Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: oc6e53Vvsoqx84SNwGRdjP8CzHNX5kPBOZ3lu1hEVzM=
Subject key identifier: BD:67:77:A7:01:8E:B4:C2:41:DC:B8:67:2D:5A:87:AC:17:73:0A:8C
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019A71B91B278E69E57FFAD41AB725B3B01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: 0Rc1DppPquzAX7Imlviywa3Ybr04hKKZGdA4O4BuA7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1b:27:8e:69:e5:7f:fa:d4:1a:b7:25:b3:b0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=bd6777a7018eb4c241dcb8672d5a87ac17730a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:1f:3f:f4:9c:26:bd:5e:c3:f1:96:f5:a2:
90:06:9a:d2:e9:37:f3:82:b7:78:d6:7c:fb:df:ea:
ae:6e:26:a7:7e:f2:6d:ec:d7:f4:38:92:ce:fe:5a:
32:20:ae:b0:3c:a0:d3:f7:8f:68:dc:94:73:f0:4f:
01:70:31:ec:6a:8a:ca:95:7e:96:04:1b:d0:93:09:
4c:dd:ad:3e:17:1e:47:d7:6e:7d:31:ce:b9:5a:a1:
98:b4:05:15:ea:2f:56:64:7d:7b:58:49:ea:a8:9d:
ab:94:a0:8c:2a:4a:52:39:61:f3:c5:e1:60:58:ba:
11:a0:8e:57:db:cd:74:5d:ce:8b:27:60:a7:c0:63:
22:d3:02:1a:48:07:1a:12:8d:51:72:a2:09:22:a4:
41:63:58:22:74:e0:81:59:10:3d:40:fc:fe:f9:25:
e0:2b:a6:c3:e5:69:29:89:b7:f8:0c:38:f8:3a:0c:
56:c0:b9:ca:71:f2:cb:85:8a:e6:7c:e9:e6:5c:38:
ca:2a:12:fd:27:11:41:ac:cc:ea:d9:e9:6c:e7:58:
e6:fc:af:bf:c1:7c:8d:8a:dd:d8:4f:89:7c:34:f8:
fc:b3:54:76:0e:90:97:8b:19:00:81:d5:45:42:50:
17:15:c4:87:ad:a1:aa:89:cc:ff:1d:34:f5:83:1a:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:67:77:A7:01:8E:B4:C2:41:DC:B8:67:2D:5A:87:AC:17:73:0A:8C
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:07:c9:5b:22:4d:70:50:17:66:5a:cf:a6:48:24:f2:7f:27:
3c:b9:29:3c:6b:2b:b3:c9:41:ec:ac:57:1c:68:1f:cb:78:f1:
43:72:3e:f0:c1:d8:6b:eb:2c:b9:2a:fb:d2:34:d9:a6:7b:35:
ca:da:7b:6b:03:23:9a:a0:a3:74:86:2f:29:7b:d6:7d:60:43:
da:37:26:d1:92:38:35:58:0e:26:3f:d9:cb:66:6f:ed:4c:49:
2a:89:4e:21:8f:5a:9c:b9:99:27:7b:c3:f6:e7:df:f0:9f:0a:
48:f2:47:2d:7a:c3:5e:4d:64:03:48:55:7d:0a:7a:b8:ed:9f:
56:bb:a1:f9:08:15:8f:2b:1c:63:ef:6a:ed:25:1a:bc:5e:f7:
ea:2f:ab:d7:0c:fb:ff:8b:b3:d5:6b:7f:9b:49:7a:94:2a:73:
0a:c8:c5:d7:62:8e:87:19:cf:51:f1:56:87:6c:57:91:31:26:
7f:5a:1d:ab:3d:5b:55:ce:26:ca:05:c2:fd:56:78:df:bf:9e:
3a:aa:6b:a9:3e:8a:46:a8:be:0d:57:4b:fc:9e:fe:46:1f:e1:
b1:9a:6a:f2:9a:9c:de:e8:4f:ec:9e:ba:e1:6f:cd:2e:47:29:
95:b9:12:6d:65:9c:3d:ed:75:4f:82:f8:9f:18:b5:db:c7:c1:
65:4e:45:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:54 2025 by rpki-client