Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
File: X6FRijy1wnSeMNn_Icg3iJHOgSU.mft (raw, json)
Hash identifier: lcvbfBS3E//POm7NoFz2uE3dTulUr3xAGOmroTh/tdA=
Subject key identifier: 5F:EF:CD:7D:E1:E6:42:80:38:94:41:06:42:C7:B0:36:6F:E3:48:89
Authority key identifier: 5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25
Certificate issuer: /CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
Certificate serial: 019A71B79D27C1C2E2208BDCAC037D10D264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
Manifest number: 098F
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: X6FRijy1wnSeMNn_Icg3iJHOgSU.crl (hash: 9A+HTeKwcaNTfLbHjA0lkAik9dQ2moaSFZmHFaSNkMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9d:27:c1:c2:e2:20:8b:dc:ac:03:7d:10:d2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=5fefcd7de1e642803894410642c7b0366fe34889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:45:19:08:5f:b4:bc:d3:cd:16:0b:a7:75:
50:3c:fb:1a:3b:1b:82:54:b2:ed:26:ad:f4:6b:8a:
16:1f:d1:4c:da:bd:42:41:8d:97:3e:e6:9e:12:71:
d8:2e:56:9d:54:00:b8:d5:c3:f4:87:5c:1a:bc:20:
14:20:78:27:7f:45:90:4c:5e:88:4e:85:f5:25:36:
d1:8b:26:c7:93:e7:7a:1e:e3:07:9d:09:70:b9:74:
7c:c4:d8:2c:eb:8c:4c:2c:9c:7a:12:a8:41:15:3b:
26:e9:e2:42:11:aa:1d:0e:10:28:57:ab:30:15:fd:
90:fe:27:e6:01:64:24:ad:5c:74:1a:60:6b:f4:a2:
d9:c2:b2:73:0a:76:4d:a0:bd:ed:d1:87:ff:6f:54:
d8:0b:b8:29:cc:31:9c:47:d8:6f:cc:4c:d3:11:85:
49:0a:d8:dc:11:0b:f0:76:fd:82:25:62:de:17:29:
70:7a:36:2e:af:5a:d2:ed:10:aa:58:31:2d:a4:26:
2f:fa:c6:81:72:4e:25:96:7e:95:56:61:c6:de:6c:
82:24:84:52:80:f1:88:93:39:e2:be:36:57:f6:7d:
5b:b8:54:34:b4:9e:70:ed:28:66:5d:dc:ee:33:53:
e6:82:90:be:22:38:bc:b7:ed:d6:5a:43:dc:0f:dc:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:CD:7D:E1:E6:42:80:38:94:41:06:42:C7:B0:36:6F:E3:48:89
X509v3 Authority Key Identifier:
keyid:5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c6:ad:ba:3d:4c:25:60:a7:8b:70:3c:79:35:76:72:a5:6b:
51:02:b3:9f:11:19:c7:7d:14:86:49:05:41:2c:b2:8c:85:45:
a6:61:e7:f3:ea:24:b8:55:57:a0:70:07:70:6f:82:52:c6:df:
2a:16:28:39:03:c8:c2:13:38:d5:61:ab:d9:37:f6:ea:27:40:
9e:20:ec:25:56:38:6c:dd:03:cb:f0:9a:41:f4:26:78:28:6f:
6d:d9:70:92:62:ce:24:04:31:26:df:c2:e5:62:dc:fc:56:3d:
09:0f:52:eb:0e:0b:2e:5e:68:24:50:94:97:bd:7e:41:31:25:
bd:54:68:df:c2:ba:c1:c3:30:19:1a:62:5b:0b:6e:70:c4:24:
22:65:55:f4:1a:05:9c:a9:c0:ba:2b:b2:ec:be:a1:75:8a:9b:
2b:67:4c:3a:99:a8:6d:1d:a1:e5:38:ce:92:ff:d0:d6:ea:71:
6d:99:58:ed:31:93:a0:d7:f5:b2:33:7f:6b:05:c7:ad:20:c7:
fd:14:06:41:2f:98:81:cc:91:21:b6:4b:f7:07:99:96:5e:5a:
78:b7:96:79:fe:e2:b2:4d:f9:14:29:d7:4d:30:1c:f1:43:b3:
6d:4e:ae:e3:a2:80:c0:ff:71:ba:61:8c:a8:07:23:27:d1:52:
22:54:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:39 2025 by rpki-client