Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: 5QfC4tP6Yn9LvcCk1oTxGJNdg9AyBHQdzT6Mp8SW0a8=
Subject key identifier: 56:AF:B6:A6:70:70:00:CC:DD:A0:8B:98:AE:F2:F3:D0:CE:74:1B:EA
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 019A71EEE31337B8D708B97D981DC04561B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 066E
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: RKF2+6Ps8teC3bP1CaJu2k1JepyjeCwkfJfw1Zw5vlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e3:13:37:b8:d7:08:b9:7d:98:1d:c0:45:61:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=56afb6a6707000ccdda08b98aef2f3d0ce741bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:4e:a6:7c:60:38:f4:86:23:1c:b2:27:dc:
ab:47:4a:8a:9c:d6:12:e3:67:19:ca:85:94:4d:73:
f1:80:d6:69:75:aa:fd:d3:91:55:6d:86:a9:2f:2c:
8b:9e:f1:fb:38:a6:54:ea:dd:61:58:1a:53:15:63:
c5:3e:1f:2d:5f:37:20:d4:93:86:c8:83:b8:3b:c8:
87:7c:ae:14:82:25:45:e9:db:ff:40:9c:7c:7d:24:
1c:b0:43:72:ba:0a:30:4f:64:5f:62:58:16:c0:f2:
d6:27:cb:22:48:38:ed:33:4a:e7:4c:85:92:2f:36:
09:e3:7d:cd:92:43:7d:8a:1e:78:61:59:ce:4c:9d:
8a:28:12:ed:f5:41:c5:0f:cf:d2:25:15:44:78:45:
9a:42:20:b9:f5:05:ab:b1:f5:20:50:de:1a:a5:7e:
b6:31:81:d3:69:ac:05:99:fc:d7:8b:09:b3:c4:1f:
a5:dc:b3:3f:53:10:e8:d5:00:dc:40:47:fa:85:27:
9c:c7:86:5f:7b:2e:b8:ec:2c:cc:99:17:92:c4:be:
26:36:f0:b2:4f:a6:b4:e4:c8:d7:2f:95:3b:28:9e:
90:a0:6d:e1:92:1d:a7:6f:f1:ce:1a:03:86:2a:e8:
96:bf:f5:a5:58:a2:e7:4b:e5:2c:37:2a:b2:3c:f2:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:B6:A6:70:70:00:CC:DD:A0:8B:98:AE:F2:F3:D0:CE:74:1B:EA
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:82:38:bd:b4:e5:b3:a9:5e:ae:96:0f:06:91:79:13:a5:e7:
ef:2c:ec:1e:a0:41:05:2d:8c:22:23:a7:56:0f:04:ea:71:19:
57:1c:84:63:8d:a3:ba:92:2c:de:b6:49:bf:9a:ad:fc:05:c2:
13:c3:a8:d1:6c:dc:7a:de:90:04:87:e9:13:79:07:cd:33:c9:
ea:81:2e:ad:a9:b3:a4:9b:14:a6:63:d1:e2:73:48:08:61:cd:
b6:48:71:ef:b9:9b:09:a0:e5:33:97:3c:82:2f:40:87:ae:1e:
84:c9:5d:e3:a0:64:cb:d1:6b:d1:da:1c:43:ce:e8:f0:e5:67:
eb:a1:96:a9:fd:76:06:75:a5:f0:ae:7a:41:b0:6b:24:99:cf:
2f:3a:d7:20:6f:9d:0b:89:29:3f:65:ab:1f:7d:fb:ab:97:01:
69:93:d8:ee:b0:2a:40:3b:c5:ee:51:7d:dc:3c:8e:68:58:2c:
04:0c:71:f1:0a:92:e8:8c:b8:48:60:63:c7:e3:61:a7:fd:40:
4b:6c:ca:63:de:43:30:8b:27:b6:86:fa:09:92:2b:29:96:e4:
5a:00:2d:31:8c:42:c8:27:5d:17:7b:d4:d4:3e:81:22:db:f7:
12:9e:b2:62:b0:8f:d8:3b:07:e3:88:92:98:27:7d:ee:41:40:
7e:1e:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:15 2025 by rpki-client