Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
File: RgxXERGq_A1R5f3ggjC_eLieSkg.mft (raw, json)
Hash identifier: KPLvWnRI9t8tsHV8B1cGlqwGlFVpMxNW8OJza5ZlDmU=
Subject key identifier: C3:E9:CF:8D:A2:DC:CF:DD:B8:77:1F:A9:D1:E7:31:B3:01:7A:05:50
Authority key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48
Certificate issuer: /CN=460c571111aafc0d51e5fde08230bf78b89e4a48
Certificate serial: 019A71809D88FFB69E22917AC2F482DDCCEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: RgxXERGq_A1R5f3ggjC_eLieSkg.crl (hash: gwdp8VmQCqxDwAYbuW4mjzfgMDq2e1dobsAl4ur8OWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9d:88:ff:b6:9e:22:91:7a:c2:f4:82:dd:cc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460c571111aafc0d51e5fde08230bf78b89e4a48
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=c3e9cf8da2dccfddb8771fa9d1e731b3017a0550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:0e:73:bc:7d:2d:c5:41:90:8b:ff:be:df:
21:0e:94:4f:3e:ce:b7:b5:5a:b9:38:a6:e7:1f:6a:
82:32:02:f6:e9:7d:fb:50:29:6f:00:22:90:a9:fc:
f1:6f:08:0b:8a:fd:2d:1e:37:7a:27:da:fc:15:45:
97:d3:7b:49:59:0b:69:e6:91:cd:70:22:4c:18:d7:
3c:26:01:8a:03:03:e4:b7:81:83:9c:0d:78:55:64:
12:d3:38:13:f3:ea:39:ff:14:00:39:52:0f:a8:0d:
b2:b3:10:a3:be:12:9f:21:c3:b0:16:f9:61:f0:1c:
4d:f8:ee:99:8d:d1:2d:53:53:68:c7:c6:57:0f:eb:
c0:19:03:ed:ea:e0:74:74:cb:dc:55:47:ef:64:fc:
5f:17:42:3e:90:ac:60:ec:9c:fb:77:88:01:83:77:
05:b4:65:5a:2c:58:e3:8a:03:89:e8:b5:ab:2c:7a:
04:ca:db:6a:6e:62:61:95:84:b0:4a:d6:1e:16:15:
19:c0:b2:09:b2:95:e3:08:20:a1:a0:8d:db:42:be:
71:f4:40:de:2c:46:43:74:93:cc:03:d0:13:62:84:
82:cf:79:13:2b:85:6c:53:f0:ef:70:e4:f5:58:3e:
91:38:d0:dc:45:ab:da:e9:8d:da:ae:dd:c4:3c:15:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:CF:8D:A2:DC:CF:DD:B8:77:1F:A9:D1:E7:31:B3:01:7A:05:50
X509v3 Authority Key Identifier:
keyid:46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2d:8a:4c:a3:97:3d:0b:8c:b2:b8:08:22:73:7d:f4:77:77:
3c:f1:07:ef:82:dc:88:e3:db:70:8c:2e:21:9a:c2:1b:76:b3:
ae:f6:9c:15:64:49:9e:d8:40:e4:05:32:87:6b:09:12:f5:82:
1e:26:f1:cf:f7:25:f0:82:ab:24:c7:da:36:44:07:85:c9:c2:
81:a0:f7:d0:56:75:1a:c1:2d:a4:bf:04:36:ae:f8:58:24:96:
21:b5:47:7b:5d:8c:f8:8b:cf:9a:43:0b:13:b3:00:4a:1b:51:
1d:f9:92:39:17:31:95:0d:46:7b:0b:16:6a:ab:11:51:01:da:
b7:22:87:5d:10:45:80:1b:df:83:69:3c:a7:bc:fe:ff:f0:d5:
11:fb:73:6a:15:d6:86:46:d6:3f:d4:55:f9:1e:2d:0d:05:2f:
a6:f9:a0:02:70:1c:5d:2d:c9:04:de:24:b0:f5:aa:b3:37:87:
27:75:9f:fb:e3:07:43:b9:9f:ce:04:97:be:c0:f5:5c:12:88:
cf:e6:54:ad:9e:a7:7b:2e:9c:ff:4e:1b:32:4b:5c:e1:3d:d0:
ee:ad:6f:c8:76:bf:31:04:a6:89:25:b5:06:c2:c2:29:8d:b7:
54:58:51:97:43:91:4c:02:55:48:32:6f:18:1d:df:66:34:e1:
0c:1a:20:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgJ2I/7aeIpF6wvSC3czvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MGM1NzExMTFhYWZjMGQ1MWU1ZmRlMDgyMzBiZjc4Yjg5
ZTRhNDgwHhcNMjUxMTExMDYwMDQ1WhcNMjUxMTEyMDYwMDQ1WjAzMTEwLwYDVQQD
EyhjM2U5Y2Y4ZGEyZGNjZmRkYjg3NzFmYTlkMWU3MzFiMzAxN2EwNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy4Oc7x9LcVBkIv/vt8hDpRPPs63
tVq5OKbnH2qCMgL26X37UClvACKQqfzxbwgLiv0tHjd6J9r8FUWX03tJWQtp5pHN
cCJMGNc8JgGKAwPkt4GDnA14VWQS0zgT8+o5/xQAOVIPqA2ysxCjvhKfIcOwFvlh
8BxN+O6ZjdEtU1Nox8ZXD+vAGQPt6uB0dMvcVUfvZPxfF0I+kKxg7Jz7d4gBg3cF
tGVaLFjjigOJ6LWrLHoEyttqbmJhlYSwStYeFhUZwLIJspXjCCChoI3bQr5x9EDe
LEZDdJPMA9ATYoSCz3kTK4VsU/DvcOT1WD6RONDcRava6Y3art3EPBVXawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPpz42i3M/duHcfqdHnMbMBegVQMB8GA1UdIwQY
MBaAFEYMVxERqvwNUeX94IIwv3i4nkpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wNjllOTUtMGFjMi00YzI3LTgyYjQt
YmQyZmZmNWI4ODQ5LzEvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wNjllOTUtMGFjMi00YzI3LTgyYjQtYmQyZmZmNWI4ODQ5
LzEvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPi2KTKOX
PQuMsrgIInN99Hd3PPEH74LciOPbcIwuIZrCG3azrvacFWRJnthA5AUyh2sJEvWC
Hibxz/cl8IKrJMfaNkQHhcnCgaD30FZ1GsEtpL8ENq74WCSWIbVHe12M+IvPmkML
E7MAShtRHfmSORcxlQ1GewsWaqsRUQHatyKHXRBFgBvfg2k8p7z+//DVEftzahXW
hkbWP9RV+R4tDQUvpvmgAnAcXS3JBN4ksPWqszeHJ3Wf++MHQ7mfzgSXvsD1XBKI
z+ZUrZ6ney6c/04bMktc4T3Q7q1vyHa/MQSmiSW1BsLCKY23VFhRl0ORTAJVSDJv
GB3fZjThDBog8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:48 2025 by rpki-client