Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
File: SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json)
Hash identifier: V11Yyi0NG2u0fy5ucb0+f6kcuY0V6LNJ7SFaJJ5R4wE=
Subject key identifier: B4:75:C8:F7:F2:FC:EF:11:C8:59:12:DE:D8:7A:74:F3:C2:5D:0D:6C
Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
Certificate issuer: /CN=491adc236575ec23d7ebbfbdc20439918026befc
Certificate serial: 019A71B922315CC70798D4AD8F1CAE07DC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
Manifest number: 1446
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: MW7ulkKIeUPyZ0m3NNG9xd7nQo/n6BGmWAYU1VSZPGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:22:31:5c:c7:07:98:d4:ad:8f:1c:ae:07:dc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=b475c8f7f2fcef11c85912ded87a74f3c25d0d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:1f:dd:3f:29:8e:d0:07:ff:3f:af:10:17:
b7:63:ef:0c:4e:40:c8:cb:2a:83:ed:36:7f:4a:d1:
c5:7b:93:8e:4d:13:d6:9b:8b:fc:7d:a2:0e:91:8d:
1a:05:b6:3d:14:f1:f9:bc:41:3a:3d:d5:24:17:82:
ca:e0:ff:ba:f5:06:e9:b3:7b:a1:98:cf:c2:61:55:
4b:68:90:6c:ba:9f:42:1d:55:9b:aa:96:fd:a4:28:
a7:0f:4b:65:9a:2e:1f:8e:36:76:9b:8c:54:d3:5e:
b9:7e:e2:fd:91:b5:cf:ff:33:3c:9c:6f:71:16:b9:
70:fb:c3:28:59:37:31:44:86:c8:bc:14:41:8a:b4:
ff:60:8e:3c:38:c3:59:d3:35:3b:97:ab:d3:d4:5b:
3c:4e:cc:8b:d3:11:d9:cc:17:be:60:46:1a:05:62:
c2:1f:5d:82:5f:9f:52:74:51:55:de:d4:51:e1:12:
98:31:6c:16:a6:14:cb:b1:2d:c2:9f:58:88:0d:c2:
38:97:f6:68:c7:bd:93:00:44:18:f6:0a:0b:b8:46:
a3:4e:6f:68:3d:f4:c6:65:08:83:8f:b1:5d:85:da:
a2:ad:b9:62:9e:5e:8c:56:d8:02:2a:fa:13:fa:f5:
44:24:e7:68:72:cf:d0:ca:da:cd:6f:c5:a1:c2:0b:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:C8:F7:F2:FC:EF:11:C8:59:12:DE:D8:7A:74:F3:C2:5D:0D:6C
X509v3 Authority Key Identifier:
keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ed:be:9c:b1:95:a3:ba:cb:0f:c9:e8:39:5c:00:ec:c9:66:
3f:25:61:ff:fb:f0:23:ea:f3:a9:8b:49:65:cb:19:ec:88:d5:
26:a5:08:ab:12:db:a9:74:96:79:52:eb:b7:ef:3f:51:75:0f:
52:97:cf:72:73:1a:56:19:d4:94:20:eb:d8:7e:f1:d7:b0:1f:
1a:62:c1:e6:a7:25:9e:27:13:7b:88:82:bf:38:e7:f9:35:0a:
a5:92:f3:92:ca:fc:d0:b6:55:c5:1f:1a:03:81:f9:42:03:54:
64:95:8d:2f:f7:e9:3f:32:c8:ac:f8:f0:b6:0e:2e:eb:e2:de:
0d:8e:af:21:ca:97:d0:21:bb:ea:f8:e1:ab:33:7f:69:0c:2b:
ca:b2:bb:aa:ac:72:16:73:e6:31:1e:53:e0:7b:6a:13:81:26:
68:38:7c:9a:3f:25:fa:e0:ec:50:18:b5:e2:34:b5:58:9e:11:
eb:da:0d:ee:3e:3e:a5:b0:53:e9:6b:e4:b3:78:53:ae:8e:af:
cf:b0:38:40:46:4f:19:f8:4b:58:38:3a:78:ab:52:e6:91:d1:
8f:b4:30:01:96:2b:09:ff:ba:00:7f:98:d3:76:c0:1b:cf:cb:
ce:60:be:20:b4:85:40:68:42:e3:25:77:46:c9:7c:40:96:74:
02:88:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:01 2025 by rpki-client