Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: sAg9rlFzKJBo7APRqZVunzhB/VhY0KtfSi2gMgixW9k=
Subject key identifier: F1:78:16:54:12:71:82:E9:BF:49:BC:BF:35:89:E9:74:01:E0:13:88
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 019A71B81054870DD0CC94143F194FC55DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0DFF
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: eLZmR+UYn1ITUBgQEOehq9Mb+Zkp9J6js2Bm21vjJ7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:10:54:87:0d:d0:cc:94:14:3f:19:4f:c5:5d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=f1781654127182e9bf49bcbf3589e97401e01388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9b:6e:e9:41:f8:c9:d3:db:75:08:97:e6:12:
ac:68:20:35:ba:54:30:6a:88:42:33:64:2b:0e:36:
8e:e6:d2:61:3d:47:24:47:a9:61:50:fa:5c:f9:4b:
eb:7b:c1:a3:5d:e5:6d:46:9d:fc:e8:63:4d:7a:20:
32:37:44:8f:3b:9e:55:84:6a:42:ff:92:74:07:20:
a9:0c:e1:af:db:ea:6b:8a:62:8b:b1:65:c0:fe:59:
5a:df:6e:4e:a1:cd:f4:d2:c5:f9:24:86:a7:ea:f6:
98:e6:5c:a3:9e:42:ca:30:b5:a4:89:03:a0:30:02:
7d:d4:4c:ba:19:63:b0:a9:67:af:e2:77:b8:3e:0c:
a9:ba:fa:f8:dd:4d:35:a7:4c:c7:62:74:de:41:c2:
87:26:32:ac:57:6c:20:87:ce:60:c2:a0:83:e1:69:
ae:3d:aa:08:a7:d6:f5:6d:8a:30:96:ec:1d:58:ed:
79:c2:34:f5:3b:95:d6:a2:58:b3:4f:93:51:d0:a9:
4e:d7:0b:d4:5c:42:4c:08:73:ff:78:63:b1:8b:b2:
86:64:92:03:09:b1:d1:6d:76:62:f6:7e:a9:74:99:
82:f5:77:b1:8f:08:72:65:be:43:89:3a:ab:42:b4:
54:22:73:73:83:80:8a:d1:8c:2c:81:20:3a:d6:04:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:78:16:54:12:71:82:E9:BF:49:BC:BF:35:89:E9:74:01:E0:13:88
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ce:62:c6:58:f2:e6:1d:32:fb:36:6b:58:16:d1:59:d8:a6:
ff:6f:b1:cc:9d:1b:8a:c3:7d:09:4b:dd:7f:21:a2:b9:5c:e5:
f4:7c:ab:25:2f:a7:a0:df:0d:42:cf:dd:7e:93:2a:a4:70:28:
ce:fe:b4:7a:7b:9b:8a:72:2d:3c:62:52:20:65:0b:de:fa:26:
2a:93:fe:5c:c3:bd:82:25:4c:5a:a0:33:32:d8:3f:c9:4e:fd:
46:b3:cd:57:1b:92:43:7d:2f:92:6b:d8:98:08:91:68:2c:38:
e1:86:1a:21:5a:9f:4c:aa:0d:88:55:ae:9b:8a:64:d5:99:3c:
9c:9a:41:98:1c:d3:b8:be:16:5f:32:bd:f6:14:c1:58:16:42:
ee:4b:be:ff:a0:44:a9:d4:7e:6b:ad:1b:81:68:49:17:ce:7c:
da:f4:eb:00:87:a1:a1:d8:01:67:c0:fd:c6:64:6b:3a:0c:bb:
0f:ed:be:15:16:91:3c:71:b3:95:a5:b5:f4:a8:13:cd:bf:38:
bc:41:2d:1b:c8:29:67:2d:81:1c:85:ec:20:06:ee:64:c5:2b:
61:f6:06:51:21:e6:b1:51:31:f4:a0:69:0d:b6:2d:2b:b1:77:
2e:c1:90:dd:62:06:f2:2a:67:83:ab:ad:79:db:7e:89:e3:e4:
42:c0:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:51 2025 by rpki-client