Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json)
Hash identifier: EMHmufQ9UWxko5yz0oA75pAw6j9y4MlIGjadRg2BP5g=
Subject key identifier: 76:75:0D:5E:C7:E0:51:3B:71:EF:BC:99:A5:BA:96:98:1A:11:6B:D1
Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Certificate serial: 019A725C9171C10A60E7912441BF6B9A5C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
Manifest number: 0D3D
Signing time: Tue 11 Nov 2025 10:01:00 +0000
Manifest this update: Tue 11 Nov 2025 10:01:00 +0000
Manifest next update: Wed 12 Nov 2025 10:01:00 +0000
Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: UqFvk6mIUuapMgWalbx/Z6cuKHfnQEGtT5zL5uYsMGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:91:71:c1:0a:60:e7:91:24:41:bf:6b:9a:5c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Validity
Not Before: Nov 11 10:01:00 2025 GMT
Not After : Nov 12 10:01:00 2025 GMT
Subject: CN=76750d5ec7e0513b71efbc99a5ba96981a116bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:3b:af:fb:a5:e9:34:2b:3b:f3:9c:fa:40:
78:29:73:bf:81:73:30:35:a6:e0:2b:cb:a5:b2:d1:
e4:03:13:ff:e8:fe:31:ac:67:40:6f:b6:1a:3a:fd:
38:fa:0b:4a:bf:2d:35:7c:99:7d:5d:72:66:f0:31:
25:e2:94:cc:40:8e:28:9d:26:d0:36:4d:92:d4:26:
43:4a:5b:fd:a9:49:43:7b:7a:30:6d:ce:7e:8f:b7:
84:e7:d8:c9:36:9c:07:31:8f:aa:9f:1f:72:17:50:
c9:a6:89:2e:6b:34:75:65:c9:19:f3:9f:d3:37:f0:
29:33:82:40:96:21:6c:ac:9d:49:b6:10:03:38:d4:
15:23:db:c4:44:6a:1c:1a:d2:ee:41:8d:6c:6d:eb:
c0:5d:4d:60:65:45:fd:2b:3c:48:25:79:6a:27:bf:
5f:9b:81:c7:03:ee:da:d5:4b:a6:b5:1a:cf:05:70:
26:cf:29:08:82:42:f2:a7:12:15:bc:e8:ff:ec:ec:
ef:0b:ea:47:c1:34:ca:e2:00:27:d7:3d:50:39:cc:
f3:44:3d:79:11:02:30:a1:03:d3:12:df:94:55:c4:
d3:9b:bc:32:c9:9a:26:9b:66:98:d8:06:5d:95:75:
90:6a:40:03:fa:d3:f4:5b:da:6a:40:6d:3f:d1:54:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:0D:5E:C7:E0:51:3B:71:EF:BC:99:A5:BA:96:98:1A:11:6B:D1
X509v3 Authority Key Identifier:
keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8e:98:a9:ca:9b:d9:f1:53:86:09:6b:96:5a:79:82:97:86:
e3:f2:1c:79:c2:72:fb:af:3a:0b:15:38:14:33:ad:74:8f:f7:
fa:3e:33:4e:62:dd:97:7b:16:18:c8:35:75:70:19:26:07:67:
07:89:a3:77:b2:f5:b5:15:ed:26:6c:67:4d:47:54:e9:0c:f0:
42:b8:bc:f0:14:99:75:60:a9:67:c9:74:42:e6:d5:e3:1c:04:
9b:5c:37:84:8f:a5:ca:41:62:e5:fa:d2:43:9d:be:7f:5a:f5:
6f:3b:e8:4e:48:11:5f:3e:4c:d4:f8:b0:ef:72:c4:d4:4d:6a:
4c:b3:61:44:47:c3:13:70:96:87:57:69:4a:d0:0a:c5:52:f3:
9d:13:4f:75:c3:47:e6:7b:c2:45:48:79:4d:46:65:3e:4c:7c:
a5:93:70:e6:cf:4a:c9:ee:b3:66:73:40:ed:d6:00:ba:71:cf:
16:cb:89:86:79:fc:80:e8:59:40:9b:a5:a6:34:8c:fb:e9:3a:
4a:2a:ba:a1:11:05:d2:4f:cb:21:6a:fe:73:65:3d:5b:65:a5:
7b:c2:38:4b:ba:7c:88:12:8d:9a:2a:54:11:a4:a9:98:57:ff:
3c:58:86:ad:9d:e9:ef:ca:48:db:71:d0:4c:65:15:5f:6c:7f:
9d:b8:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:23 2025 by rpki-client