Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
File: aBHhJcs1cHby-jE4yT6aJoGxeJM.mft (raw, json)
Hash identifier: aUi5fCwnX+/ETR+J0rkqTn3PlKfNJCbY/d753gav29Q=
Subject key identifier: EA:EC:7A:DB:5B:6C:D7:B6:DA:D0:18:22:F8:FC:97:E5:FE:BC:30:B5
Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Certificate issuer: /CN=6811e125cb357076f2fa3138c93e9a2681b17893
Certificate serial: 019A71B82D82E8245AC48A4459BBC601E8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: aBHhJcs1cHby-jE4yT6aJoGxeJM.crl (hash: I3N9sDvbNMjIwsbkUs/T2QPDw0ezcNpJ6CUc5dwV/Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2d:82:e8:24:5a:c4:8a:44:59:bb:c6:01:e8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=eaec7adb5b6cd7b6dad01822f8fc97e5febc30b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:5c:d8:cb:be:24:c7:cd:d6:aa:d4:e8:48:
ea:a6:fd:e6:0d:ce:19:b2:91:4e:be:92:53:66:eb:
67:73:8f:61:da:75:a9:01:db:e5:b2:54:b1:87:f6:
5e:5d:46:99:7c:af:17:5d:50:3e:da:46:49:3f:a8:
d3:e0:39:85:e6:08:b6:46:3f:9a:78:ee:fd:d3:d6:
cf:bc:75:af:53:d2:4e:30:b6:4a:9d:6c:00:5e:bd:
7a:a2:5e:09:90:0a:c4:55:1c:eb:e4:d5:71:3a:10:
2b:54:e3:da:b1:29:97:86:66:9f:ec:7a:a9:49:9b:
56:20:ac:d7:eb:1d:a3:db:97:b4:e5:10:89:ca:a0:
30:1b:5b:59:9a:b1:26:dc:6c:8c:a1:11:41:d7:a5:
a6:5b:6d:9d:b2:c4:d9:75:59:63:a2:f1:87:2e:e3:
d9:76:8d:b6:f6:5f:a9:0a:85:e0:46:6a:a2:8e:f8:
90:27:5f:b7:ac:ab:0b:f2:b7:22:87:25:3b:31:ee:
74:ad:0c:c0:b3:36:2f:d0:c7:0b:15:ac:ee:98:7f:
1f:7c:37:3d:a7:1b:38:43:c0:d6:c4:9e:76:d6:bb:
5c:2d:40:28:76:0f:27:59:18:df:a8:af:cf:b1:a3:
85:1f:d8:3f:da:9b:72:ac:b1:74:bc:5d:ed:16:a6:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EC:7A:DB:5B:6C:D7:B6:DA:D0:18:22:F8:FC:97:E5:FE:BC:30:B5
X509v3 Authority Key Identifier:
keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3d:97:70:a7:7b:ba:da:c7:7c:4d:c1:fc:7d:79:8c:62:ce:
e3:e5:5f:2b:84:d5:3d:31:9e:fa:e0:ce:ba:74:65:82:f9:bc:
d4:0d:17:61:0b:50:44:ad:b7:71:34:a6:b1:b6:0c:3b:d6:3d:
d7:fa:f4:21:6b:f8:c1:0d:73:59:9b:f1:9c:eb:aa:55:f9:4d:
ba:2e:5b:60:df:10:a8:71:dc:94:27:be:1a:fd:01:9e:d0:0c:
30:ef:a9:51:01:5e:90:76:22:5a:d4:f7:e7:df:54:f0:30:68:
11:30:db:fd:9d:5b:cf:2d:28:83:f5:97:5b:9e:c9:ef:fe:02:
2a:1d:98:b8:e1:8b:f9:58:52:90:c5:fc:4f:10:e6:95:c4:5f:
e5:e1:4a:f3:13:77:33:d9:64:07:be:55:46:39:8e:23:91:5a:
f2:9a:de:b8:94:19:c7:d4:5f:5f:b5:0e:10:fe:26:57:80:a1:
f7:17:d4:9f:e1:19:e8:b9:97:cb:7b:74:c1:f9:f9:6d:17:f4:
9d:a9:0a:09:77:d3:ee:2b:02:0b:5c:65:ce:39:a2:94:3e:56:
df:6b:e4:74:e2:c0:0a:3e:86:4d:95:9a:c7:7d:2a:24:2d:53:
30:02:d1:28:2b:f2:65:35:d0:d9:db:c3:fb:4b:0a:1c:0d:14:
b7:f7:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:53 2025 by rpki-client