Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: AhRv4Hpx3eQLBOU62cuoSOmbfjYLWEVw3X+NleWssz4=
Subject key identifier: C0:07:69:AB:73:4A:99:6D:7C:C3:82:7F:3C:20:A5:9C:E3:72:12:EA
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 019A70DBEC36541924FB4AF6C920854F8C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: dL6Zk7lneSM2D1A1z13Yj8bNcXhtz4nx6N+d9OyrY/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ec:36:54:19:24:fb:4a:f6:c9:20:85:4f:8c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=c00769ab734a996d7cc3827f3c20a59ce37212ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:54:a8:37:31:1f:f2:db:1d:0d:c4:6a:54:
7b:d3:f2:59:b8:e0:88:c1:4f:cc:b9:a0:9d:22:8e:
50:54:8f:f1:c5:07:77:c7:88:51:f5:56:6c:e9:15:
d3:e1:ed:03:54:df:ae:eb:89:e1:27:55:66:94:ec:
f7:83:de:70:d8:f5:50:3c:2a:24:8f:bf:2a:2b:eb:
0d:fb:f4:b7:96:85:dc:38:5b:c7:2c:fe:f7:8e:43:
dd:87:1c:cb:73:93:1a:13:db:83:ee:34:ed:c5:40:
cb:e0:a1:9c:be:36:c0:40:10:78:8d:d2:36:e0:c1:
31:32:6f:3d:b6:32:e0:dc:d0:4d:41:f6:32:b2:d4:
2e:e4:06:ae:57:1d:d1:93:87:9d:a6:e1:97:77:b4:
40:7a:c4:75:54:16:ad:67:37:8c:0f:c1:13:ac:28:
76:58:0a:49:8b:1b:c2:39:7c:f2:d7:1c:b6:58:28:
90:d1:cf:9a:35:93:19:69:66:8b:f9:4d:00:1b:c9:
3e:74:1e:d9:39:c5:de:29:77:f9:45:38:bc:a8:d6:
17:cd:85:0b:a5:ac:ac:49:9d:4e:80:a7:0f:a7:5b:
4f:e9:b4:b7:87:58:c2:fa:df:7d:48:32:5e:fd:d9:
1f:94:d9:b0:89:86:9d:17:18:af:fe:8d:08:a5:b9:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:07:69:AB:73:4A:99:6D:7C:C3:82:7F:3C:20:A5:9C:E3:72:12:EA
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:82:72:a7:0f:64:bb:35:02:05:7b:4c:02:e8:38:05:9a:94:
eb:ff:38:76:a9:6a:d8:d4:51:87:ca:45:0c:d6:22:f1:00:0b:
b4:6f:56:cd:7b:42:2a:20:7f:86:dd:31:62:f0:1f:d8:cb:22:
13:e6:01:80:0a:d2:3b:a9:c6:37:c4:5e:f8:ee:0d:84:65:1d:
17:30:b4:6a:fd:88:25:48:f7:ac:16:18:7b:bf:1e:42:65:de:
95:3a:4b:ff:69:dd:67:ea:48:46:63:79:3c:3e:81:f9:51:b4:
b9:4e:5d:92:c6:35:41:c7:7d:fb:ee:b0:36:76:57:f7:a9:84:
73:a9:77:a1:73:07:b3:20:4d:62:5e:ac:0c:df:26:7c:1c:47:
d2:69:da:7a:fc:0b:65:74:c0:99:8d:30:7a:7d:24:e2:8e:3f:
bc:60:52:6e:b1:c2:36:50:f6:6b:3d:a5:54:e6:3e:38:94:96:
ae:6c:b8:b5:d5:e8:c1:67:ce:49:9e:c4:54:4c:9d:ec:b4:ab:
cf:60:e8:62:00:05:27:20:20:e7:c9:4a:1e:5d:36:2f:68:f1:
87:2d:94:27:1f:ab:6e:d5:10:0a:5d:dc:9f:95:bb:ba:23:37:
81:8d:7c:19:9f:05:55:87:4d:00:75:7c:e3:1e:9b:71:fe:62:
1f:89:e2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:21 2025 by rpki-client