Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier: 7Q/n3U6J/BoqlJdMqOFe/KJJdnCqnf0zUk86+CtSqa0=
Subject key identifier: E5:4E:8A:EF:94:FA:8E:2D:62:90:E0:66:77:3A:9C:C3:95:7F:13:93
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial: 019A71B77894C3C8175F007DD07075319D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:40 +0000
Manifest this update: Tue 11 Nov 2025 07:00:40 +0000
Manifest next update: Wed 12 Nov 2025 07:00:40 +0000
Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: 4TJAS0J0PlGzyeVki9qPq22kjKYu83ZnEROea6CsnJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:78:94:c3:c8:17:5f:00:7d:d0:70:75:31:9d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Validity
Not Before: Nov 11 07:00:40 2025 GMT
Not After : Nov 12 07:00:40 2025 GMT
Subject: CN=e54e8aef94fa8e2d6290e066773a9cc3957f1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:c5:9d:ee:e1:bb:9b:c0:6a:d6:91:3a:38:
78:01:f6:22:74:b2:d8:49:55:a0:a3:a9:a4:d4:d1:
e0:bc:c2:6f:b9:a0:de:21:7f:06:50:73:f3:ef:c3:
4f:dd:89:4a:a8:38:0b:89:a9:5c:9a:19:c6:5e:1f:
3c:fe:48:0b:8d:e6:51:1b:90:3d:42:7a:6f:37:8d:
f9:18:f9:de:1f:3c:16:1e:e7:e8:b9:41:e0:76:ad:
6f:bd:e5:fc:1d:43:bd:a8:81:d5:c9:09:9e:94:4d:
25:8e:62:52:cf:94:75:f8:4a:f1:07:88:26:df:fa:
37:1c:40:21:b9:30:24:e6:e3:93:92:80:39:ff:fb:
1d:a9:d1:5e:fa:75:ee:ff:f9:55:64:6c:cf:af:4b:
84:a2:1f:b6:f3:2f:6e:55:2d:27:aa:82:85:c4:8e:
ec:5e:b3:88:f0:9c:9c:46:a4:c0:6f:97:5d:18:6d:
f3:1d:6b:70:6d:02:50:68:79:93:a1:3e:17:5a:24:
31:49:f6:29:5f:a0:7a:13:24:55:f4:20:81:67:43:
ad:91:39:4e:90:09:36:9a:4a:7f:66:a5:af:a3:14:
49:1d:b6:06:24:26:a9:2b:b6:87:a4:89:84:e0:69:
70:86:8b:38:4c:d1:b8:15:0d:a7:9c:ed:32:d6:92:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:8A:EF:94:FA:8E:2D:62:90:E0:66:77:3A:9C:C3:95:7F:13:93
X509v3 Authority Key Identifier:
keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:21:f1:bb:42:f7:86:ad:da:66:a6:23:4e:e8:a6:2c:ce:56:
d8:23:46:fd:e6:00:d5:8a:30:a1:c2:64:96:84:64:0f:81:73:
e6:a5:4e:1d:5c:39:c3:38:5d:11:e3:13:43:73:4b:2e:1b:45:
de:91:1c:35:80:4e:7b:d3:27:5e:09:20:7c:80:96:df:17:8f:
95:9e:92:f4:57:5f:1a:f0:d4:58:c0:6e:06:2d:1d:19:ae:06:
63:ab:0e:5a:52:ae:a9:37:44:72:7a:b4:7c:23:6c:4f:be:2c:
72:b1:d1:a2:63:cc:00:12:b0:e9:b6:1d:b8:73:e9:7f:a3:35:
b6:4d:ec:9d:dc:f2:01:33:fa:34:84:78:bc:ed:8a:9c:71:76:
85:32:99:65:b6:07:34:dc:57:7a:f3:9b:fb:6e:19:3d:01:07:
6d:31:3e:d0:a9:e1:aa:4c:cd:9e:3e:ab:a9:2d:c6:43:ba:bd:
c0:52:31:8f:9f:d1:5f:48:57:e7:ad:a1:eb:29:0f:8f:9f:6a:
a4:be:3e:c5:77:e7:53:2c:94:54:26:69:e8:d4:ac:fd:7f:81:
1d:71:2f:9f:7c:49:c4:94:19:15:8e:10:8e:ab:09:4c:cc:a3:
8e:a0:0a:58:a2:ec:01:a5:82:09:04:8f:76:57:b0:99:05:70:
50:d9:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:08 2025 by rpki-client