c:34:89:41:af:73:1b:d5:b5:e4:20:6c:
d3:04:f0:73:ca:ad:73:f0:1f:97:ac:90:6c:6d:e3:69:d8:a9:
0f:c5:7f:c9:03:e8:d0:0c:cf:e9:f8:cb:f3:99:09:74:d8:96:
f8:bb:51:1b:d9:89:e1:44:9c:9c:bd:8d:a0:14:78:44:9d:4c:
2e:e2:c1:9f:1d:ab:e6:33:a5:32:a2:f0:93:74:73:b3:1e:21:
94:3a:76:54:a1:99:45:10:5f:ca:15:66:00:86:3f:e3:9b:d2:
7a:9f:47:0c:34:0c:a5:cf:96:37:97:49:e4:c2:04:50:08:80:
e4:7a:b0:6f:5b:e0:75:95:84:c3:be:d3:85:76:cd:c7:a5:5e:
fa:a0:d4:12:8d:12:31:dc:3e:eb:d7:89:2a:56:91:dc:44:4a:
df:f0:b5:d1:31:49:68:ca:e2:c7:f5:ec:0a:55:89:fa:c6:f8:
ec:d4:e2:76:cf:28:0f:49:c7:ab:83:28:11:0c:c2:f9:97:03:
2f:5b:49:62:c8:c6:4f:05:92:30:81:3b:c4:ac:8d:f5:60:b6:
ef:94:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:08 2025 by rpki-client