Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
File: cVYaucXzkpItp8rhgMMwc2XwI4Y.mft (raw, json)
Hash identifier: 2DK89mRRbaOIvFGGgV3C4M5djCheHl1gu8OTkHwLGCM=
Subject key identifier: 40:3F:BA:22:80:6C:4A:E2:69:AA:EB:B7:3F:17:B0:58:99:2B:0A:E5
Authority key identifier: 71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
Certificate issuer: /CN=71561ab9c5f392922da7cae180c3307365f02386
Certificate serial: 019A71B7D0C3B95493BCFBBF33FDF77452E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
Manifest number: 1050
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: cVYaucXzkpItp8rhgMMwc2XwI4Y.crl (hash: igFu+lPI5JIxBLtXI9ejLXH9LNBqCP5X0NIlnpKn3Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d0:c3:b9:54:93:bc:fb:bf:33:fd:f7:74:52:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71561ab9c5f392922da7cae180c3307365f02386
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=403fba22806c4ae269aaebb73f17b058992b0ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:b1:38:03:ea:19:e8:e8:37:ce:5d:20:70:
d4:18:1d:60:29:a0:02:1f:63:f5:66:fe:25:f1:cb:
7f:42:d9:86:0a:5b:63:32:f6:6a:85:7c:70:af:16:
5a:00:46:70:35:ec:16:ec:c2:50:b8:b0:e0:fa:9d:
fa:a0:85:4c:00:ea:d1:ab:c8:a3:a6:79:3a:e7:38:
63:e0:b1:29:ee:44:86:0d:83:f0:85:2e:1e:40:68:
b3:fe:8d:65:69:bd:9b:27:b5:cc:16:56:01:83:5a:
1f:d6:ec:b8:bb:7e:11:e0:fd:a1:2f:50:ad:d2:ce:
e0:70:33:49:c4:db:b8:8c:05:ee:a3:5b:72:0f:b9:
8c:e1:82:9a:56:88:8b:aa:ea:e2:aa:b2:b0:d7:f2:
d0:13:fa:70:4b:00:47:65:75:fd:69:f0:44:b1:3e:
6a:2e:dd:9d:52:77:31:8a:84:50:16:a8:fd:df:0f:
77:24:43:69:b8:86:f8:6d:a5:cd:9b:08:ae:51:05:
d8:d0:14:eb:82:63:0f:14:e2:5e:9b:ea:2f:0a:43:
26:f2:13:f8:1a:71:7a:1a:a6:79:2c:4e:dd:36:ba:
4c:b1:d0:3a:32:20:de:79:53:d3:78:c8:a5:9d:68:
5a:3c:0a:c2:7b:2e:5e:8d:1f:e4:8f:52:8b:ec:48:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:BA:22:80:6C:4A:E2:69:AA:EB:B7:3F:17:B0:58:99:2B:0A:E5
X509v3 Authority Key Identifier:
keyid:71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0b:cc:9b:5a:72:73:65:15:1e:81:80:31:c8:67:cb:df:10:
e7:eb:00:ff:10:1a:ec:e7:8e:04:7d:23:12:56:01:fa:df:7a:
21:ec:fd:a6:84:1c:bf:ad:4b:36:e1:27:80:f1:b8:0a:ee:ed:
5c:70:a1:f4:22:72:04:15:6d:b6:80:f9:25:bc:49:d8:99:25:
e1:6c:87:0e:e3:e4:ff:05:4e:91:b6:e9:30:48:ef:7d:0a:2b:
3c:f2:4d:0f:6f:67:28:bc:43:55:30:41:0b:74:1e:7b:9c:c0:
43:92:7d:1c:58:25:60:bc:91:25:99:6f:2b:ae:e1:45:ed:51:
e5:4f:77:56:8f:a6:32:a9:fb:67:fb:f7:80:99:80:d5:6c:c0:
16:17:89:3e:f4:8e:6b:2f:1a:00:79:bf:5b:a4:40:d7:c2:c2:
2b:7f:ee:fa:98:1b:19:8a:4b:c8:44:85:52:6e:f0:eb:a7:31:
f7:68:4d:85:78:cd:fe:7a:a4:ea:45:e7:d3:9d:d3:1a:3f:43:
93:3a:76:89:57:08:ff:b0:a8:56:6c:4c:12:83:54:30:4c:4b:
78:01:1f:df:c1:5f:48:2f:1a:0b:9a:c2:4c:18:7f:7e:38:23:
99:31:5e:eb:ff:81:5b:bc:96:04:67:c8:87:08:b0:23:fc:ed:
ca:78:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:58 2025 by rpki-client