Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File: A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier: tjuMXxBg8YfFq9ZCf7SeWAmbsnjYAumu0XXvIHay/S4=
Subject key identifier: 71:D9:81:19:9B:C3:51:BE:13:C3:FB:A0:01:66:06:35:F3:89:48:FE
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer: /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial: 019A71EEDF69156100DBDEC391AF8CAFA8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number: 03DB
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: YIx85Kbldp52ElnaLCX1K5FoNo0bCWautvi+cPm5TS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:df:69:15:61:00:db:de:c3:91:af:8c:af:a8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=71d981199bc351be13c3fba001660635f38948fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:55:9e:a5:b7:3f:0d:6b:8c:ae:ad:59:23:
fd:d3:a4:2f:83:a8:1f:9d:d8:9d:11:0b:56:f1:ca:
c9:56:ea:be:33:af:1b:0c:4b:7d:e4:8f:0b:32:c4:
da:f1:3e:44:d5:bd:77:b2:a5:ca:1f:8d:7a:3e:01:
2e:94:b2:0b:b3:1a:25:e9:34:88:91:5a:4f:12:cc:
ff:e7:d0:61:0b:ea:08:e2:ec:87:90:4e:ab:7a:fc:
cb:a1:89:a2:bf:58:b5:c8:0f:cd:43:bc:86:89:eb:
c7:2b:68:f1:b2:7a:51:50:65:60:ab:6f:1d:f9:76:
47:2c:69:54:70:1c:92:7c:ab:b3:19:01:73:05:32:
19:a6:2c:e9:aa:70:29:f3:9f:d9:13:8b:e8:b5:c4:
3b:44:6f:49:eb:95:61:61:40:3c:09:9e:29:fc:22:
96:05:6a:81:81:61:18:2b:61:09:c4:de:cf:6a:b6:
d4:56:de:4c:e0:4d:77:e1:70:e0:78:5b:54:54:eb:
26:36:32:f1:9b:22:71:c2:e4:f9:96:c6:cb:f4:62:
75:28:aa:90:4d:cd:94:ee:6c:92:e2:de:1a:43:d5:
bb:76:02:b1:3a:73:03:43:83:4f:91:02:a0:38:aa:
93:cb:af:e3:7a:8f:b2:a8:b4:5b:e0:3b:ac:af:d9:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D9:81:19:9B:C3:51:BE:13:C3:FB:A0:01:66:06:35:F3:89:48:FE
X509v3 Authority Key Identifier:
keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1a:a8:98:1f:49:0a:8c:0a:6a:bd:40:88:5b:d0:9a:3b:7b:
40:15:73:fc:a7:92:55:93:e8:3f:5f:d0:0a:04:d1:fd:4f:ab:
0a:73:96:44:6d:4c:2d:6a:89:d1:90:14:ff:7c:05:57:5d:02:
ac:61:08:4c:01:85:ba:ee:47:08:b1:c8:c9:00:b2:e7:6a:31:
2e:c7:83:93:f8:3d:84:71:39:9c:3c:ce:2e:cd:94:bb:77:67:
57:a6:75:c8:53:3d:a5:6d:01:83:9a:77:e8:92:93:01:e4:1c:
f9:fd:3d:1b:35:13:95:24:b2:ea:85:e3:c5:66:57:42:e4:10:
f8:f1:d9:9f:7c:ca:93:73:21:10:8b:ce:23:8f:94:bd:c9:9d:
c0:e0:e6:79:67:0c:35:93:3c:fd:fa:d0:85:b5:82:01:d9:3a:
b2:61:d2:ef:98:64:d9:82:02:93:ca:1d:bb:27:f9:57:bc:69:
2c:6e:9b:e3:e8:f0:53:d1:06:e5:eb:33:31:2f:b1:dd:64:97:
73:b5:d3:79:e1:db:9c:d3:7b:e5:6d:6a:2c:28:36:1f:fa:a6:
11:da:e1:66:51:2f:02:00:31:fd:38:99:6a:a7:95:b8:5a:26:
8c:ee:a1:fc:83:fb:05:20:3a:f9:05:fe:20:21:26:64:51:ae:
19:59:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:33 2025 by rpki-client