Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
File: 55hPlAuxPQUcj4led5ZSsFrgwLM.mft (raw, json)
Hash identifier: msU0Df8EP2bhGj2J86LH4CfgDBFs+tUZZrVzvRnaOII=
Subject key identifier: 20:49:42:5A:F4:85:75:EE:AF:E5:A4:3A:AC:DF:F0:A4:1B:A3:6C:FD
Authority key identifier: E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
Certificate issuer: /CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Certificate serial: 019A70DC2D4EF0F6CF7059EA5A36B0B0A26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
Manifest number: 0B71
Signing time: Tue 11 Nov 2025 03:01:08 +0000
Manifest this update: Tue 11 Nov 2025 03:01:08 +0000
Manifest next update: Wed 12 Nov 2025 03:01:08 +0000
Files and hashes: 1: 55hPlAuxPQUcj4led5ZSsFrgwLM.crl (hash: itT9L1ZnFsez86VohJnoX/dTsLNrzg/jnXsPFi0oKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:2d:4e:f0:f6:cf:70:59:ea:5a:36:b0:b0:a2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Validity
Not Before: Nov 11 03:01:08 2025 GMT
Not After : Nov 12 03:01:08 2025 GMT
Subject: CN=2049425af48575eeafe5a43aacdff0a41ba36cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:6a:3c:d7:16:df:33:0a:08:8c:d2:a3:22:
56:58:c2:5b:16:c7:13:b8:31:1e:22:f2:7c:5b:c7:
34:cd:b7:bc:e5:82:f2:62:3d:7d:98:6a:44:59:99:
b2:f0:31:a8:91:b9:8d:45:77:0f:6d:7e:91:a7:8a:
f1:ce:da:41:8a:e9:a1:a5:01:b8:0c:a0:a1:7e:a4:
d2:b4:a6:73:98:ea:9e:c7:f7:4b:7a:2d:a2:e5:6a:
59:3a:91:1d:1e:85:68:08:60:5e:13:95:9a:ae:ff:
3f:f5:34:7e:a7:db:48:bf:6d:03:c1:c2:0c:b6:00:
9b:ac:52:c3:fc:98:d3:eb:c1:36:90:1b:25:4d:0b:
7e:67:7e:86:7c:91:2d:f7:2d:99:65:4f:8e:59:31:
12:67:9a:2a:b9:9c:07:fe:8b:3a:29:c4:74:37:dc:
41:b1:d2:20:cc:b1:13:62:76:54:f0:98:ea:4d:1e:
6a:02:36:cc:b3:ff:e2:70:a9:33:4b:5c:39:2e:77:
36:68:78:6f:0a:ed:96:de:6c:17:15:a9:9e:29:e4:
35:d5:89:61:9e:3a:2c:7f:fa:e6:f3:27:1e:05:00:
09:57:d3:f7:78:fb:54:f3:9c:94:c2:a5:06:7e:42:
e4:cb:39:58:d9:27:eb:33:61:09:7d:76:cb:15:23:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:49:42:5A:F4:85:75:EE:AF:E5:A4:3A:AC:DF:F0:A4:1B:A3:6C:FD
X509v3 Authority Key Identifier:
keyid:E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2e:f1:48:45:8a:80:ef:5e:01:b8:9c:5e:36:ae:b3:8e:01:
e1:ca:9b:fe:69:9f:06:bd:8b:02:54:b8:7b:dd:09:87:f3:7b:
60:a5:16:43:b6:81:4e:0b:92:96:88:84:e2:6d:83:7c:00:f6:
a7:6a:c9:8d:7f:f8:40:a0:39:56:dd:5f:23:9c:2b:b5:d3:97:
65:e6:87:34:c8:82:46:f7:98:8a:da:40:45:56:86:f8:c5:91:
c6:32:7b:58:43:83:9b:30:d4:e0:ea:1c:11:d2:1c:a8:6a:e7:
47:e0:2b:a7:61:6a:18:50:b0:f2:eb:13:1f:c4:27:a1:c0:f3:
92:81:08:38:35:c7:85:b0:49:0e:fa:29:a4:82:8b:6f:36:5e:
4e:21:9d:d9:21:97:bf:c4:fc:f4:89:79:11:e4:fa:90:e2:00:
16:65:36:75:19:52:96:12:93:c0:57:69:4c:dc:b6:64:72:c8:
57:c5:93:04:e6:03:d3:20:04:19:e0:3b:97:8a:3d:0f:00:71:
93:61:08:68:bb:8a:d6:b8:a6:ef:47:b1:e6:24:d9:98:11:77:
15:59:0b:fc:6c:3f:62:bc:ca:2f:fb:8a:57:68:4d:56:97:82:
be:cd:76:ee:a1:da:00:5b:86:ba:38:6e:1a:a5:4e:ee:17:a8:
e8:0b:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:36 2025 by rpki-client