Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
File: ECj33ciVlk4jyFY_4akArZcb8EQ.mft (raw, json)
Hash identifier: +Nr01JTVEqFDn2dvtzZl2Z/aG4JI5IieQPOaeX4Ryr4=
Subject key identifier: D7:81:5A:2E:1D:9F:59:F6:C1:01:BA:A1:53:2E:D2:7D:88:C2:1E:C7
Authority key identifier: 10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44
Certificate issuer: /CN=1028f7ddc895964e23c8563fe1a900ad971bf044
Certificate serial: 019A71B80D141AC0C0EA98F1257C5CFB8B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:01:18 +0000
Manifest this update: Tue 11 Nov 2025 07:01:18 +0000
Manifest next update: Wed 12 Nov 2025 07:01:18 +0000
Files and hashes: 1: ECj33ciVlk4jyFY_4akArZcb8EQ.crl (hash: FcD5yIILUW+wjg03iSR4J66MHOJXsZr1wCg+J5jeALc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0d:14:1a:c0:c0:ea:98:f1:25:7c:5c:fb:8b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1028f7ddc895964e23c8563fe1a900ad971bf044
Validity
Not Before: Nov 11 07:01:18 2025 GMT
Not After : Nov 12 07:01:18 2025 GMT
Subject: CN=d7815a2e1d9f59f6c101baa1532ed27d88c21ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:e6:15:c7:fa:11:08:cd:7f:e7:77:6a:58:
4f:f5:86:26:79:96:97:5e:bc:4b:49:e6:a0:1b:1e:
a9:b9:b0:28:18:30:cd:2c:42:91:89:76:b5:9b:a5:
18:af:d2:04:4c:60:7c:5d:8b:4a:92:49:ef:f1:f2:
8e:e1:d5:92:c4:49:89:ce:13:77:61:6e:1f:6a:ee:
35:c4:92:3b:eb:35:8b:17:e4:1d:5f:ee:bd:97:2b:
cf:0f:60:4b:d5:53:86:12:92:18:ae:27:19:de:dd:
d2:cd:7b:6b:05:1d:9e:94:71:03:e3:64:b2:d2:9c:
3d:ad:13:af:c0:5d:ce:ee:db:a7:3b:cb:eb:41:5b:
cd:0b:31:54:8e:99:83:ce:e4:c8:db:51:c5:35:e1:
3b:f6:d8:94:6f:0f:9b:c8:ec:79:77:55:ad:7c:35:
ad:2d:fd:86:b1:69:2b:d7:11:c3:04:a7:39:16:63:
80:58:f8:26:95:6f:40:30:d5:1c:c6:2b:c7:7a:76:
c2:49:ae:4d:84:b2:bc:f1:e0:9c:1f:73:d0:ee:f8:
1f:36:fc:ba:e3:b7:b5:42:01:b8:7a:ae:05:16:04:
4a:5c:da:5a:c4:6b:21:c0:d9:39:6a:d8:44:60:a7:
63:d7:1a:1f:1d:92:1d:42:0c:92:ae:83:18:70:55:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:81:5A:2E:1D:9F:59:F6:C1:01:BA:A1:53:2E:D2:7D:88:C2:1E:C7
X509v3 Authority Key Identifier:
keyid:10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e1:f7:0d:ff:75:34:ce:1b:39:d5:d5:f6:1d:0e:cd:02:f6:
71:2a:06:3d:08:e0:ca:cd:79:96:77:69:16:8f:25:e7:c7:11:
c8:0d:ad:56:60:32:6b:23:86:cc:f7:7a:39:9a:88:0a:90:c4:
ab:4c:1a:0e:b9:c2:69:05:59:b3:21:9c:1a:02:2d:dd:07:93:
9d:bc:2a:97:9c:80:4a:e1:7f:2b:7e:ef:8e:90:95:5c:a4:58:
e6:1c:6d:7e:af:7b:3f:7c:81:27:0e:65:76:63:c9:6f:50:0a:
81:2e:c4:51:7d:f5:d3:17:17:f7:22:cc:26:a8:b9:ab:47:bf:
ac:3a:0a:18:31:90:35:f6:2f:5b:2a:ca:dc:61:46:1c:c6:66:
5d:c8:a6:86:e2:4f:92:4a:9e:6c:d8:af:2b:0d:b2:32:13:61:
0b:e7:d0:89:27:d6:bb:dc:87:8c:c5:2f:a2:3d:15:b7:18:59:
94:ea:5e:80:b0:27:cb:ed:20:d0:ae:d2:25:10:4b:a8:62:ba:
6d:2e:eb:fe:3a:ff:f7:6d:e0:99:cd:93:f3:a5:89:2d:e1:5e:
b7:d8:77:87:ab:6f:c0:71:55:53:43:5a:8a:37:21:0e:8e:62:
48:47:d7:e6:54:b8:15:5a:44:a4:0b:be:a5:46:ba:37:16:95:
ea:8c:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:17 2025 by rpki-client