Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json)
Hash identifier: O5qQ2KfAYY99vQcxBVyNvQE3cJowwRvL5t/GzNMpglA=
Subject key identifier: A7:5D:84:0A:ED:40:5D:0A:3E:83:EF:08:39:F6:A0:C5:85:35:25:A5
Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62
Certificate serial: 019A71B7CEB04EB529748D496DDA4D2DA363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: wm/THCK/5HCpbrHNVLBUNeRG0yzKEj5yf2BzoXBPR0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ce:b0:4e:b5:29:74:8d:49:6d:da:4d:2d:a3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=a75d840aed405d0a3e83ef0839f6a0c5853525a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:66:47:9e:2c:fd:5f:62:f9:08:76:26:d4:
10:23:8b:05:b4:13:45:d3:b7:cd:c2:c0:08:7a:08:
48:00:87:14:87:54:a3:56:25:9d:96:11:8e:f7:30:
8d:d3:68:b6:cb:00:24:d6:af:87:93:32:60:42:0c:
53:d8:cc:4b:7e:be:54:56:ce:16:c5:17:1f:6e:b7:
9e:1d:a7:a1:7c:30:17:9e:ee:90:be:cd:9a:ad:59:
a5:d6:60:57:13:e9:84:99:bb:7b:c7:bd:3f:e9:b1:
59:3b:6f:83:52:00:54:fa:84:d8:5d:b8:b8:e4:f8:
51:a5:36:18:76:6a:c7:c6:10:d3:c4:aa:24:18:2a:
b4:cb:a4:0e:9f:a1:2f:5d:fe:63:7c:c1:9c:03:61:
a1:89:c2:b9:f1:dc:ae:05:c7:fb:f7:4d:08:6d:3d:
cd:02:96:d8:67:37:e6:23:22:8c:8b:ea:fa:1d:57:
ac:60:7f:4a:c3:0c:85:06:ec:75:14:98:5a:07:06:
65:e7:5e:ec:68:04:7f:1a:ba:15:06:03:81:3c:34:
e9:08:4d:a4:d3:34:d0:c8:79:69:d1:5c:49:ba:5e:
17:3c:9d:6a:a0:45:47:e5:23:4f:6c:ab:f6:e4:70:
fa:3a:d9:3b:8f:15:eb:e0:fa:54:92:9f:21:8f:95:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5D:84:0A:ED:40:5D:0A:3E:83:EF:08:39:F6:A0:C5:85:35:25:A5
X509v3 Authority Key Identifier:
keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:85:57:78:35:68:fa:43:63:5d:d1:50:4d:67:33:05:82:bb:
75:f7:d5:57:c5:6f:44:74:f3:11:47:31:4e:e8:29:ab:64:98:
05:38:de:15:a0:4e:20:7e:fc:0e:f1:1a:8b:19:db:89:c5:4d:
b3:94:2a:2c:47:08:3a:54:f0:f9:5d:ca:5c:32:f8:54:f6:2f:
3e:6c:74:43:3d:f1:e8:c9:e2:03:5e:b9:f7:5e:b8:60:52:43:
fe:74:75:29:36:2f:57:b4:8d:5b:92:98:a3:69:f8:5e:43:9f:
ed:7f:e1:94:45:a8:d3:f5:ef:0f:f0:81:0a:2a:93:e3:f3:43:
a0:03:a8:b1:e6:5f:3d:b0:61:4e:d6:5a:60:f5:1e:68:14:fd:
4e:ae:9a:a8:6d:9b:3a:ca:d0:ed:0b:8e:34:37:29:10:3a:8c:
0f:ac:80:d7:65:75:c6:c8:01:82:97:32:b8:1a:6c:51:7f:a9:
6a:eb:b1:88:6a:da:98:c6:36:4e:cf:70:8f:d1:a0:61:de:1e:
f1:3f:d9:bd:37:b6:bc:4a:4d:07:1e:82:55:0b:a1:24:25:47:
ef:16:a3:14:cc:30:e3:15:81:c1:34:77:f2:5d:9e:67:1e:53:
44:32:93:73:2b:dd:3c:dd:53:df:4c:d6:c8:d4:72:26:06:bb:
e1:6b:66:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt86wTrUpdI1JbdpNLaNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWRkZWI2ZWExMzk1ZjY5OGY0MmU3NTQxYWVmNDkyNDI2
MjVmNjIwHhcNMjUxMTExMDcwMTAyWhcNMjUxMTEyMDcwMTAyWjAzMTEwLwYDVQQD
EyhhNzVkODQwYWVkNDA1ZDBhM2U4M2VmMDgzOWY2YTBjNTg1MzUyNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC1mR54s/V9i+Qh2JtQQI4sFtBNF
07fNwsAIeghIAIcUh1SjViWdlhGO9zCN02i2ywAk1q+HkzJgQgxT2MxLfr5UVs4W
xRcfbreeHaehfDAXnu6Qvs2arVml1mBXE+mEmbt7x70/6bFZO2+DUgBU+oTYXbi4
5PhRpTYYdmrHxhDTxKokGCq0y6QOn6EvXf5jfMGcA2GhicK58dyuBcf7900IbT3N
ApbYZzfmIyKMi+r6HVesYH9KwwyFBux1FJhaBwZl517saAR/GroVBgOBPDTpCE2k
0zTQyHlp0VxJul4XPJ1qoEVH5SNPbKv25HD6Otk7jxXr4PpUkp8hj5UISQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKddhArtQF0KPoPvCDn2oMWFNSWlMB8GA1UdIwQY
MBaAFESt3rbqE5X2mPQudUGu9JJCYl9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80YTZlZjEtYjRlZS00YTE0LTkzODQt
NDcxNGY5NzFiNzhiLzEvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC80YTZlZjEtYjRlZS00YTE0LTkzODQtNDcxNGY5NzFiNzhi
LzEvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoVXeDVo
+kNjXdFQTWczBYK7dffVV8VvRHTzEUcxTugpq2SYBTjeFaBOIH78DvEaixnbicVN
s5QqLEcIOlTw+V3KXDL4VPYvPmx0Qz3x6MniA1659164YFJD/nR1KTYvV7SNW5KY
o2n4XkOf7X/hlEWo0/XvD/CBCiqT4/NDoAOoseZfPbBhTtZaYPUeaBT9Tq6aqG2b
OsrQ7QuONDcpEDqMD6yA12V1xsgBgpcyuBpsUX+pauuxiGramMY2Ts9wj9GgYd4e
8T/ZvTe2vEpNBx6CVQuhJCVH7xajFMww4xWBwTR38l2eZx5TRDKTcyvdPN1T30zW
yNRyJga74Wtmyg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:14 2025 by rpki-client