Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
File: E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json)
Hash identifier: Utv3/8QzSCdApDzaNc5yMWonSfCpp2ZhQgZbd/BRokA=
Subject key identifier: 67:6A:0C:8B:51:C0:FE:BE:C5:44:76:DD:C4:C3:DE:D6:31:2D:CA:D7
Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Certificate issuer: /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Certificate serial: 019A725C9AEE4BAA7F07253E5D62ABF467B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
Manifest number: 0B40
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: npg3UkgvZJKtTCz2K4mBEFKshF2MKE64lg3QixDcMto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9a:ee:4b:aa:7f:07:25:3e:5d:62:ab:f4:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=676a0c8b51c0febec54476ddc4c3ded6312dcad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:68:9d:14:72:5d:e4:ac:c9:93:1a:05:ef:
c7:4f:46:8a:e2:4f:91:da:48:d4:10:8f:b7:57:7f:
a0:a4:16:5a:35:07:12:19:ae:39:75:fa:32:8f:6d:
b0:42:5d:47:ec:12:77:00:81:9b:88:60:df:73:26:
cf:3a:74:7d:46:e9:87:55:fa:d1:9c:e5:78:3c:ec:
07:5a:3a:b6:04:d4:69:ab:02:bd:b2:93:22:54:db:
95:33:82:d2:fb:ab:10:26:d2:87:cf:51:f2:88:be:
60:97:4b:57:41:be:d8:de:b5:9f:06:ff:b1:16:c9:
90:60:2b:a8:ff:31:23:bb:e3:1d:0a:c5:9a:e3:64:
c9:6b:2e:ca:0e:a6:9e:a3:8f:1d:92:26:82:1b:9a:
b9:99:17:b0:02:85:60:e7:ba:cb:8b:aa:d6:e9:41:
0e:97:e7:c0:61:d9:b1:82:a0:65:05:2c:82:7f:bf:
3f:87:64:ae:32:43:08:62:55:92:d7:dc:06:18:3a:
b1:12:88:52:6e:d6:3e:31:05:25:21:35:32:b2:46:
01:9b:df:89:9e:da:48:fc:7d:66:75:03:82:dd:cf:
42:d4:dc:e4:46:64:92:3c:49:eb:b6:6a:06:41:12:
06:1b:2a:f2:11:60:ad:2f:57:66:a1:37:50:06:2f:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6A:0C:8B:51:C0:FE:BE:C5:44:76:DD:C4:C3:DE:D6:31:2D:CA:D7
X509v3 Authority Key Identifier:
keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:38:5e:ac:1a:62:0c:df:e1:3a:1f:ce:5f:46:0c:4a:49:86:
ad:45:8c:4b:95:62:af:13:f9:06:e5:7a:91:1b:70:dc:86:a0:
46:32:87:3e:4d:7e:76:17:f0:4a:9e:ad:71:41:1d:80:47:a8:
45:b0:ad:62:67:e0:66:60:5c:1c:85:5b:87:2f:24:aa:b6:1d:
81:d2:ae:54:86:9c:c8:fe:26:e1:82:c0:7b:d0:f4:55:62:09:
b0:3e:31:6c:71:f9:ca:d6:54:99:76:0f:0e:93:84:e4:5b:ad:
c2:0f:e5:26:e2:54:3d:eb:b9:92:1e:d5:e8:0a:34:7e:c7:09:
03:1f:b8:bf:c4:41:93:f0:76:de:c9:3f:bf:7a:0f:11:12:08:
e7:3a:da:0d:60:cd:8c:de:f8:a5:bd:7f:14:0f:e5:ca:84:ab:
ba:ba:aa:7d:d1:0a:5f:85:a2:33:f9:55:99:d9:98:9f:c4:3f:
e3:0a:42:55:52:83:cd:b5:48:e4:fe:1e:bf:39:0a:42:be:c7:
38:8b:f9:8f:7c:c7:c0:8f:2a:ae:ea:93:a0:62:ee:82:a0:6b:
12:fb:0a:7f:61:e6:d8:6f:17:15:9a:3c:32:04:65:7b:3d:d8:
98:64:a6:6f:3b:49:c9:67:1f:e7:b9:54:5c:cf:2b:fa:a8:f2:
a5:3b:ff:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:50 2025 by rpki-client