Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
File: Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json)
Hash identifier: cImV5+eSGAaNWVDp0iEELdUPygMwHKQphnuQgRFPzho=
Subject key identifier: 4E:4F:84:D1:D2:07:40:B5:BE:3D:D0:59:5F:66:2B:B4:46:4B:A3:87
Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
Certificate issuer: /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Certificate serial: 019A71B7A3A9430FC72E600EE207C711FBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: wds7eDroXnvVDJqBm+bVvZJ0ybBv54bqA53qnBywHg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a3:a9:43:0f:c7:2e:60:0e:e2:07:c7:11:fb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=4e4f84d1d20740b5be3dd0595f662bb4464ba387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:d1:b1:ca:ef:48:bf:4d:db:c9:37:b9:1d:
96:80:49:d8:e8:bb:11:98:bd:d3:28:9f:83:09:6a:
7d:17:ef:dc:0d:22:6e:0e:a9:e7:4f:64:13:ba:e9:
17:67:fa:0b:89:7a:5b:4a:66:0a:c1:4a:6a:43:3d:
d3:10:ed:04:4c:9a:2a:2e:96:10:ab:2b:39:99:47:
73:68:78:c3:35:d0:f1:05:38:64:99:fa:11:61:a5:
20:4e:ac:cb:15:04:c1:87:29:7e:b5:03:75:fa:44:
28:27:1d:f2:52:f8:98:70:ac:fb:dd:70:a0:8f:7c:
d3:25:74:7f:51:a4:bc:83:86:5b:66:26:1a:7f:b6:
10:36:d0:b0:7e:77:f4:e9:c2:60:bc:33:e5:c1:5f:
00:3d:16:35:37:f1:ba:5a:c8:50:23:94:c0:71:b6:
bb:6a:ba:fc:85:1c:a4:a3:65:04:86:bc:3e:d5:e7:
f7:ee:85:1f:1f:c5:84:2d:ea:4c:ca:ea:ef:de:53:
df:2f:48:36:a2:4e:37:b7:a5:be:d4:c3:0c:22:2f:
96:1c:d9:56:2f:17:04:6e:a2:67:cb:7f:23:2b:d7:
ce:72:c2:14:39:25:de:e8:86:3c:70:ef:ec:62:3b:
ef:14:b6:48:cf:e1:43:65:5a:95:11:7c:af:c5:2c:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4F:84:D1:D2:07:40:B5:BE:3D:D0:59:5F:66:2B:B4:46:4B:A3:87
X509v3 Authority Key Identifier:
keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fa:1d:d6:86:0d:c7:23:46:54:67:18:20:a6:1d:69:b5:1e:
96:0b:44:a5:db:a5:4c:6d:36:bb:d9:04:de:0e:69:06:63:30:
2f:46:ee:61:f1:bd:ae:ad:a0:46:59:47:be:cf:ce:eb:90:c6:
d3:35:87:17:62:ec:b3:0e:81:e6:af:f1:83:d5:74:e5:7b:f1:
0a:af:2b:04:d6:58:8a:8b:b2:00:98:1e:27:f1:07:60:67:dc:
08:ac:7f:de:f5:00:46:24:68:ec:f9:f9:8e:6a:0c:4c:57:19:
d2:a0:e6:8f:ca:84:85:1f:c4:09:4d:fd:9f:e3:19:86:a0:24:
e4:c1:be:ef:1e:00:b2:16:16:89:b5:d8:5e:c2:43:56:50:50:
63:6b:c0:95:53:05:7d:1c:e7:3c:cd:75:c7:01:e6:a0:03:51:
51:e1:ce:ee:99:46:8e:94:07:ad:54:2b:25:a5:a5:7c:8d:fa:
56:1e:7d:e8:54:7e:6c:2f:5b:06:bf:bd:bf:92:a9:ef:96:5d:
1b:f7:bf:dc:df:bb:fc:71:ec:9d:1e:91:ca:59:12:28:1e:4b:
08:ba:81:dd:81:a6:39:62:3c:8c:f2:e9:66:0e:ce:ed:86:36:
b3:d8:4c:ef:fb:96:45:23:80:e5:19:d8:c6:3d:a4:a0:f6:95:
0b:32:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:34 2025 by rpki-client