Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier: 0QYDfTcQf/dx/PAfWRWRZH104xdUNCpQY0613zR6myk=
Subject key identifier: ED:23:F7:EB:A9:66:D9:75:9A:0E:69:13:FC:EB:AB:A1:90:3B:D3:8A
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer: /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial: 019A70DBFEC24287F30104ECBD262CBFED8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 03:00:57 +0000
Manifest this update: Tue 11 Nov 2025 03:00:57 +0000
Manifest next update: Wed 12 Nov 2025 03:00:57 +0000
Files and hashes: 1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: KKXhH3Sa1T6+T/4uLqdAegJLiHbNv6U9cwenNTFPOEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:fe:c2:42:87:f3:01:04:ec:bd:26:2c:bf:ed:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Validity
Not Before: Nov 11 03:00:57 2025 GMT
Not After : Nov 12 03:00:57 2025 GMT
Subject: CN=ed23f7eba966d9759a0e6913fcebaba1903bd38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:11:9e:95:b8:2a:49:13:b1:d4:d2:8a:1c:
24:82:0e:58:0e:cc:38:85:e0:5a:5c:27:30:ee:0e:
ab:a6:27:bc:55:db:bd:08:8e:26:5b:c0:b2:d5:cc:
a6:5d:e1:98:b5:79:fa:bc:21:c1:b2:55:3c:99:c0:
32:74:e0:c5:4f:80:2b:45:bc:54:b6:a2:fa:89:4d:
6d:41:61:94:81:60:02:da:33:da:67:94:c6:5b:08:
fd:52:ff:0b:b4:7b:f9:7f:22:16:3f:a2:e2:f3:f0:
2d:36:a5:a2:66:6e:67:cb:3e:50:22:f6:40:db:24:
ac:0f:3a:64:c2:5a:cf:f2:87:b7:8d:c2:f4:9c:09:
33:96:dd:05:8b:f7:c2:7c:2d:a0:7b:3e:dd:2f:bb:
f0:40:16:e1:41:5d:8a:89:7b:c6:3e:42:67:c1:9d:
53:46:59:0e:ad:4d:39:e6:e1:53:b5:4b:41:03:dc:
0e:76:40:16:18:28:da:aa:4c:47:d9:75:e2:5c:ad:
ff:4e:7f:6e:31:84:74:f2:37:d6:e4:d5:fb:ce:3e:
43:44:36:0a:c4:42:84:d0:a2:f0:e7:f5:13:81:48:
72:d4:09:18:d8:9a:78:ef:80:09:4b:32:44:82:94:
5c:78:bf:48:fd:55:0b:23:1a:e2:32:af:bc:f3:22:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:F7:EB:A9:66:D9:75:9A:0E:69:13:FC:EB:AB:A1:90:3B:D3:8A
X509v3 Authority Key Identifier:
keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:51:7e:5f:ab:4b:23:85:e2:e6:be:c4:0f:44:25:14:91:28:
69:14:c0:a4:e2:0b:62:8e:87:45:dd:0a:8c:b2:20:e5:94:d1:
c1:da:2e:04:12:ee:63:2a:82:5c:d7:89:fe:d5:f1:93:9e:58:
0b:74:f7:b5:71:22:d8:a2:30:a8:69:03:98:57:27:54:93:63:
9e:b0:57:0b:cb:d6:55:92:e9:b6:90:e2:e5:75:14:e3:36:a1:
0a:03:e8:48:9d:9c:aa:06:c8:ed:02:92:4d:99:d6:83:99:f3:
f0:4c:6d:f0:f3:de:3b:6a:35:83:78:9c:88:8c:e3:be:63:2e:
02:92:f3:ec:45:a7:6c:b2:9a:e3:75:dd:e8:71:3f:ec:c0:9d:
a8:46:37:5a:ae:a9:fb:02:76:b8:cc:48:f2:17:0b:1b:9e:b8:
95:99:e9:9a:85:57:af:3e:91:37:a4:d1:40:5e:bd:d6:2f:20:
4d:00:e2:c0:38:52:ae:9d:9d:51:72:db:bc:e2:c0:96:ea:21:
01:d9:5e:4e:c4:6c:ea:ae:f0:bb:15:df:56:25:15:37:90:39:
73:ec:97:97:cf:b8:ac:e2:ad:69:35:2c:70:e3:5c:88:79:f1:
a3:12:25:cd:56:11:40:36:22:cc:da:89:41:64:42:7c:97:0e:
88:e4:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:32 2025 by rpki-client