Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
File: Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json)
Hash identifier: Yk8jfk8kNMqdTQ1FeCFdJzigVjMBauqyi3eV1rGNs/Y=
Subject key identifier: 0B:65:BB:2A:85:E7:5C:87:C1:44:5E:74:9A:C8:8C:B4:93:83:6D:E4
Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
Certificate issuer: /CN=471d7371241346c6ea9a476946802172ca07566b
Certificate serial: 019A73A69C04ECF13BB71F6CE9DEB82D1C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
Manifest number: 0A55
Signing time: Tue 11 Nov 2025 16:01:29 +0000
Manifest this update: Tue 11 Nov 2025 16:01:29 +0000
Manifest next update: Wed 12 Nov 2025 16:01:29 +0000
Files and hashes: 1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: 6EtnHAc55b2RpeR0FZR0v1xz8HIaLNfan0r4zdiNDNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:9c:04:ec:f1:3b:b7:1f:6c:e9:de:b8:2d:1c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471d7371241346c6ea9a476946802172ca07566b
Validity
Not Before: Nov 11 16:01:29 2025 GMT
Not After : Nov 12 16:01:29 2025 GMT
Subject: CN=0b65bb2a85e75c87c1445e749ac88cb493836de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:3e:34:2e:2b:8b:a9:79:a1:c1:3a:4e:19:
65:e4:50:cb:83:12:4c:65:6e:91:88:78:6d:5a:ec:
a6:68:c0:30:22:3f:94:a9:fd:30:e4:56:96:f7:e7:
0d:cd:6d:4c:a7:59:98:11:a7:78:0b:52:e8:e5:1d:
9d:0c:30:5a:38:c2:ff:06:8a:78:be:53:12:54:d1:
4c:7d:a2:19:7e:24:d0:db:cc:2a:b6:27:26:92:c0:
86:3b:2a:88:a9:3e:0c:2c:8d:47:72:a4:21:db:e3:
f9:dd:db:44:0d:75:d9:2f:84:8c:1f:f8:e4:ea:eb:
b3:98:a1:17:56:d6:be:21:60:16:a9:b1:3c:c4:e9:
5f:6b:2a:ad:90:24:0a:e9:82:4f:45:0a:d1:f7:20:
dc:db:10:30:5a:94:bb:35:04:8e:7c:8f:63:8e:83:
6f:75:41:8e:d8:d5:35:86:6c:a4:53:30:14:4b:aa:
27:fb:3c:37:ab:03:f1:0e:f6:8a:25:e0:1e:51:2d:
0b:6e:8f:e0:63:13:f9:41:c8:12:c1:5f:0e:c3:e9:
82:0f:14:5b:78:04:67:c9:da:8e:08:3b:c1:9d:c0:
d6:08:00:11:c3:71:b1:56:5f:f1:28:12:91:43:f6:
84:b5:ea:c6:1b:46:f4:ff:6b:db:db:61:d8:0b:12:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:BB:2A:85:E7:5C:87:C1:44:5E:74:9A:C8:8C:B4:93:83:6D:E4
X509v3 Authority Key Identifier:
keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1b:fc:fd:d1:af:53:d7:a6:72:8c:78:52:f1:54:ab:9a:ac:
50:e5:15:79:6b:2b:eb:20:a7:01:ec:b3:ab:40:03:4d:03:bf:
99:23:50:c8:9f:6a:1a:65:86:60:19:a1:58:9f:89:ea:14:bb:
0f:e7:9b:ac:7a:15:77:38:46:32:64:cc:ef:39:c3:31:b1:30:
62:a9:92:48:b2:cd:37:3e:5e:62:aa:a5:e9:ba:57:92:4b:90:
14:a7:47:fc:f4:99:37:00:07:ed:bc:79:35:dd:d0:70:4d:ad:
27:ad:6c:75:64:66:0a:39:08:a7:c6:27:89:88:d9:84:38:f2:
2a:87:df:51:1e:be:ed:df:4d:91:92:7c:42:d3:04:65:ca:60:
24:d1:ca:0a:3f:49:69:ed:ee:63:15:5c:09:c9:a5:6b:4f:63:
ae:9c:b4:7a:a6:ea:79:f4:2a:40:ef:3f:21:05:4b:db:cf:3b:
fc:96:c7:1f:3a:05:2d:00:3d:76:3b:b9:76:e6:ce:ca:e4:94:
cd:07:6b:f3:5e:24:74:81:6e:d6:93:e2:57:88:39:16:f4:3d:
af:c7:e6:96:98:92:47:aa:37:cd:15:73:ad:39:a9:a9:d4:88:
45:30:52:20:56:eb:d6:38:29:ef:71:a0:54:59:6f:53:dc:78:
5d:d1:0a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:29 2025 by rpki-client