Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: w4d3oFM7htMTAzm/Fzzc2BUdIOK/y27UKaoag4R7chA=
Subject key identifier: 89:5F:B4:61:61:48:16:59:54:46:DF:83:98:BA:47:DF:0A:BC:42:08
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 019A71B79510578D18429A443D89141C9394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: 8soja+o/aABxuCKkeXXQtTN+s6slbVkwVSk3k172i3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:95:10:57:8d:18:42:9a:44:3d:89:14:1c:93:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=895fb461614816595446df8398ba47df0abc4208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:06:fc:e0:50:37:0f:d5:20:ce:f8:60:b0:
81:23:da:ee:6d:d0:ad:ab:20:e4:2c:50:31:25:b3:
96:6d:79:0d:6c:6b:5a:73:f3:d7:d3:83:57:8a:b4:
54:31:eb:5e:28:b0:2c:2f:54:38:bf:65:cf:f8:3a:
2c:63:55:b8:a8:f1:af:01:ac:f7:a1:ab:91:b2:41:
7b:0d:f1:8b:00:05:59:c8:ae:32:b9:db:37:05:49:
4d:6e:c5:b4:71:83:65:a6:c7:0e:ce:ae:43:a3:54:
78:60:57:03:05:99:ce:cc:82:84:06:8e:52:c6:13:
31:d9:09:30:1d:2b:36:5a:75:55:e3:46:01:f1:05:
43:eb:7a:dc:f4:0a:0d:e5:af:59:ff:87:e7:c1:9c:
31:9e:a7:7b:68:ff:7b:01:f3:14:39:e9:25:05:52:
c8:30:77:c0:53:24:43:1d:62:6a:81:35:b1:a0:c2:
24:7a:7f:aa:97:6b:23:e0:09:3a:df:b3:ba:16:7f:
c7:9e:b7:67:90:c3:a5:b5:6d:b4:0d:b2:3a:8a:b7:
75:47:7f:09:3d:15:c1:03:04:0d:17:68:db:a0:e9:
b5:74:f9:f9:05:6e:3c:1d:aa:79:6c:fe:b7:e3:a1:
3c:2b:51:26:7a:4c:a1:5d:fd:ec:65:45:34:06:21:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:B4:61:61:48:16:59:54:46:DF:83:98:BA:47:DF:0A:BC:42:08
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:88:c1:4c:dc:d2:b7:2f:bb:b2:fd:1f:19:f4:50:5a:86:b3:
05:1e:61:21:47:16:f8:29:4f:57:64:ae:cf:a5:40:bf:fd:92:
4d:52:94:8d:9c:c9:69:76:2b:ad:1d:dc:c3:72:9d:ef:e7:ee:
39:99:ff:c5:2e:d5:df:c3:1a:33:cf:7d:e5:c3:7e:a7:a9:2a:
db:f2:e3:9d:f2:3c:7d:e9:66:c0:8e:a3:da:54:63:98:57:a3:
32:cc:53:67:04:8e:ca:5d:d6:de:90:e4:01:86:51:0d:7c:27:
32:78:15:3c:72:3f:85:4b:e3:e2:77:18:3d:de:e8:76:0f:d2:
b9:a1:00:15:71:d6:d3:be:b3:d9:33:99:8d:93:02:86:4f:28:
77:cb:33:a9:cc:1e:3a:92:68:a4:38:56:30:f9:e1:f2:37:f3:
2c:6b:bb:72:36:2c:b5:26:ee:3d:fc:4e:29:e6:ef:95:dd:43:
b9:9b:68:fb:2f:c1:78:b3:ef:3b:ba:49:eb:6c:fe:2b:d7:db:
49:b1:a7:c4:45:e4:19:29:99:11:41:2e:79:3b:21:4d:e9:40:
97:4a:8e:f7:af:89:12:1f:b5:e7:19:70:39:cc:a0:90:5c:16:
35:2e:ef:d4:13:4b:30:06:ce:d9:fa:fe:d3:84:97:82:2d:dc:
d3:4a:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:39 2025 by rpki-client