Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File: 8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier: YKBeAPqiQ+T48O/7gMqNlIQJ0qcj3G2sGp7UAKgeAHU=
Subject key identifier: 09:11:06:A1:6F:47:D6:02:D5:C5:87:8B:1D:68:B6:E9:00:3F:DE:30
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer: /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial: 019A7293534C188BE44853C2EA26D42DC0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: ljkgtJPOprLleeo/tL4qFmzxYZLyG5JSP2fzqN6Buro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:53:4c:18:8b:e4:48:53:c2:ea:26:d4:2d:c0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=091106a16f47d602d5c5878b1d68b6e9003fde30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:c4:69:1c:50:ad:03:1f:a4:60:61:b8:b9:
8d:da:8f:5c:ba:4c:44:d1:66:0a:4a:cc:0d:0f:0a:
49:a3:3c:7b:34:85:bd:f9:11:2c:c9:6d:1f:47:6a:
4d:83:a8:e1:11:63:73:f3:d1:c0:db:cf:31:36:a8:
77:56:6f:87:dd:cf:0c:3c:58:61:bc:4c:d8:fe:c2:
52:e3:b6:ac:29:82:59:af:54:c2:d2:55:bb:1e:30:
34:03:39:b5:c2:fb:2f:86:d9:2e:86:be:13:cf:83:
f5:f7:4b:1f:62:7f:46:a8:2c:6a:98:cb:1b:ed:18:
fc:82:73:60:00:4a:88:51:7c:3f:2b:4d:c6:79:b5:
c9:69:e4:ee:c3:62:af:20:34:4d:1f:5b:42:d1:48:
73:3a:f9:b5:7a:05:bb:93:6d:44:bf:5c:12:af:95:
0f:54:2e:3d:8b:ce:6e:a3:8f:d3:68:5f:59:95:0f:
aa:fa:a8:69:45:d6:5b:59:1d:64:d5:62:c8:cf:dc:
00:b2:0d:d0:c1:97:8c:bc:b8:fb:94:77:28:50:95:
2a:ce:e6:6b:61:d6:94:26:fb:bb:6e:db:65:ba:e2:
d9:3d:af:c0:8a:dd:ce:eb:a3:18:3b:75:cb:c5:36:
4b:71:20:16:07:a5:11:1a:fd:07:21:64:26:b4:72:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:11:06:A1:6F:47:D6:02:D5:C5:87:8B:1D:68:B6:E9:00:3F:DE:30
X509v3 Authority Key Identifier:
keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:04:c3:49:24:93:a2:5b:36:34:b0:a4:1f:89:12:e7:fc:d3:
21:6f:a7:fb:ca:02:34:29:cb:74:c3:86:6d:0b:f7:f6:5b:b8:
0d:ad:f3:87:ed:da:bc:f1:98:f2:d3:1c:54:bb:08:f7:76:fb:
97:93:9f:f8:a2:05:0f:3e:d7:d3:31:b7:46:35:5a:6f:d1:e9:
29:33:06:39:af:90:d8:a1:f5:df:b9:a5:d2:ff:cb:49:32:e6:
fb:db:5f:d2:57:d6:d0:a8:6f:97:77:96:0e:1a:4b:dc:9e:25:
35:eb:77:ed:37:78:80:d6:02:74:2a:a5:2e:95:4b:58:6c:1e:
4e:39:d2:c9:45:d4:55:db:83:e2:ce:db:10:c5:95:48:be:a4:
52:e6:37:9a:fa:ca:6c:6a:fe:04:40:69:16:79:4a:19:dc:c2:
63:44:ce:0b:9b:fd:6d:64:5e:b5:88:1b:5c:d3:53:15:b3:a6:
a8:57:85:0e:09:22:83:bc:c1:06:61:97:89:fb:d9:2e:48:93:
0c:a9:28:65:f2:10:b1:f6:81:ca:9a:a2:d7:6f:6f:fe:66:b0:
65:50:44:71:e0:98:b1:70:54:44:1d:7c:f4:50:02:f7:90:d3:
9b:37:4a:86:40:e2:db:6a:44:83:0a:0a:60:d6:4f:73:e4:d7:
b2:16:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:09 2025 by rpki-client