Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: O12kbuMvT3m6s/odWi8ea9lPICpaa/wWgyF1gw6y+4g=
Subject key identifier: C7:3B:AC:86:74:30:4A:16:A1:7E:65:1D:CF:3B:06:9C:AB:09:28:D2
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 019A71B8BC30643145EBCE19BC889ED9B854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: Rafk2oU3xqrlZ9xB5Awiv7z04akZ2jBhunWb6q+H+z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:bc:30:64:31:45:eb:ce:19:bc:88:9e:d9:b8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=c73bac8674304a16a17e651dcf3b069cab0928d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:1d:d7:d6:7f:70:86:0d:4f:f4:55:07:76:
4a:f3:9a:a8:70:18:d3:a7:29:e8:8c:1b:b3:f5:82:
54:37:0a:d3:bd:34:bc:59:c6:30:ba:00:d5:3b:4e:
6a:48:fe:ca:9c:9d:de:9c:30:34:01:c3:23:0f:a2:
15:86:d0:bb:c0:6f:10:1c:57:2f:80:b6:60:07:78:
b4:9b:3e:57:f0:cf:95:ab:43:f0:74:8e:2a:8f:80:
cf:a1:19:94:44:aa:31:93:7b:f2:39:e6:cf:45:4c:
33:5e:dd:8d:91:46:21:52:d9:2e:94:39:e1:e1:26:
9a:23:74:98:25:65:4e:1f:d1:5a:95:43:96:7d:c5:
60:20:f3:54:7d:22:f8:45:87:f4:2a:cb:1d:58:eb:
1e:11:23:b1:72:64:f5:33:fb:8f:eb:87:77:8f:a1:
b6:48:ff:0c:67:8f:16:75:7d:52:38:20:00:19:8e:
89:61:fa:64:1b:59:2d:27:bc:86:4f:66:94:ca:d1:
25:2b:95:8c:26:fb:cc:91:19:e5:61:c8:2d:3d:c1:
70:10:86:aa:86:db:b0:20:4a:e4:c1:52:56:d7:80:
1e:04:64:6b:15:47:f9:23:3e:86:f6:db:c9:6c:92:
7b:71:cf:35:06:10:94:87:68:8d:ae:98:68:03:86:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:AC:86:74:30:4A:16:A1:7E:65:1D:CF:3B:06:9C:AB:09:28:D2
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5d:0f:18:1d:ec:2e:ac:55:95:a8:14:51:47:2f:24:35:55:
89:0d:39:e4:2e:33:b2:be:8e:33:5a:23:a3:c2:20:a2:2c:90:
a8:02:70:e3:5b:15:9d:0c:59:40:e3:c1:de:04:19:41:2c:98:
4f:de:2b:d6:59:13:74:6e:ce:85:20:cf:59:94:36:da:de:0b:
4d:38:98:4d:78:30:1d:3d:36:ca:e2:cc:b3:e3:7e:de:08:a1:
50:47:e0:c9:d2:01:5f:a6:31:87:52:8f:ca:f0:7c:d0:27:9a:
55:be:0c:a7:98:bb:1a:67:72:9a:e5:c4:0a:6c:d1:4d:2a:db:
e9:12:47:bb:9c:0b:a6:e6:8f:f1:bb:83:a6:a7:c7:41:c6:33:
7c:af:9d:fe:43:00:f0:10:e6:bd:3b:fc:02:86:4d:96:01:70:
97:44:c4:10:fd:c0:81:df:cf:4b:65:2c:cf:26:46:5b:25:04:
71:91:db:cd:95:a5:2d:b5:fc:c3:79:10:13:2b:eb:00:ea:48:
6d:d9:c0:ee:af:cc:4a:14:74:e8:c9:89:04:29:15:e3:37:0e:
25:c1:77:03:cd:6f:e2:f1:87:f2:ac:47:b6:39:51:e4:d5:c9:
ac:41:82:c0:50:ea:9a:d1:c2:1b:df:d0:df:77:ef:22:3e:0e:
ac:74:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:19 2025 by rpki-client