Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
File: txU9FR23r-6-BDvkXy1v1Af8XdQ.mft (raw, json)
Hash identifier: NH5zgbfy9qmW/ZA6Boo6X1Cfee7xGQAlhDnI8N2Fqho=
Subject key identifier: D2:C4:7F:16:65:8F:E2:13:70:88:16:10:E3:49:94:2C:BD:41:6E:31
Authority key identifier: B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4
Certificate issuer: /CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4
Certificate serial: 019A71EE9F0ECEF4DA25D2B9614DA934EEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
Manifest number: 16
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: txU9FR23r-6-BDvkXy1v1Af8XdQ.crl (hash: Z/ZH9npvNOfrDNuMbAkrY5ufAZMAqNtHijK3rf6gs28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9f:0e:ce:f4:da:25:d2:b9:61:4d:a9:34:ee:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=d2c47f16658fe21370881610e349942cbd416e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:ac:68:b6:78:24:be:09:94:23:c6:18:46:
bd:4a:5e:2f:56:9a:5d:5e:a5:9c:31:7a:3b:20:3b:
07:d5:ed:ab:d7:b8:78:bb:38:87:66:ec:28:bd:b4:
9a:61:6c:ec:b5:21:f3:a3:8a:ef:d8:b4:87:26:04:
8c:1b:15:87:e5:32:65:2b:4e:44:e5:80:67:4d:8f:
ad:e9:eb:15:a7:a2:91:7a:db:4d:2c:9a:dd:15:89:
b1:1a:39:cf:6f:d6:03:03:35:da:0f:2f:0b:ea:03:
82:31:0e:fa:52:ae:c4:ce:16:03:69:ac:22:a7:e8:
e6:09:36:bf:0b:54:de:4e:11:28:ab:00:aa:4e:d4:
a2:aa:02:30:97:31:23:4f:2f:70:41:1b:63:09:0f:
97:3f:e4:e9:bc:df:79:40:85:65:f0:1c:bf:74:7b:
9f:31:c8:bb:01:61:7d:ef:d3:cb:fd:a6:fd:e7:08:
41:59:c7:5d:09:f1:c4:f7:d4:aa:e9:78:c0:cc:df:
7b:29:be:2c:11:02:44:73:e2:ca:54:a4:90:3c:9f:
d5:89:ce:6f:c9:e8:5c:c2:6c:2a:82:db:6c:a6:f6:
40:0b:1a:d7:de:09:a8:dc:10:1c:e6:7c:ac:55:cb:
32:16:db:e1:83:90:2c:68:a4:39:66:2f:4c:65:f9:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C4:7F:16:65:8F:E2:13:70:88:16:10:E3:49:94:2C:BD:41:6E:31
X509v3 Authority Key Identifier:
keyid:B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:20:70:b0:f9:88:5c:b0:1f:5d:9c:44:8a:69:24:a0:b2:12:
65:7c:a5:47:8c:6d:f3:19:aa:cc:b5:d6:77:2f:cd:bd:47:23:
6f:d7:97:93:2f:d6:b5:4c:a4:d9:a0:f4:ff:54:49:a4:33:e1:
f8:eb:cf:f9:c7:81:32:21:95:73:b8:8e:54:67:fa:96:d6:f9:
f0:d7:a6:02:97:4d:9b:da:0b:d7:da:04:e3:5c:14:9a:1c:5f:
70:2c:77:cb:c5:d2:ef:be:db:5e:fd:49:c5:d0:6b:61:fc:f2:
a6:3f:73:14:12:99:43:3f:25:22:af:dc:c8:62:99:71:52:71:
28:52:2d:11:de:9e:11:72:8b:51:08:a7:55:ea:81:b2:9a:00:
03:16:df:47:56:10:55:26:64:26:4c:16:5a:30:cd:19:00:23:
ea:d5:a3:69:60:15:0c:d0:14:04:97:e4:f2:5b:2a:04:a1:b4:
2b:55:93:45:3c:bc:94:7b:9e:dd:33:4f:2b:03:40:7f:61:97:
96:6e:36:db:97:10:8f:24:27:16:8d:90:76:1c:79:c0:cb:4d:
70:1d:24:e5:0d:78:2f:c7:b9:13:2d:28:b7:57:b2:d2:16:52:
82:32:6e:96:ff:aa:5a:9a:8d:b5:54:ff:6c:67:25:38:5e:7c:
48:00:6d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:54 2025 by rpki-client