Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: mzEIySuc44vV/IxX7XI0tdD09Xl7FqqlD9lQhdwnCvo=
Subject key identifier: 1A:DA:F0:02:09:D6:26:32:67:DC:15:63:FB:AF:1B:81:66:1E:D5:99
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 019A71B7F4B9152367BF36565EA82B192966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 0A7B
Signing time: Tue 11 Nov 2025 07:01:12 +0000
Manifest this update: Tue 11 Nov 2025 07:01:12 +0000
Manifest next update: Wed 12 Nov 2025 07:01:12 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: DuEUtTR67l2MOvhtYqINtdAqyH3TByCOY4YXvNhdyJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f4:b9:15:23:67:bf:36:56:5e:a8:2b:19:29:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Nov 11 07:01:12 2025 GMT
Not After : Nov 12 07:01:12 2025 GMT
Subject: CN=1adaf00209d6263267dc1563fbaf1b81661ed599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:7e:c2:44:cb:15:e8:5d:f8:c8:80:63:24:
ab:05:ed:7d:98:b9:f1:72:05:bd:85:0d:2c:25:57:
44:71:ec:17:dc:ec:21:08:ef:9a:25:88:08:e5:8f:
d1:33:34:36:b6:ed:0d:a1:0c:af:df:15:64:db:8f:
30:7f:28:7f:b7:39:24:30:46:5b:4b:99:c7:3b:29:
e3:14:87:46:b5:e1:ae:40:e5:ef:6b:25:88:cb:30:
10:b9:52:53:1d:d6:17:a2:b2:cd:3f:4d:49:16:e0:
07:7d:78:c4:e3:35:d2:d1:cb:aa:a5:63:46:ae:d7:
81:b5:2a:61:6a:bb:9f:7c:ba:62:bf:f7:27:18:33:
79:f4:01:94:00:8e:de:a8:35:2d:93:45:dd:ab:ce:
11:af:af:01:20:d5:86:ad:01:3f:95:a3:10:f2:83:
fb:22:96:04:8f:53:98:8d:98:5a:f9:d7:88:92:13:
da:b1:6c:ed:59:1c:1c:3a:34:44:6b:66:f3:64:63:
b4:4f:33:31:b3:8c:e2:05:2d:45:df:8c:b7:ae:1b:
2d:0d:6c:00:fa:48:04:89:b4:a6:1a:68:4c:b4:c1:
9e:f1:87:02:41:c9:44:ec:9d:a7:0b:0a:5e:97:da:
4b:86:c7:cf:4c:c6:50:43:f4:36:de:1b:18:4c:25:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DA:F0:02:09:D6:26:32:67:DC:15:63:FB:AF:1B:81:66:1E:D5:99
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:19:be:59:e0:6c:32:fc:05:98:fc:1b:fe:97:51:83:cb:50:
b6:1b:32:66:17:37:6d:88:76:ee:44:97:61:90:eb:47:6f:d8:
ce:9c:24:20:03:95:a7:85:05:36:6e:72:26:30:d9:f2:22:58:
74:6e:78:de:6c:1b:e3:74:5c:36:41:72:e1:e5:84:dc:3c:4f:
d0:07:68:d7:13:4f:78:c7:03:08:df:af:e0:bb:aa:ec:43:30:
25:e1:50:1b:e3:7a:30:7d:ee:ba:d9:bc:3a:a3:e0:e6:1b:e4:
48:09:df:1e:7d:c2:64:a1:19:e2:a6:76:38:a6:db:dd:2e:f1:
32:99:fd:05:3c:6e:f0:2c:4a:d7:76:94:fa:98:8f:0d:45:b6:
12:50:9b:b7:d0:83:47:43:8a:eb:0a:36:ff:72:c4:da:ce:42:
fa:94:96:f3:55:48:a3:2e:39:41:4e:79:47:f6:01:67:a4:6e:
a8:c6:cd:12:e8:1e:17:d3:56:eb:d7:14:8b:79:a6:2a:54:4d:
87:39:41:15:a7:31:4a:cf:19:98:b1:80:29:07:a3:b8:11:a8:
27:dc:1d:f4:1e:8f:7c:a9:7b:ca:21:73:e3:c5:5b:4f:2d:78:
71:92:f6:ac:dd:06:15:03:34:05:bf:6a:1a:9e:65:5a:05:86:
ae:bb:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:53 2025 by rpki-client