Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
File: ge84bpUp6_89_qsXonx5OCPNPVU.mft (raw, json)
Hash identifier: S01yUzzLZ9FeRyhlQTMLld87I2te+55mRaJjlaOk+3M=
Subject key identifier: E9:6D:5F:59:42:EE:CC:AE:DD:36:0D:11:14:A0:14:1A:1A:2B:5B:A5
Authority key identifier: 81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Certificate issuer: /CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Certificate serial: 019A71B79F7042716C6FBACB0AB13C835086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
Manifest number: 03E9
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: ge84bpUp6_89_qsXonx5OCPNPVU.crl (hash: gHWVkmjHa3RnCzK/oZar+np0aNqDqgUVhiTaoQCXPAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9f:70:42:71:6c:6f:ba:cb:0a:b1:3c:83:50:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=e96d5f5942eeccaedd360d1114a0141a1a2b5ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:06:95:34:e0:c6:eb:04:db:4d:b3:3e:50:
f8:6c:92:4b:e4:ba:db:a1:7e:7e:00:1a:12:78:2e:
ba:3d:26:14:ac:f5:c7:f9:e5:ad:d7:89:13:11:6b:
cd:77:35:d9:c4:1d:68:ab:d6:50:19:a5:be:2e:8d:
f8:36:99:26:17:70:a0:0b:9f:a9:40:f2:33:c4:12:
8b:8f:a0:4c:32:85:a0:0b:6a:a9:4f:74:ba:56:6e:
50:cc:f7:df:cb:47:76:f5:4f:de:59:54:a6:13:f9:
5a:b2:ea:e5:e0:cb:96:60:db:ba:1b:e9:73:4f:85:
3d:c0:9f:96:af:6b:99:69:4b:6a:6d:09:3c:b1:07:
8b:05:8a:1a:5f:f3:78:c5:08:a8:e1:d1:08:62:db:
ca:8d:d6:72:b2:f6:7d:d9:03:0e:d7:a7:ed:9c:5e:
10:10:bf:60:9b:36:32:ac:ae:99:b5:91:e1:d5:75:
bf:1f:20:63:85:a2:9e:3f:c1:9c:12:21:a2:65:bd:
a7:ad:b8:44:8d:31:4c:2f:12:42:bf:c2:91:4e:9a:
af:13:c2:7f:d5:91:ff:4e:f2:06:9f:5a:15:f6:0b:
de:53:48:f8:a0:84:a8:15:0c:29:f1:ee:bd:a4:78:
e7:16:e1:4d:90:3e:b3:04:e6:c0:70:d4:70:56:e7:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6D:5F:59:42:EE:CC:AE:DD:36:0D:11:14:A0:14:1A:1A:2B:5B:A5
X509v3 Authority Key Identifier:
keyid:81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2c:03:eb:7a:a9:0c:ed:70:56:3f:aa:13:1b:4f:7b:d2:a2:
55:b1:17:55:c0:ce:88:df:8a:b7:d9:85:ff:4b:a2:ae:fc:05:
bd:5f:8a:d6:b3:97:f7:d2:71:b7:01:a5:92:17:31:27:eb:e5:
64:46:b5:51:12:85:40:e9:aa:d0:db:46:02:ff:3e:07:5c:df:
85:fe:3f:c5:c7:54:0b:99:97:03:d7:61:d7:14:0f:1f:91:3c:
f1:9c:5d:16:25:44:72:0e:85:e5:df:a2:8e:87:0c:f8:3f:45:
e8:27:ce:79:10:3a:6d:0a:a2:eb:1d:78:cd:33:59:fe:b7:8c:
f2:ef:8a:d2:91:3a:e8:f5:e1:6c:08:b2:2d:b6:b9:14:e2:e0:
32:3e:77:4b:d7:ab:35:c1:35:3d:9a:56:17:f9:df:68:16:e8:
c7:34:6a:64:b5:36:34:63:86:30:11:d5:81:2b:90:64:92:ef:
15:7b:e5:c2:23:5f:d2:96:d3:3e:01:20:d7:74:b7:3f:04:a6:
81:b3:04:81:a6:be:78:f1:15:4b:6f:fa:06:14:14:9f:ec:ff:
74:38:09:ab:fe:c2:d2:6e:f3:03:74:75:4d:46:ab:b6:f2:f0:
a1:24:c5:62:7d:f0:5f:31:ea:10:ad:b3:52:20:7b:a0:82:50:
ed:56:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:18 2025 by rpki-client