Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
File: RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft (raw, json)
Hash identifier: x6GFyqgQQsc2OYa2oI8+GcfLd+3fChWQeuAcucxT1oo=
Subject key identifier: 57:90:7A:F0:1E:95:83:55:D7:07:18:B1:37:11:98:3E:E0:62:71:A1
Authority key identifier: 44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
Certificate issuer: /CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Certificate serial: 019A70DBEDC3934C5E46FD41F3B3A87D5BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
Manifest number: 0179
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl (hash: /Gqgwk6m1cfrHy1OP0lHlTKIc1OA2Y6QCGAHyIYU7Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ed:c3:93:4c:5e:46:fd:41:f3:b3:a8:7d:5b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=57907af01e958355d70718b13711983ee06271a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:8a:13:1d:d4:33:d1:ec:ec:ed:a5:1f:fe:
34:a7:b6:9c:71:e9:20:d5:0f:a3:54:53:ad:26:5a:
09:37:56:87:3f:3d:b7:d3:28:e7:1f:65:03:5d:29:
ae:c8:df:d3:38:92:7a:c5:89:d6:aa:ff:cc:68:c6:
70:8c:f4:4a:e1:91:cc:a8:de:f3:f2:0c:41:38:54:
e7:fb:e4:08:3a:6a:5b:66:55:77:ae:0e:30:07:9e:
9c:62:1c:2a:0a:bb:c5:78:a7:3e:66:7a:30:a5:be:
5e:77:46:99:cc:30:d8:b8:c5:00:5c:dc:02:bc:76:
a2:5e:40:ad:82:e4:b3:ac:6f:8a:cc:c1:c4:f9:fe:
f8:d4:d2:26:e4:7f:33:03:84:46:2e:37:9b:0e:af:
5c:0d:70:3e:5c:d7:2b:cf:28:b9:35:ed:c3:60:50:
55:18:47:9c:32:ac:f5:93:ca:75:14:00:e9:e8:81:
3d:70:bc:00:29:ed:c0:b6:fc:1e:7c:78:1d:21:f1:
bf:36:7f:2c:0b:a7:02:08:72:e0:a4:f6:01:f4:96:
7b:d8:ad:b0:51:b3:7a:60:79:da:16:cb:fd:a1:e5:
44:f9:aa:ff:fe:dd:b6:08:9a:7a:3b:46:4b:c9:e7:
a0:07:59:36:e8:80:bf:5e:21:ea:80:5b:f0:af:77:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:90:7A:F0:1E:95:83:55:D7:07:18:B1:37:11:98:3E:E0:62:71:A1
X509v3 Authority Key Identifier:
keyid:44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d5:e3:7f:59:70:9d:98:43:b0:49:d5:38:44:b6:3b:be:be:
db:45:95:a2:32:44:b6:ce:50:30:9d:90:b4:d7:3f:4f:48:8b:
66:c9:8b:ed:10:67:e2:ae:34:c6:9d:82:be:a1:51:05:a6:36:
4d:ba:14:54:cf:45:66:4b:0d:ad:e1:3e:5e:ba:02:dc:7a:55:
a9:84:48:c2:fc:42:1c:c6:e7:c5:02:cf:c0:d8:3b:a8:59:d3:
79:6a:f7:98:1b:41:40:8f:54:86:ef:44:97:d9:97:4b:b1:e8:
2e:ae:7c:64:4a:7d:60:e4:cd:ad:01:40:6d:38:37:b0:8c:01:
b6:dd:cb:aa:53:f6:ca:80:c3:32:42:ee:08:48:d1:43:cb:41:
c2:71:a6:46:f7:64:aa:5f:79:b8:1a:e0:a9:a2:85:82:16:0c:
b4:91:1d:ef:29:93:af:82:81:e1:21:49:c7:74:6e:d2:ce:65:
cc:ec:e6:23:e7:46:16:8f:cf:4a:02:02:04:cb:be:03:30:f4:
38:b2:34:0d:d8:73:14:35:de:79:2c:de:e6:2c:39:29:bf:cf:
88:e9:de:14:37:af:60:87:a6:fc:ef:2e:b4:87:bc:e7:a3:f7:
e3:15:c8:ae:df:f6:bc:a4:55:fc:a0:2a:68:8f:69:0d:3b:ea:
3c:d0:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:39 2025 by rpki-client