Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: LdnBHHgZ0wrJkCSFAlVEUeaLYLB6XjR0Jm8+AGGv5Xg=
Subject key identifier: F3:0B:87:C5:AF:B3:09:6E:66:4C:D9:F2:C4:96:83:46:00:C1:2F:8C
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 019A71B8DD45B37A40FA8E151E02FDC5C9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 090B
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: p5kvbwove3WfhIY81p75HgTJdXMrthIYqUebBpEoIiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:dd:45:b3:7a:40:fa:8e:15:1e:02:fd:c5:c9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=f30b87c5afb3096e664cd9f2c496834600c12f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:a5:b9:1e:1b:96:57:f2:20:3b:51:bf:23:
c1:37:be:a8:4d:2d:1f:17:2f:3e:81:58:e3:18:6e:
68:83:cb:4f:09:84:e2:06:bd:1f:76:8d:19:58:a6:
67:e3:86:a8:59:9a:84:0f:e1:8e:93:c1:df:37:55:
57:c7:9a:a1:5c:76:77:c3:aa:8f:74:9c:c2:a3:2b:
e6:3a:26:e4:32:80:f1:75:42:99:a5:2b:d8:19:f5:
cc:67:a2:0b:84:ce:33:61:ff:d5:92:3f:ee:19:f0:
8d:49:04:72:03:0f:cc:21:3e:b2:26:69:be:7f:c5:
ae:9d:08:8c:96:46:83:9d:96:48:91:4e:1d:66:ae:
6c:60:79:23:b9:79:66:5b:24:19:97:35:10:ee:e3:
9a:04:f7:36:a0:51:d9:d5:a3:32:d7:31:38:b5:40:
84:c8:ff:00:45:10:b3:81:72:f2:b1:11:a2:5b:1d:
51:27:5d:c1:53:a7:61:55:05:d1:8c:3d:b7:5e:ba:
c8:13:40:1d:74:5b:b1:bc:ff:78:bd:50:0c:ee:b3:
58:25:3b:e8:d3:9e:f5:1e:29:55:f6:f4:7e:33:8b:
0c:0b:fd:5b:eb:f1:dc:85:8d:02:20:07:83:f2:61:
49:b5:ce:f5:d9:d1:3b:1a:29:28:c2:61:c4:2d:2a:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:87:C5:AF:B3:09:6E:66:4C:D9:F2:C4:96:83:46:00:C1:2F:8C
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3c:a4:79:30:bf:79:e3:94:63:70:9e:37:bc:8d:5d:d6:4f:
d8:51:54:d0:06:fa:9e:41:86:1a:c1:42:52:61:3e:01:d7:2e:
75:ba:51:95:95:a2:f1:35:36:d9:ee:ef:e4:26:cd:7f:28:b7:
4c:a2:22:63:13:18:ed:91:5b:7b:dc:d2:6d:21:7a:83:d4:b2:
e4:d6:a6:68:bb:99:7b:cb:25:94:e0:b9:ed:0d:d1:56:bb:c5:
46:d1:5c:dc:84:c4:78:d3:25:ed:ea:7a:f0:17:1c:22:8f:43:
cb:08:77:03:17:9e:16:37:eb:de:fb:97:32:89:6e:e4:e1:fd:
8a:0f:f3:16:6c:3e:15:af:90:da:7c:d6:48:cc:ca:05:78:1e:
1d:94:98:c9:b7:91:75:76:dd:ab:93:4b:ed:7d:82:fb:64:28:
24:4d:5a:e6:7c:2a:8d:72:4a:3b:54:55:8f:b8:ad:60:36:76:
ae:5c:e2:2b:31:68:4a:60:4e:26:75:a8:6d:d3:9d:fa:c9:75:
e3:cd:63:c8:f1:40:4f:aa:da:bc:75:de:8d:14:48:9d:bc:d9:
8c:08:63:e1:1c:dc:e3:3b:0c:3b:6d:2e:83:25:07:d1:9f:8a:
7e:cf:63:02:4c:5c:3e:d6:fb:50:6c:49:e8:ef:9c:bf:0e:7b:
bb:a3:35:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:43 2025 by rpki-client