Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: lnqDQCdC15sxTf2atGK/P1pFXjit9RcVVFMyBC10qZ0=
Subject key identifier: D7:80:9B:39:3D:41:60:F9:6E:BB:3C:3D:4E:AB:C8:06:A7:1F:91:89
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 019A71EEA03CE0EF384B42F02C437435A0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0D1D
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: R0TtjXsTONPK0AvJ/699K495GtCRqy6ROU+dUISSjOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a0:3c:e0:ef:38:4b:42:f0:2c:43:74:35:a0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=d7809b393d4160f96ebb3c3d4eabc806a71f9189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:9f:9a:c0:bf:d1:f6:15:ff:1e:ab:6c:a4:
b0:81:a7:ec:5a:f4:b3:4b:67:3b:13:50:7e:75:5e:
52:e4:ad:0c:fc:55:2d:c4:d5:b7:e2:96:b0:28:99:
f9:79:01:6e:e0:4f:c6:8e:88:9c:e0:98:18:9a:9b:
f5:cb:a1:bf:98:da:13:ce:e6:7a:f3:f8:a6:c5:bc:
45:61:c0:9b:59:2a:c0:cd:dc:4c:9f:9b:a9:b9:ee:
4c:56:b6:68:1a:a0:4f:82:dd:18:e8:e2:ef:25:72:
17:5b:66:2d:43:33:f7:e8:49:33:d5:df:23:72:f7:
7a:e0:4b:8e:d8:6f:bd:d8:22:3e:19:75:7b:0c:cb:
1d:86:ed:8a:7a:e5:06:ef:ca:46:2e:55:30:9e:cd:
63:86:35:31:db:5a:80:20:54:fa:1b:83:17:1f:63:
f3:47:d1:d0:97:2c:51:da:a9:73:d4:f7:01:8e:2e:
45:0a:c2:15:20:0b:7f:78:cb:70:f0:dc:2e:a7:9d:
87:6e:43:c8:1e:34:86:41:78:29:c5:37:3c:0a:f7:
71:1d:e5:f1:48:08:05:b2:b0:ba:bd:f2:72:2f:0e:
a7:c2:74:1b:96:6c:08:43:2f:9d:2c:e9:f3:ea:22:
bd:19:10:2a:4b:08:dc:71:96:31:d4:1e:b6:01:61:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:9B:39:3D:41:60:F9:6E:BB:3C:3D:4E:AB:C8:06:A7:1F:91:89
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:26:54:26:53:57:48:1b:ec:41:f2:ad:2f:6b:00:cb:e5:c9:
b6:a0:40:49:21:3c:ae:20:16:08:6c:57:e5:92:79:cf:06:b7:
7f:43:89:56:71:89:02:7a:79:3b:ad:8d:48:2e:ab:fb:89:d3:
42:56:d6:d5:8a:16:4a:26:9f:13:06:b8:a3:60:ad:f4:ad:cc:
b6:d7:95:c2:d9:ce:dc:44:be:dc:e2:41:fe:b2:82:50:9b:bf:
bb:b1:a1:38:70:42:12:db:0b:d0:e0:0e:8d:85:2a:1e:df:c0:
c3:a8:c5:46:7d:9c:65:b1:17:3c:1c:39:0b:24:31:c5:93:8a:
40:1a:3d:b2:83:67:32:19:b6:ae:09:cc:ee:8c:9c:a8:54:96:
97:fe:8b:a4:2d:8f:6f:34:bb:47:15:c3:b6:01:10:0b:1b:ef:
78:f8:fd:54:66:a4:58:84:09:38:d1:80:69:db:94:4b:08:15:
f8:6c:a6:e0:7c:d2:b1:24:11:a2:70:a0:53:4c:e4:c5:04:e0:
7f:b0:19:1c:7d:97:d0:15:1b:21:76:9b:c3:b1:4e:d1:27:d6:
a1:51:09:17:b8:db:40:c1:d3:e1:48:0d:59:ee:47:27:60:2d:
2f:23:e9:09:a6:87:06:d0:68:a6:b7:36:55:29:38:0d:ed:ca:
d8:92:10:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:37 2025 by rpki-client