Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.mft (raw, json)
Hash identifier: qgJzoC83/wuZMZQru3sxt6I597luj/A4lh+yIRIWbDM=
Subject key identifier: 5B:21:C5:34:B4:80:70:EE:EE:83:BA:4D:E8:E7:CE:99:59:C9:B9:B6
Authority key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
Certificate issuer: /CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Certificate serial: 019A71EE90238473614959A7D8D66FF8F913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
Manifest number: 81
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: 1s78oMbNlHbTMBVgOHLSYb8rNTY.crl (hash: 96Ra1Vteak1YSrG3XDdf52P5SNmqHfym4pkL1tskt5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:90:23:84:73:61:49:59:a7:d8:d6:6f:f8:f9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=5b21c534b48070eeee83ba4de8e7ce9959c9b9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:08:d8:48:0e:da:0c:ac:e9:5e:6f:e8:f0:
6c:d6:38:94:5a:56:20:68:e9:9a:a1:94:7f:22:81:
ed:29:bb:83:e4:fb:b4:fe:c2:55:0d:ab:a2:a7:b3:
1f:1e:de:ea:9f:77:52:9e:14:fc:a8:70:eb:05:db:
e2:09:6b:0d:f6:40:0d:f1:9d:7a:35:dd:02:e2:c8:
b5:d6:4d:bc:e4:7c:03:a6:b9:7a:20:9f:9b:6f:4f:
12:99:e9:28:dc:74:46:97:70:2e:b5:17:7d:f7:91:
32:19:02:6d:04:97:ea:ad:52:6b:67:c9:cd:73:5c:
72:62:ac:64:12:01:57:8d:31:e0:7d:11:a5:c8:90:
ca:9b:f6:ef:7c:dc:36:3e:0c:ac:4b:16:48:1f:1f:
e2:e1:f5:f1:06:63:25:b6:2b:3d:d3:f8:17:cf:9b:
24:64:b3:3d:75:0c:89:f7:d4:91:69:0c:e4:27:52:
11:45:c3:b4:39:78:a3:4c:2f:1a:a7:c6:71:7f:07:
f3:c8:31:49:40:f4:82:fe:f0:29:f6:e2:4e:92:19:
bf:a1:4c:6e:24:8a:e0:d6:70:f0:83:b7:f5:33:72:
f7:cc:25:b0:66:31:2a:95:0d:ac:1a:df:d5:bd:d4:
d8:25:cb:49:48:00:ee:b0:41:b9:66:3f:13:7e:1a:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:21:C5:34:B4:80:70:EE:EE:83:BA:4D:E8:E7:CE:99:59:C9:B9:B6
X509v3 Authority Key Identifier:
keyid:D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a6:4c:67:be:f6:aa:eb:4b:66:9a:9e:a8:9b:5a:6a:67:59:
f0:ef:22:89:b8:1b:b3:a8:c0:f8:de:4b:ca:6c:b5:8b:95:22:
84:32:95:2b:d9:48:0d:b0:83:b8:20:1c:27:59:bc:db:c8:a5:
3d:3e:da:a7:ff:0c:0d:77:1e:5a:25:1c:b9:ae:8e:69:3d:73:
dc:76:5f:6d:9c:9e:14:31:5d:63:26:06:e4:a0:a0:e6:ed:11:
4b:3c:90:16:34:3d:fb:2a:9f:84:93:a4:32:bc:34:98:18:33:
b6:19:7a:7b:bb:8a:05:7b:f7:9c:58:79:84:a4:1d:19:48:28:
61:ea:9a:d7:33:fa:d7:28:52:0b:5a:41:78:38:5e:44:97:e0:
58:03:0e:cc:aa:a6:52:22:8f:05:6d:a8:15:c1:4e:68:bb:6f:
57:a4:25:41:9a:4a:50:80:a8:91:1e:b0:ba:e9:4c:73:61:72:
7a:77:c4:5e:54:1a:26:4b:eb:e1:ac:77:7f:e0:fa:5d:86:af:
f6:53:ee:3b:18:fd:4c:89:3d:f2:b5:5e:9b:51:45:e9:8a:78:
17:01:54:31:15:27:a3:95:16:d8:c0:e4:65:5b:35:2b:7c:77:
2a:fd:6b:6d:9f:94:ca:21:60:6b:01:50:64:ea:ec:8b:41:31:
3d:c4:de:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:14 2025 by rpki-client