Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier: /tmMzqWl0F/R2vefFtjijEDIVQspS+oTmOWJuy9I/tw=
Subject key identifier: 94:4B:ED:05:CF:F5:12:CB:27:48:71:9B:F6:E0:75:A0:84:FA:13:4F
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial: 019A7225932D92454B98A9D06B539965075C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:00:56 +0000
Manifest this update: Tue 11 Nov 2025 09:00:56 +0000
Manifest next update: Wed 12 Nov 2025 09:00:56 +0000
Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: v90ZYhxIFQVlBEKUTBdP9jx8YUN68P4riFsKLoXpk0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:93:2d:92:45:4b:98:a9:d0:6b:53:99:65:07:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Validity
Not Before: Nov 11 09:00:56 2025 GMT
Not After : Nov 12 09:00:56 2025 GMT
Subject: CN=944bed05cff512cb2748719bf6e075a084fa134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:a9:a0:75:b1:90:50:b8:bf:4c:85:ff:d7:
e3:19:7d:0b:d7:ad:9a:1c:b1:8a:bd:74:17:64:48:
b7:89:9e:ec:82:4e:1f:34:b8:31:d5:63:13:51:41:
04:be:93:82:1b:4e:7f:f1:24:5b:cf:e7:6f:a5:ed:
76:b4:6e:9c:9f:64:37:a3:f2:81:44:c0:fc:b1:1f:
74:78:97:e4:f8:e2:de:7f:ca:a3:c6:0c:78:0e:1e:
02:eb:66:af:1a:f0:04:f0:ae:74:83:1d:75:a7:6b:
51:6c:8e:30:e9:35:70:5c:d9:c6:d9:ec:74:b3:a2:
99:d5:c3:43:79:23:4d:b9:57:2d:bf:3e:a6:0a:97:
51:2e:ad:81:9c:84:ee:66:05:09:f6:e9:7d:70:b4:
52:45:94:34:5d:c3:b5:2b:c5:be:d5:21:e5:3c:e8:
89:91:f9:ff:f4:a1:54:98:32:e8:cb:33:d3:ae:4a:
21:25:dd:14:e6:0c:c0:e9:b3:88:ca:1b:c9:8b:90:
35:7d:56:f5:bb:44:8b:ac:bd:0b:22:82:37:23:9a:
02:19:10:58:27:8d:56:81:f0:fa:a9:be:3f:63:83:
29:3e:a8:82:75:1d:a7:69:d4:44:32:2b:e8:f3:da:
9a:8d:c7:4b:a3:54:46:00:d1:4a:1a:31:bb:16:f6:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:ED:05:CF:F5:12:CB:27:48:71:9B:F6:E0:75:A0:84:FA:13:4F
X509v3 Authority Key Identifier:
keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:51:70:c3:81:d0:9f:85:1f:d6:d0:04:1f:e0:5e:c4:7e:39:
61:f1:91:7a:6f:1f:10:b6:c6:1b:b2:17:8f:3e:69:9a:29:13:
1d:27:a6:f4:9b:4b:90:96:39:c3:dd:92:ef:4a:f1:b8:6c:7b:
17:cf:7f:c7:d9:d7:a2:95:6b:2c:c5:89:c0:77:e5:87:05:fa:
b1:b3:5e:e8:a0:80:a0:f0:12:82:b8:bd:37:c3:2b:39:ef:19:
f9:8e:78:31:4f:c0:af:d1:87:56:6c:31:4b:ba:c5:d1:57:6a:
7b:59:75:38:53:0d:5a:95:28:b4:92:3c:6d:2a:64:3d:b6:63:
bd:ed:ee:61:7f:c5:05:28:d8:aa:fc:cc:91:3c:d8:74:80:dd:
91:ad:2b:4f:16:4d:f3:e8:d3:2d:f8:98:21:70:c2:ef:55:8c:
c7:cd:da:08:08:e0:af:35:ed:3c:d0:e0:ab:56:68:84:99:a2:
ef:f8:2c:ab:3a:0e:a4:7a:1f:98:8b:71:f1:c0:9d:70:cf:f8:
ff:db:06:db:b1:99:3f:86:77:65:cc:7c:3d:85:df:c6:2f:24:
a8:58:e2:7b:8b:9c:96:8a:30:f5:ff:d0:4a:39:d2:db:19:9c:
3e:6a:32:16:d7:ba:a0:dd:25:b6:39:df:29:1d:45:34:da:bf:
b0:65:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:56 2025 by rpki-client