Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier: 23yDZdHi3z/dfEf60DzEp0WcBGNrKFF0tV0B4PQf/Us=
Subject key identifier: 30:4B:8F:76:5B:2C:0F:39:7B:8A:E1:87:8E:2F:EE:49:50:92:54:52
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer: /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial: 019A71B80862BE66D349F024B9E23E544BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: notEwm3zraQA/j1LEmFBCj17RWaWJHIgZaneb7XPSxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:08:62:be:66:d3:49:f0:24:b9:e2:3e:54:4b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=304b8f765b2c0f397b8ae1878e2fee4950925452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:13:d9:2c:f1:a9:fa:13:f1:13:9f:ff:33:
c5:49:8e:60:d0:67:b8:01:7a:85:fa:0a:2b:c4:73:
3f:8f:8a:2a:6b:cb:44:51:aa:72:67:89:0b:01:f2:
a0:07:a4:49:01:eb:f0:7d:80:8c:7e:cc:2e:0e:56:
d0:ed:fb:41:1f:8e:3c:2b:e8:05:92:27:56:bc:d7:
d6:32:14:e4:cb:fe:87:90:f2:56:10:0d:75:a7:7f:
75:f3:39:9b:62:a1:3d:49:07:a1:a7:fd:b1:84:c1:
0e:ee:fc:97:b2:bf:9c:fc:c0:ed:4e:0a:41:32:85:
ae:8a:89:13:42:d5:67:73:a4:d9:d1:14:80:3b:a8:
2a:c2:b2:5b:98:c7:68:f2:61:75:69:40:ab:e8:e5:
a4:e6:8a:2c:cc:92:c9:0f:cc:f3:1b:57:0b:ba:05:
ff:2e:fc:e0:c1:f3:76:16:f6:a3:25:85:40:f1:7b:
39:c5:80:19:27:66:e3:89:c9:0a:29:3f:23:9f:ed:
68:90:08:d4:77:26:23:9f:8d:d0:a6:a8:cd:27:21:
0a:01:3a:33:0e:04:0a:c1:14:fc:f8:e4:33:01:7e:
44:cf:56:f6:27:4d:32:40:65:3a:ef:9c:76:30:df:
1a:13:44:d9:98:e9:69:df:ae:fe:08:24:f2:19:17:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4B:8F:76:5B:2C:0F:39:7B:8A:E1:87:8E:2F:EE:49:50:92:54:52
X509v3 Authority Key Identifier:
keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:44:70:4d:11:a8:1e:4a:c8:ca:72:8a:3a:1f:db:d0:5d:2d:
8f:53:56:2e:61:0c:3f:6b:51:ab:6f:8b:ea:fa:3f:16:01:1d:
cb:86:44:03:47:01:1a:e1:d2:fe:1b:be:9e:f4:92:e8:90:7c:
b4:6a:a0:18:18:02:3b:9f:0f:4f:10:d4:a5:ef:08:93:09:4f:
ea:38:e1:de:33:a3:b2:6d:b5:14:3a:5d:f8:5f:59:a1:d2:7b:
d5:92:88:ac:8d:fd:c4:e6:95:78:52:f1:6f:64:05:5f:70:40:
3d:5b:bb:38:74:9a:06:16:54:6f:4d:cf:83:01:b1:78:4d:49:
86:43:36:47:2b:64:90:44:56:a3:82:19:a2:f4:2d:c1:4c:3d:
22:16:c0:3f:2f:6f:2e:3e:d7:62:6d:33:3e:f5:69:c2:2a:a8:
4c:ad:4a:7b:b4:2f:a9:40:17:4a:e9:55:6e:f5:b4:70:e5:d3:
d9:9f:c1:30:89:2f:a9:86:d5:e9:52:e4:1b:07:14:92:35:85:
17:84:99:73:6d:96:aa:69:12:b2:9a:6a:1f:a2:d6:7a:cd:97:
5d:a4:7e:75:7f:a2:c5:f1:4e:6b:e7:11:ae:bc:59:7e:2f:ba:
3c:17:4f:a8:b2:29:15:1c:1a:d6:8a:e7:7f:aa:85:50:c7:e5:
0c:70:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:39 2025 by rpki-client