Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: g518o5grHva/Y28W0od2un2TGLFrmJ8Rhk3X6FB0j1Q=
Subject key identifier: A3:9D:D1:87:0D:53:53:CD:68:D6:1D:AE:04:55:51:95:AF:28:24:AB
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 019A73015C4855703AC13534E67D87FFBBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 15F2
Signing time: Tue 11 Nov 2025 13:01:00 +0000
Manifest this update: Tue 11 Nov 2025 13:01:00 +0000
Manifest next update: Wed 12 Nov 2025 13:01:00 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: RYpQTWWVVGvpWv1ZFNbeaMK30TpinYkDzDVgvu5cDqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:5c:48:55:70:3a:c1:35:34:e6:7d:87:ff:bb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: Nov 11 13:01:00 2025 GMT
Not After : Nov 12 13:01:00 2025 GMT
Subject: CN=a39dd1870d5353cd68d61dae04555195af2824ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:8b:37:99:0d:70:0c:c3:e3:b1:cc:e2:1d:
f5:94:20:51:a6:dd:1b:12:10:96:c3:5e:88:d1:b0:
ad:1c:c9:38:10:2c:d3:d3:12:cd:5d:94:fc:50:db:
d7:7e:71:17:b3:59:3e:7d:d3:9d:e8:7a:4c:4b:a2:
71:11:5a:d5:ae:9e:54:c9:97:86:ce:da:3d:d6:87:
bd:2a:56:70:e1:72:6a:25:52:0c:eb:e5:36:98:85:
82:ce:c8:10:6f:20:49:cc:06:7b:75:3e:1f:dd:79:
bf:90:33:15:10:ac:6a:0e:7b:69:d0:c7:36:13:c1:
a4:49:33:4b:05:80:5c:d9:5c:4e:eb:64:3d:e8:f1:
d9:ea:7a:59:5e:2f:6d:6f:10:58:23:ba:c0:ae:da:
29:d0:a8:3c:6b:69:0c:bb:ae:5f:b8:a9:02:9d:9a:
01:a9:16:2c:9e:6a:59:9f:f7:5d:7d:e2:f2:e0:5e:
83:4a:b3:82:41:21:99:b5:fb:b6:e1:88:f2:f7:e5:
84:19:81:d7:30:6d:c7:91:d2:a4:7d:fb:21:7f:39:
5e:9d:0d:dc:e3:90:c9:b4:88:6a:e8:df:a1:4f:4a:
60:8b:f3:8b:49:8e:fe:2e:f9:80:c1:f2:e0:62:25:
81:28:ed:d9:e9:a8:d5:29:f4:b8:24:a8:8c:97:0e:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9D:D1:87:0D:53:53:CD:68:D6:1D:AE:04:55:51:95:AF:28:24:AB
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b4:69:27:39:51:8c:5d:34:6e:33:42:ba:22:3d:26:46:11:
0e:83:8b:ad:4a:1f:7c:c2:05:08:0d:02:99:2c:d4:19:f1:0f:
12:60:f0:f6:a3:37:5e:d6:8a:bc:ae:01:f9:15:50:ab:81:fe:
c7:c4:63:94:63:c1:0c:f9:e0:4b:25:21:44:bb:78:14:de:f3:
44:73:13:de:c4:ca:e9:d2:bb:57:52:33:0c:c8:b3:34:02:80:
c4:11:cd:c6:5a:4c:4c:af:d9:db:74:6c:b2:88:77:8b:70:9e:
d6:ea:1a:bb:a0:10:7d:db:16:fd:bd:59:05:04:b3:65:e9:97:
4a:c7:14:34:2a:6e:13:f5:d8:30:2b:bf:92:1f:e2:94:e6:aa:
fb:d3:5d:ad:03:db:ab:cf:c7:26:60:ab:34:2b:0b:f1:9e:50:
5e:f5:17:d0:13:cd:c7:26:4c:56:22:ce:16:db:02:83:d0:2c:
53:2f:7a:bd:67:5b:16:55:83:b0:8e:11:21:fe:ff:fd:99:58:
ab:91:5c:44:c2:b2:15:13:c5:f9:ba:f9:bb:9d:f1:b0:e3:b3:
c5:4e:85:8f:7a:23:ec:2b:d8:81:49:f3:31:9c:6c:b8:81:aa:
2d:6a:a6:56:e3:2d:51:2c:3a:89:b5:5e:47:47:ba:1c:8f:9a:
17:90:40:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:29 2025 by rpki-client