Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File: dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier: 0WRSGxWyV6BMFj+41av2g47po6/WkPk6ZCK5oIEb1VM=
Subject key identifier: 69:83:0D:29:45:A9:FB:B3:C8:17:DC:F2:B7:41:8D:F4:D9:72:E4:F2
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer: /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial: 019A722623C5ED8279DFD2CB12BCC917E66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number: 0EF6
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: v7rJcnEt7dl7TopigxlT4ne0Dzd0UqpKaQa64GCoZSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:23:c5:ed:82:79:df:d2:cb:12:bc:c9:17:e6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=69830d2945a9fbb3c817dcf2b7418df4d972e4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:03:ed:3d:b9:ec:12:51:d8:88:e0:6f:f5:
43:bf:ab:b6:69:72:c9:78:59:06:54:35:06:90:6e:
8a:2f:4a:36:c8:fd:11:f1:d0:97:78:ac:c0:13:82:
f5:03:04:c8:ee:61:44:fa:5d:6d:fa:b8:1c:a1:1f:
68:04:97:62:14:3b:a5:31:09:c1:48:8c:c4:c8:be:
b2:42:d7:7b:40:ef:0f:14:b7:9d:a9:f2:86:7a:56:
84:04:06:64:7d:88:6b:38:0f:d5:b7:54:12:f7:9e:
5a:14:93:5c:47:63:32:00:58:a3:b2:df:92:3c:d2:
58:24:76:3a:b9:77:76:f2:77:11:ee:2d:c2:08:10:
70:0c:a4:bb:83:5a:0d:61:e8:76:b3:01:82:a6:65:
10:0b:88:e3:f2:e6:09:de:06:e7:c5:5b:03:56:bf:
96:bf:b2:78:05:95:f6:1f:2d:d4:21:3a:8d:77:e0:
8d:3e:d6:0b:47:71:25:49:f0:9d:c1:7c:20:0e:94:
dd:d5:d5:19:80:17:4a:34:c4:53:f1:36:1e:95:12:
51:8d:0f:7e:de:a4:9f:3b:e2:30:df:6d:57:51:cb:
db:58:25:c7:f5:64:91:c4:27:9e:d2:06:8b:91:6a:
c1:49:70:2d:e7:15:29:98:18:2b:52:26:8e:27:8c:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:0D:29:45:A9:FB:B3:C8:17:DC:F2:B7:41:8D:F4:D9:72:E4:F2
X509v3 Authority Key Identifier:
keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cd:3f:28:c2:e9:46:00:15:d8:29:7d:c9:1b:15:79:cc:b0:
45:1d:9d:59:43:0f:24:8b:f1:d4:6d:da:05:9f:9e:90:ed:fb:
f1:26:40:66:d1:a2:c3:4e:ba:af:ca:3e:02:95:77:ae:34:de:
89:00:57:b1:fc:47:7a:ba:04:b3:b4:01:6e:2a:35:fc:8c:92:
c6:8e:e2:4a:bd:88:67:68:ce:d7:d7:c9:26:54:74:a3:09:d9:
58:3f:96:20:53:89:af:ed:cd:6d:5e:be:31:8f:b6:eb:1d:34:
4a:fd:5f:66:a5:ac:2f:03:b3:2d:9a:78:f6:c1:2b:2d:9e:e7:
21:99:58:ad:18:c2:b0:7f:f2:f8:30:da:cd:54:40:a0:e4:27:
bd:f1:59:a7:61:1f:73:16:3d:df:c0:91:af:89:a4:b5:a5:4d:
b9:86:2c:69:ef:e0:54:4c:e3:f2:b7:5f:b3:a2:1d:59:a1:d9:
48:3a:13:56:a8:58:fd:4a:05:8d:47:d8:60:4c:85:a1:b0:ea:
85:f1:d6:d5:31:3c:5b:5a:8a:3f:e1:fa:eb:7b:f3:95:da:eb:
8b:de:f5:35:c6:3d:85:34:5f:22:5a:59:af:b5:03:d1:6f:14:
2c:95:87:a5:1b:b8:ec:75:1f:37:e7:7a:0e:67:3f:34:58:40:
c1:1d:a0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:05 2025 by rpki-client