Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File: 793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier: lmRVjZKrNbdFhjYM0K4/hY7XhvLN/ZhzIcHMkjm/hnA=
Subject key identifier: 00:64:95:BA:47:96:65:C9:E8:E3:7B:90:A3:D7:10:5C:C7:B3:43:FD
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer: /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial: 019A71B8D574B1201C1B86C531967E6DC4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: +Jq34mowtUjuhLUPiSZngdnI1WvSAx5bDpB61FtZ7Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d5:74:b1:20:1c:1b:86:c5:31:96:7e:6d:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=006495ba479665c9e8e37b90a3d7105cc7b343fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:50:58:5b:c2:99:35:95:4d:83:6f:3b:2e:61:
87:9b:40:f9:5f:97:31:69:79:ab:6c:64:d3:62:4b:
b6:1c:ae:ad:3a:5e:e1:43:eb:af:2e:8a:80:83:61:
a5:73:67:1a:30:98:8a:08:22:01:48:36:65:42:66:
75:f4:2e:64:88:35:48:48:74:62:99:b3:eb:df:15:
28:27:c2:be:cb:21:90:f1:f1:97:46:6f:7c:65:8f:
f4:e3:bf:87:6f:cc:7b:57:b7:80:08:9e:55:f3:ad:
08:df:36:85:19:8e:88:45:b6:7b:58:0b:b8:b7:ce:
b5:3f:6d:26:0c:c7:95:03:59:96:04:0b:4d:dc:0f:
cd:e8:aa:e1:02:db:8a:3e:b5:8b:c0:e0:4c:9c:e3:
ac:f3:cc:0c:fc:cc:1c:3a:8f:ac:73:ae:90:e9:9f:
02:09:aa:64:d7:b5:97:e3:08:ba:bf:2c:e1:f2:d1:
08:e4:64:f4:1e:07:87:8a:ce:b8:e3:88:27:08:4c:
01:79:5b:2f:91:b8:0a:70:39:ac:70:7f:70:62:b6:
cc:4e:89:03:4a:7b:0b:08:13:8d:7e:1f:a4:e6:a0:
d7:c6:c5:70:63:84:d9:95:81:1b:d3:a9:9e:60:36:
e9:2d:4e:80:21:f1:04:46:e7:0c:6c:a6:13:2a:27:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:95:BA:47:96:65:C9:E8:E3:7B:90:A3:D7:10:5C:C7:B3:43:FD
X509v3 Authority Key Identifier:
keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:de:17:e7:dd:3a:5b:dc:0d:70:d8:3a:15:94:70:08:17:c6:
51:b7:02:2b:dc:52:4b:8d:2b:0b:6b:1d:8c:37:b8:df:c1:67:
3b:b1:5f:2e:dc:19:bd:40:5b:99:ac:a6:98:48:3a:88:92:54:
28:5f:76:b1:74:c6:a1:4b:b9:35:62:c3:4f:dc:fe:d9:d1:b1:
74:bc:42:31:65:f0:bd:0e:5b:ae:c4:2e:29:e8:10:f9:bd:41:
f5:3f:fc:87:db:43:99:5f:6b:8f:a8:91:9e:28:0d:29:d1:72:
b2:0f:13:88:d1:64:49:07:59:b9:d2:1b:2e:c4:03:da:a4:de:
5e:f2:c8:9f:2f:8e:97:db:ac:9f:da:9b:b9:27:57:f2:2c:13:
c7:5c:72:bf:bd:f6:87:f3:aa:1f:3d:9e:1a:43:bb:e7:33:da:
23:51:09:e3:de:1c:2a:bb:22:bd:64:7e:6c:0e:5a:31:c0:f5:
cc:8f:2e:7d:82:c8:72:88:7c:cb:88:4d:fb:c3:dc:9b:1a:a9:
1a:93:54:38:99:13:7e:2e:9a:6d:15:42:38:ea:81:e8:61:cd:
8f:c6:6d:bd:67:8f:7b:66:61:ff:58:1b:4a:95:a1:5c:5d:6f:
f8:69:ab:ae:57:fd:1e:9b:1c:20:50:9d:18:3d:f6:cf:4f:3d:
13:95:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:15 2025 by rpki-client