Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File: cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier: 8Y2atAeuLKexUKCvBXv6Dpm//0X6a/RjvaUCmPTwqoI=
Subject key identifier: 10:6C:9B:7E:08:06:00:C9:AB:03:CF:94:10:63:00:13:67:B3:E8:C2
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer: /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial: 019A71B884F002D6528FD99B26CA61E02A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: aqsjAl9uVyTDTG+AQeJjhjLya9JlTl6HuVmRvFgMR8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:84:f0:02:d6:52:8f:d9:9b:26:ca:61:e0:2a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=106c9b7e080600c9ab03cf941063001367b3e8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:eb:fd:78:4f:05:57:ba:1f:09:82:a1:39:
15:ff:6e:8f:3a:cb:a5:b7:1f:d0:e6:0f:dc:eb:96:
51:5a:ca:53:18:77:57:e3:44:ef:88:50:1e:1b:29:
41:15:a4:27:7d:12:ec:d3:58:b4:f1:b6:56:f7:ca:
ce:87:cb:00:02:1f:62:df:57:02:31:ef:82:b6:21:
c9:37:52:0e:d1:b4:bb:c2:7d:4f:b8:b8:16:2d:77:
74:66:92:af:97:db:bd:a6:32:5d:9a:ab:37:84:02:
3b:5a:46:19:33:37:83:77:00:2a:64:f1:53:10:a8:
0a:76:2f:77:8c:65:2d:13:7d:bd:e2:c9:71:5d:26:
00:ad:b7:23:37:af:af:79:d2:ef:77:47:d3:f9:25:
14:9b:be:93:79:d7:43:2e:d2:91:67:de:44:4c:bb:
65:d4:cb:2f:29:30:d2:93:ba:88:e4:42:2d:ac:d1:
4d:3e:4f:7e:d2:3a:25:d9:d9:67:73:48:6e:ae:0a:
b2:46:a4:7c:71:16:70:54:31:13:61:46:3e:96:74:
1d:5d:c5:d8:7f:e8:1b:6e:1d:4b:68:8e:e6:c3:42:
f7:d2:50:05:7e:eb:80:ab:18:71:a7:98:da:31:bb:
c5:3c:03:21:df:e7:93:99:91:97:4b:52:07:84:76:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6C:9B:7E:08:06:00:C9:AB:03:CF:94:10:63:00:13:67:B3:E8:C2
X509v3 Authority Key Identifier:
keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:58:b7:f1:a2:f6:c8:f1:be:95:21:80:05:0f:5c:c7:da:
1d:9d:97:16:01:44:12:fa:f2:a0:15:45:1f:06:13:31:2f:93:
2d:cc:a8:a0:4d:77:c9:3d:67:2a:a1:14:02:ac:bc:b0:2d:f4:
22:8e:63:49:5c:e2:e0:b0:6d:ba:08:3d:7e:de:6d:1c:9f:84:
f2:28:95:3b:c9:73:37:b1:d9:e9:bc:f0:5e:5f:b6:64:c7:ed:
ca:1c:e0:e5:d4:f8:1d:38:cd:d3:7a:b1:a6:43:5b:81:36:61:
57:d8:cc:f1:51:2f:c8:e1:58:cf:c9:15:d7:87:99:25:ff:45:
26:5d:45:e0:70:c0:7b:1b:c2:2c:56:33:14:17:8e:d1:48:33:
0d:22:b9:2a:4a:10:aa:9b:6c:ff:70:96:cb:d4:14:67:29:64:
0b:11:01:2a:52:48:62:3f:55:3e:e5:7c:db:54:af:b5:2f:f8:
9a:b0:6d:64:bf:bb:d8:53:50:7b:f9:53:b0:a5:4d:38:6e:ac:
5f:c3:c2:ae:e8:82:c0:fe:00:65:11:b0:ca:03:a9:06:35:dc:
91:66:7f:a2:5e:b6:ff:90:98:64:6a:8f:0f:d3:28:ed:a8:b4:
e4:a0:d6:e3:20:d1:44:52:f3:a5:3c:e8:ab:d5:a5:23:0b:44:
48:8a:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client