Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft
File: RE6tbxE5qlv2Y80A_myq4UpiFRI.mft (raw, json)
Hash identifier: josfmNre8QnPc6yk047bpzaCeRRsNq0rGGqFzu67pdU=
Subject key identifier: AA:66:0B:A2:0F:8D:FB:9D:AD:08:C5:49:4E:26:AD:EA:10:F0:71:FD
Authority key identifier: 44:4E:AD:6F:11:39:AA:5B:F6:63:CD:00:FE:6C:AA:E1:4A:62:15:12
Certificate issuer: /CN=444ead6f1139aa5bf663cd00fe6caae14a621512
Certificate serial: 019A7225C6119503B38D8DD80911D003D757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft
Manifest number: 8F
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: RE6tbxE5qlv2Y80A_myq4UpiFRI.crl (hash: L2lw3IE15qmxUV82d4HU6ZKVF0XhYV+K+rqktEytZVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c6:11:95:03:b3:8d:8d:d8:09:11:d0:03:d7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444ead6f1139aa5bf663cd00fe6caae14a621512
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=aa660ba20f8dfb9dad08c5494e26adea10f071fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:d2:98:3b:59:11:5d:35:85:0b:9c:69:4a:
60:3f:8d:ae:61:f3:4e:c6:1a:d3:d9:8a:ee:b1:e3:
51:d1:ba:a1:c9:58:b0:0f:d3:a8:11:b6:a8:80:52:
89:dc:3e:0a:80:fa:00:93:8d:7d:9b:53:93:11:ea:
40:79:6a:da:4f:1d:f5:94:e8:e5:a6:f1:8e:c3:7f:
4d:7b:59:57:d4:4a:e1:63:2c:c9:c0:49:61:29:01:
5a:52:2b:be:95:aa:cb:c5:98:ba:f7:8a:61:c7:34:
f5:42:2a:06:5c:58:3d:bb:ca:6d:ce:e0:3f:d1:ff:
4a:aa:2c:82:e9:78:ba:0b:f3:97:b3:af:92:69:b3:
f8:bc:60:fc:e9:60:69:c3:77:26:a0:01:be:47:bf:
d0:f6:c6:99:c2:82:ec:43:4e:b0:d1:be:ab:56:90:
53:e1:9b:ac:da:d2:0c:58:b3:ae:ce:cc:b3:ba:62:
d3:5f:1c:b9:e2:92:55:03:28:36:b2:7e:4d:11:12:
d8:d7:0e:bd:e6:40:f3:39:8d:3f:a3:b1:d1:a5:df:
2d:a8:80:6a:c4:1a:a5:ca:86:7f:2c:05:eb:54:bc:
38:d1:2d:7f:96:2e:6c:60:81:36:bc:d3:0c:19:09:
d5:36:3e:27:bf:7f:19:99:47:d8:c8:82:f4:86:1b:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:0B:A2:0F:8D:FB:9D:AD:08:C5:49:4E:26:AD:EA:10:F0:71:FD
X509v3 Authority Key Identifier:
keyid:44:4E:AD:6F:11:39:AA:5B:F6:63:CD:00:FE:6C:AA:E1:4A:62:15:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RE6tbxE5qlv2Y80A_myq4UpiFRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/92e640-a4e8-409b-9285-4cf66563ca0b/1/RE6tbxE5qlv2Y80A_myq4UpiFRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:76:49:1a:c7:5d:ad:9a:03:45:b3:f8:bb:f9:ca:06:4c:5f:
7e:17:2a:0b:59:8e:2f:a4:d5:c9:aa:bc:6b:29:08:b3:b6:75:
fc:77:82:ea:29:43:a9:75:5a:40:a1:9f:c7:44:59:cf:6a:23:
05:9f:45:09:bf:32:31:a4:d1:59:25:af:fb:c0:d5:3f:cc:97:
76:1f:0a:f1:0b:da:60:46:96:fb:ae:a4:7b:55:9f:2d:a4:d3:
b4:93:df:2e:8d:f8:fc:07:d1:b1:fc:03:9b:64:b0:85:31:d6:
13:c9:3c:b3:13:04:c1:82:42:66:28:05:d8:e5:89:b0:cf:56:
24:c7:34:88:ae:fa:cc:27:4d:66:b9:30:cd:16:13:eb:74:dd:
c1:9c:d7:a7:37:65:97:f5:a5:54:11:f0:87:7a:e2:fb:55:4e:
56:fe:de:66:c1:49:e9:27:b9:6f:87:5b:99:02:de:6b:23:e2:
8b:a4:c2:db:b8:14:19:ac:ae:fc:2a:fa:60:2e:43:52:f1:cc:
d1:51:66:8c:81:4a:06:91:fd:81:95:b1:20:69:2c:06:1f:88:
c7:a9:48:cf:77:0d:b9:f0:fb:2f:cc:03:d9:79:7a:bf:2e:1d:
7b:20:1f:cc:1b:61:e9:36:d1:db:cb:f4:ac:6d:2e:a1:be:32:
5e:16:a4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:37 2025 by rpki-client