Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: a44kIv6HOzSxaOQzUk9f1gAVVyzBTMobDRXzPc4dgdA=
Subject key identifier: 78:8D:D1:E3:0B:2A:F9:5B:1F:60:D8:4C:23:C6:30:CD:B7:EE:5E:52
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 019A71B8FA16C1FB6FA9560AAC9F791C1C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: AH2ALN6oEWKCaUPJ5WYJiaNIeProAJOiIWmqu3k+Zec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fa:16:c1:fb:6f:a9:56:0a:ac:9f:79:1c:1c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=788dd1e30b2af95b1f60d84c23c630cdb7ee5e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:3f:c4:f6:15:c9:22:c3:6b:ea:2e:82:c3:
a5:5b:c9:df:bf:b0:76:9e:9c:2d:39:fe:45:7a:e0:
4c:c3:a3:4d:14:fc:49:34:e9:f9:6d:d2:d8:c5:b4:
11:06:ce:b5:b9:91:1f:2c:b9:2f:d4:86:d0:c4:3d:
08:e8:6a:a9:a2:d2:ff:77:fb:06:b9:60:b0:80:28:
fb:5c:5f:e8:ad:b0:4a:f0:94:ba:fc:e3:ca:22:11:
27:3f:43:e3:02:c5:35:4c:42:23:72:cb:51:fa:1a:
50:57:6b:b9:01:91:fe:d6:bd:53:bc:a0:d5:ed:77:
3b:72:c0:87:15:51:50:3c:df:25:87:f2:9b:86:09:
61:3f:c9:d9:bb:70:8f:da:08:64:34:82:fb:42:34:
12:1d:a1:8c:4f:73:90:b2:8d:c3:26:97:de:f7:d0:
62:e1:15:f6:7c:34:51:03:05:4b:ea:1f:55:a0:96:
6e:16:c5:a2:b9:d9:98:28:cb:32:04:8e:13:2f:61:
e1:58:94:c7:01:db:ae:d0:6b:ab:92:d8:77:6b:66:
1d:47:98:47:89:02:48:f5:dc:dc:b3:4e:86:25:0b:
bd:0a:91:ac:2c:48:7e:b6:e6:3b:04:cc:ef:82:f7:
ba:c6:b8:c4:61:56:29:b9:20:0c:9a:48:4d:fc:45:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8D:D1:E3:0B:2A:F9:5B:1F:60:D8:4C:23:C6:30:CD:B7:EE:5E:52
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a3:d0:a6:af:a7:6f:f5:20:ff:02:bc:f8:2e:2c:2c:84:26:
85:f6:21:5f:d4:68:36:f1:c9:f4:06:12:f1:8a:e5:57:dc:2e:
b6:1e:89:4c:94:25:ad:99:36:aa:76:35:2f:55:96:9a:22:7b:
64:81:76:07:d4:95:98:1a:14:92:f3:5c:33:71:ea:a6:49:1f:
42:2b:34:bf:3a:91:d4:8e:0a:eb:2a:e2:5c:05:71:b3:7a:31:
c1:90:6c:60:23:f1:ac:45:fe:72:93:af:bd:36:42:c0:4b:dc:
92:f2:a3:76:18:a1:b5:b1:c2:f6:3b:df:57:c0:f8:ad:a6:78:
45:93:6a:40:2b:24:46:5a:e0:aa:ba:56:b5:de:9c:5e:30:7c:
17:4a:ea:f0:c6:ea:e0:5e:e0:c2:52:3b:f0:58:4a:a0:60:fc:
d3:a1:d4:a6:4d:ce:ef:b6:36:28:a2:6d:52:58:44:1a:ce:7c:
ad:cd:ea:4e:33:6d:4f:63:59:21:9c:b0:8b:1a:5a:3b:82:6d:
42:69:ec:34:23:42:8a:da:1f:8d:31:14:47:13:48:f9:09:2a:
83:9b:35:31:ad:a2:12:91:d6:f2:57:e6:98:d0:67:91:a6:23:
78:36:83:30:c6:d9:5d:df:71:6f:59:13:cd:09:9e:74:bd:1a:
86:7c:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:19 2025 by rpki-client