Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier: HkKz5RwuOo8h+fgGCxowi+HWBSxMdOCJkul+9daK4yc=
Subject key identifier: 02:82:85:2D:6F:56:A3:72:3E:71:30:15:15:31:CA:B0:CD:B7:9D:60
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer: /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial: 019A7225BC074F12AC884D1B1B6164E28492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: mJvYGtPCyimITikBOM+OMVzRYbqL10eU6HxlXLhLBZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bc:07:4f:12:ac:88:4d:1b:1b:61:64:e2:84:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=0282852d6f56a3723e7130151531cab0cdb79d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:16:52:46:63:59:d2:71:31:22:15:b0:6c:
65:56:61:c3:cd:92:b2:bc:f5:c0:cb:a0:de:2e:fb:
e8:79:d9:ff:ae:0b:71:bd:f6:a3:84:e8:3c:bd:ad:
dd:59:b9:4c:33:ad:c1:7a:1d:9b:7a:9f:5e:03:70:
2a:de:50:d5:52:66:67:de:df:5e:92:79:e4:3b:70:
0d:f3:98:79:7f:5b:a7:d5:a3:83:70:c5:0a:ea:09:
c2:ce:7e:fb:7d:2f:e6:fb:06:6e:9b:21:18:47:66:
21:c1:03:f0:e1:f8:d1:3c:6c:2b:77:3e:0c:b1:7d:
5b:36:32:5b:e0:ae:46:c2:3f:15:1d:63:f1:dd:b5:
f8:6a:39:ba:fe:f8:74:6c:a1:63:14:fe:de:33:f2:
5a:cd:3b:6e:75:1b:91:0e:ea:75:11:96:f8:12:e2:
2c:e5:fa:e6:37:73:ce:95:e0:15:68:e5:5e:6d:ba:
18:fa:1e:80:a1:fd:fe:2f:eb:4e:eb:3c:cd:f9:ec:
c7:10:2c:56:6c:1b:66:ce:a9:fe:d7:07:6d:db:9d:
b5:96:ea:99:eb:d7:59:0d:61:55:5f:ed:c9:45:df:
32:a7:17:92:3e:62:7f:5f:5f:81:cf:b0:e1:ec:3f:
d6:92:27:92:dc:1b:25:09:ad:66:f4:96:16:59:01:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:85:2D:6F:56:A3:72:3E:71:30:15:15:31:CA:B0:CD:B7:9D:60
X509v3 Authority Key Identifier:
keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:56:d0:c0:06:31:fe:74:6b:56:14:bd:ce:7e:66:25:35:cf:
33:55:72:bd:94:18:3a:66:47:f0:51:ab:a4:fd:4a:8b:dd:bd:
35:c9:4c:da:2c:40:b7:ad:29:1a:05:ec:83:67:d1:88:44:c3:
b7:96:03:ce:c7:13:45:2f:84:bf:42:0a:81:68:94:b6:88:5d:
fe:71:40:15:93:6d:0b:21:dc:a0:e0:2a:3e:5e:3f:f1:b1:78:
b4:e2:85:87:d9:57:b2:3b:6b:56:eb:a8:af:e5:78:46:82:75:
03:0e:66:58:aa:60:b7:fd:67:e9:42:ed:b2:a6:cd:b0:86:3c:
ad:76:88:20:0f:d3:5f:20:cb:70:94:13:19:54:5c:19:58:df:
74:68:98:c1:77:76:19:1c:26:5b:d7:65:ef:10:66:50:3f:90:
b8:9a:50:09:1a:5b:1f:6d:87:09:59:c4:14:06:7a:84:bc:18:
c2:48:2c:8d:f8:56:d1:9e:65:b5:9f:40:79:fc:0d:f4:ac:07:
a4:b4:9e:2e:d0:d8:01:d1:80:de:b6:a9:ba:58:61:b5:2d:d4:
cd:20:e6:64:f5:8a:7e:3b:82:da:81:e7:cf:f4:f9:4a:48:64:
2f:6f:77:20:68:a0:84:3c:9b:a0:a1:f3:33:86:c8:39:3f:85:
5b:92:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:52 2025 by rpki-client