Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: 1BS2i3yqcjmGaSxij8+8XmWMIRXCwWC9NXku3WPXgNQ=
Subject key identifier: CD:47:01:A8:26:96:57:76:97:96:1D:7B:43:E1:D5:51:CA:96:D7:09
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 019A711372CC056D053838FA73406136C32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0CDD
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: 3oh7w8f8pk4YXD1h38wBLeq4jPk8RPPqHSN/KZ2ENPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:72:cc:05:6d:05:38:38:fa:73:40:61:36:c3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=cd4701a82696577697961d7b43e1d551ca96d709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5d:df:fc:28:b6:5f:d7:0c:db:61:d7:4c:b6:
8c:84:73:05:09:4b:76:8c:63:ae:6f:dc:dc:12:07:
2d:48:f7:5c:63:a6:6c:a0:c0:c2:21:98:2f:c9:87:
d5:f4:57:6e:6d:dc:19:0a:c0:21:b1:f1:15:08:07:
e7:68:94:c6:88:2c:3f:f8:af:e2:27:c9:0e:49:d3:
5c:df:4d:5b:a2:c5:1d:48:d1:a4:54:aa:7b:52:7a:
a9:a7:83:99:00:6b:3e:0b:45:66:ff:c0:6f:28:90:
63:48:ee:8b:be:be:83:d1:ba:51:22:90:4d:d6:b0:
a9:17:2c:89:15:88:b5:13:db:35:87:53:6d:bd:a9:
2e:be:c0:74:a1:a4:6a:00:a4:9b:37:7f:50:87:4c:
7f:3d:00:fb:96:78:47:e5:a4:41:88:a7:0e:dc:a1:
3f:93:fe:a2:87:6b:c8:90:1e:29:43:39:e0:c5:c9:
39:35:61:4c:cc:33:fe:a0:a1:36:76:02:51:e0:2b:
9d:d9:0f:5e:16:3d:32:7f:7a:bd:4a:05:2c:7f:d8:
25:b2:e2:28:7b:60:18:1c:1d:49:f8:00:7d:00:fc:
e4:12:34:a1:de:b6:b6:b0:5a:62:fe:04:fd:58:4b:
36:5b:38:f3:eb:77:47:68:1f:46:d7:54:69:70:34:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:47:01:A8:26:96:57:76:97:96:1D:7B:43:E1:D5:51:CA:96:D7:09
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5a:b1:bb:f2:28:df:7f:9e:da:ea:69:22:9c:bf:b2:cf:8f:
ce:b7:ef:98:6a:ba:36:97:bc:02:7f:01:3f:42:dd:2d:74:94:
35:77:f0:29:54:9a:d8:8e:0e:46:a6:d7:cd:9a:0b:ae:27:b3:
db:c5:ac:36:02:ae:94:88:ea:60:2e:ba:4c:4f:fa:ee:bb:e7:
28:63:eb:b4:e7:98:c4:aa:b3:89:ab:88:ed:75:72:ae:29:10:
a1:ee:7e:03:21:8a:76:77:36:8d:70:9b:b6:cb:8d:fb:40:f0:
fa:af:27:3f:96:8e:ca:a0:5a:96:b0:c1:32:a8:51:83:c0:06:
9b:ef:ee:12:58:5f:72:03:bb:56:8d:4a:dd:bf:a5:dc:cd:af:
d5:0a:54:76:1b:2f:eb:93:5f:de:3e:55:c5:ee:dc:ec:4d:ac:
39:6f:ec:46:87:8d:21:c3:d4:4d:9f:6c:b7:67:27:22:6f:6a:
68:13:84:83:17:71:41:65:09:1c:c3:11:42:6b:e5:85:03:9e:
75:47:2f:5b:d4:7f:64:de:e3:92:20:64:7b:33:60:fa:1f:f8:
a1:10:37:f8:5e:17:52:77:21:c5:9c:9d:67:a9:89:d0:b2:46:
df:f5:88:c5:28:f8:d9:54:ea:62:ae:d0:a8:6e:5a:52:4e:c0:
ca:40:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:01 2025 by rpki-client