Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File: 5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier: g+xPZyAl1uFQJfRSTAJRng/P7LI0xQv3OBV0CI3Yo0Y=
Subject key identifier: 2C:13:1D:2A:78:8F:7F:18:E8:BD:F0:B7:78:85:BF:E7:36:F4:C2:0A
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer: /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial: 019A722606443A1BABAD69BECED16E464418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number: 03DE
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: oJNATq5Rq4e6sTIOmxhqsSTZUV3JwVBHC9HTArggSMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:06:44:3a:1b:ab:ad:69:be:ce:d1:6e:46:44:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=2c131d2a788f7f18e8bdf0b77885bfe736f4c20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:46:2e:17:14:ae:9d:26:2a:be:33:04:c7:
f1:bc:08:91:78:1a:98:60:04:73:40:95:7f:bd:d7:
3f:3e:59:00:cd:df:60:fe:8f:ec:3e:48:11:ab:be:
17:a6:97:00:40:17:ea:5f:27:a8:fc:c3:6c:1e:69:
0a:2b:b3:b9:94:fe:5e:93:57:40:78:3f:9f:d7:ff:
bb:b2:55:2e:08:c5:e6:38:6d:48:15:07:ec:f3:da:
fb:7e:58:74:2a:cc:f7:d3:0f:1a:7f:0e:2b:9d:f9:
4f:d8:20:11:7e:6d:53:1b:62:7c:46:2c:05:0d:72:
71:82:ed:c0:02:d3:5e:22:25:af:3b:41:2e:9a:34:
c0:6d:f1:81:a2:f7:da:d8:97:38:5e:bc:3d:65:f5:
57:9d:1a:c2:0c:69:42:a8:ce:ce:b8:b5:5e:f1:60:
fb:e4:42:74:7a:45:84:29:11:c3:4c:bb:cf:72:11:
ff:ab:e4:cf:c4:0c:7d:e5:07:3f:5b:fe:4d:93:5a:
e2:b8:97:6c:12:5a:c8:3a:f6:a6:01:db:f4:80:94:
7b:d1:4f:6d:08:61:b3:6f:4b:c1:e6:a7:ad:f8:af:
bc:29:9f:c2:1a:ec:3b:00:17:69:51:c7:2f:8e:a2:
27:c5:cd:a6:9e:8a:00:72:54:af:ae:17:57:ff:fa:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:1D:2A:78:8F:7F:18:E8:BD:F0:B7:78:85:BF:E7:36:F4:C2:0A
X509v3 Authority Key Identifier:
keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fd:7f:7d:b1:a9:20:90:d8:fb:59:d4:df:05:c7:a0:b6:ec:
dd:18:98:d0:73:88:e3:51:96:2c:01:08:08:4f:6a:64:7d:71:
d8:74:33:c1:b3:2a:a4:49:da:de:10:f1:f3:96:fa:1b:c8:59:
88:b9:d3:90:e2:a5:f9:36:f5:e8:8d:dd:a4:7c:d6:ca:77:10:
6c:14:df:00:39:e2:c0:b7:d6:3d:9f:47:fc:3d:8f:53:c2:dd:
4c:a9:5e:56:dd:c9:a0:b1:92:de:2e:45:a5:a8:bb:c1:23:93:
c6:71:fd:aa:e6:17:d5:2f:b5:bd:ee:e6:26:ab:c9:c6:25:89:
87:c5:16:4f:68:b7:af:18:a4:06:9a:da:93:3f:95:ad:53:87:
b4:04:4a:35:cb:1c:a1:38:b5:bc:8b:8e:5e:8a:e4:53:78:34:
55:c0:16:0f:b4:8c:d4:06:cc:e5:ea:9d:ff:be:57:1c:41:51:
4f:8e:11:80:32:f7:98:c9:36:79:23:5b:64:dd:f8:4a:d2:87:
44:0e:22:40:d9:23:f4:30:04:d5:69:8a:b7:28:7a:16:34:ea:
c9:6a:ed:c2:d9:56:12:6a:19:f8:f7:14:28:7e:a1:34:90:08:
bb:d2:91:42:0b:b3:2b:f1:db:e1:76:a8:ff:77:0b:3c:2c:07:
7b:e9:57:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:30 2025 by rpki-client