Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier: 9baYmc7LF0hBccudYorvcn0dW0ZAnQYgmsN9w0LVujY=
Subject key identifier: EC:F7:75:CE:74:7D:CD:5F:F7:56:38:EE:21:65:2A:FF:A8:6E:E8:C4
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer: /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial: 019A71B941ABEA997DE2455216C35AA0365B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number: 0D19
Signing time: Tue 11 Nov 2025 07:02:37 +0000
Manifest this update: Tue 11 Nov 2025 07:02:37 +0000
Manifest next update: Wed 12 Nov 2025 07:02:37 +0000
Files and hashes: 1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: 2XKkD0I7wpKsJQrvI6f5Xcw9fuAH53NJvqdGv8NAXoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:41:ab:ea:99:7d:e2:45:52:16:c3:5a:a0:36:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Validity
Not Before: Nov 11 07:02:37 2025 GMT
Not After : Nov 12 07:02:37 2025 GMT
Subject: CN=ecf775ce747dcd5ff75638ee21652affa86ee8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:5d:5b:85:21:e5:20:f8:ba:b9:8d:91:43:
83:8a:43:49:0e:e6:3b:f0:82:9b:30:bf:a0:cb:f2:
a3:70:52:e3:62:65:b9:b8:b6:fe:d6:f4:37:8b:3b:
f6:8c:ae:5e:75:e0:45:e6:16:c5:af:d4:2b:30:d2:
96:5a:68:fa:1f:3b:a4:15:19:77:ab:24:f5:d4:78:
d7:26:28:c0:68:57:4e:12:ab:06:a9:2b:ce:5f:ae:
69:93:97:c1:5d:3b:d8:af:39:a8:b1:89:17:b5:2b:
54:c0:95:88:a9:a2:c3:71:73:3b:1b:c2:e8:ac:db:
2d:5d:87:ff:d3:f5:1d:f0:04:56:bc:9b:cd:27:98:
5f:d1:bc:fe:74:1c:63:ec:f5:51:ad:d3:4a:72:69:
37:49:59:3f:d4:77:9b:07:7f:a1:96:0b:16:53:8c:
9c:41:e1:15:75:16:dd:8e:c1:be:d0:68:19:76:ba:
c3:ff:0f:de:53:93:b2:e0:4a:12:09:a9:d2:67:53:
49:1c:9b:b4:47:f7:a0:3c:ee:cc:22:3a:20:55:e9:
0c:28:16:fb:ec:24:dd:f6:8d:9d:0d:59:38:72:22:
dc:a1:c1:7d:50:ec:c4:02:4c:d8:6d:e6:f1:0a:87:
bc:87:3e:2d:c1:58:c8:f7:1a:e1:18:2b:1c:1e:31:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F7:75:CE:74:7D:CD:5F:F7:56:38:EE:21:65:2A:FF:A8:6E:E8:C4
X509v3 Authority Key Identifier:
keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0e:29:13:86:dc:a6:f8:5e:84:36:a7:53:5a:9f:5e:47:f0:
07:ac:99:31:4f:df:e5:ff:81:b5:a8:64:a8:17:50:1c:a5:82:
b9:9f:1d:e8:d1:24:ce:70:0d:eb:da:77:0a:67:d7:8f:33:eb:
b9:f9:ed:9c:7a:9f:f7:72:6c:e9:93:5c:40:98:ba:d7:98:50:
f4:94:54:bf:75:c9:38:04:aa:85:3f:2a:11:51:44:14:36:4f:
44:1b:1c:08:77:4e:ae:51:ca:63:c4:68:7f:b5:f0:bb:6a:5d:
d7:d9:c9:8a:44:f8:d3:f1:fb:83:bb:51:8b:1a:ec:49:90:c7:
e4:65:e6:4c:02:e0:e3:58:12:a4:f9:e1:a5:91:0a:fd:0e:63:
fb:ce:ad:e3:ed:ca:6d:35:6b:11:8e:f4:09:67:e8:5d:22:0f:
e1:e7:18:88:b1:95:7f:d3:a5:1f:91:51:d1:8d:71:49:83:c1:
f0:3c:96:7b:e2:ce:4e:36:3b:1a:09:fa:30:35:3d:fe:37:90:
32:11:99:4c:4d:4c:17:e5:eb:93:6c:26:2e:30:73:c5:19:4b:
18:bf:93:8c:88:5e:04:d8:04:ae:40:f7:c7:56:86:b2:9d:cb:
e4:29:6b:2c:73:fd:8f:c6:88:89:df:ea:89:fb:a2:e2:54:05:
85:78:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:53 2025 by rpki-client