Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File: f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier: +P17lTsD0rHTvhLuVFFEwXBC4JGt2SUQM0uBxDw8WyY=
Subject key identifier: 8C:D3:D1:EA:B3:CC:10:2B:F9:34:BD:75:E7:D0:1F:9B:6B:50:BA:09
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial: 019A71B7A7F923D6642603772B2B550B3C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number: 045D
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: PGIngdDbI98O7fT5QCJdx2U/KjOSQsepomBjnzULtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a7:f9:23:d6:64:26:03:77:2b:2b:55:0b:3c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=8cd3d1eab3cc102bf934bd75e7d01f9b6b50ba09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:4c:b3:70:49:9a:9a:d0:1c:85:45:f4:6d:
69:ab:74:5c:dc:f4:a3:12:c0:77:e5:85:84:2b:31:
63:4e:b3:20:d4:80:29:07:80:83:fb:b1:a0:ea:97:
3e:2a:29:99:8d:5a:44:dc:91:7e:5b:f6:16:19:2d:
52:c4:73:86:81:b9:76:0d:bb:6f:51:23:37:08:70:
34:ac:b7:5d:89:e7:06:e8:a2:2f:48:e1:a5:5f:a9:
cb:4e:d7:f7:5e:68:f5:57:3d:b0:c0:2e:04:9e:17:
19:28:cd:59:f9:d9:e0:c6:47:80:91:68:c4:4c:e5:
28:16:dd:aa:da:42:da:c6:c9:78:01:32:54:03:c7:
87:db:67:b5:ba:a2:22:ad:ae:8f:18:1c:5a:d9:63:
9b:6a:bb:0c:14:42:3f:56:77:71:2b:44:93:83:6a:
17:30:1c:70:ad:0e:0e:c3:78:79:a2:44:29:61:2e:
3b:31:cf:b3:d6:9b:ad:74:9e:6c:d1:ff:d8:cb:16:
5f:ca:46:7a:78:72:81:1e:e8:c1:4a:35:46:03:b5:
c9:46:8b:e8:7c:e1:a3:ea:89:18:23:64:53:a5:da:
e9:3b:6a:82:35:9f:4f:4d:70:28:ff:10:b4:45:69:
4e:28:1e:43:b7:c2:61:03:3a:84:27:67:ae:6b:1d:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D3:D1:EA:B3:CC:10:2B:F9:34:BD:75:E7:D0:1F:9B:6B:50:BA:09
X509v3 Authority Key Identifier:
keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c9:77:c5:7a:ad:d5:4e:5f:57:8e:43:78:7e:90:72:b7:1d:
01:7e:41:8b:63:9d:9f:00:f4:c1:f2:a6:1b:4f:0c:30:df:52:
80:83:29:22:ac:57:45:d2:fb:e1:13:c1:59:91:bd:46:ed:71:
75:42:15:47:ad:24:f9:cd:18:79:f5:7f:e8:a3:fe:16:dd:2a:
55:6e:b2:b1:c3:3d:be:f5:ae:b7:71:d7:f9:d5:d8:5e:5f:7a:
21:ed:92:34:c6:87:c4:5d:a0:68:58:93:81:8f:6e:b3:5d:e2:
1e:0b:57:a0:c3:7b:eb:19:3b:74:8d:d1:f7:5f:a4:f8:b0:ef:
c3:05:ec:b1:2b:61:f5:28:dc:a7:68:b5:70:52:29:64:15:cd:
58:7c:cd:c1:05:95:2f:7e:ad:59:82:b4:9e:0d:f5:a5:82:4c:
01:79:bc:3a:48:38:0a:ec:e2:1f:55:a9:c1:04:a0:8c:58:ab:
3d:ae:f0:74:5f:4c:37:c9:c5:03:b3:1b:42:c7:8e:e6:1f:f1:
0c:47:a7:65:fc:a1:cb:00:30:45:ec:95:cc:77:3d:5c:e1:1c:
c4:65:f4:5b:30:ed:f0:ab:a0:6f:aa:36:0c:09:71:f2:e1:77:
6a:d2:7a:f6:b1:30:28:4a:ca:ed:17:d3:2a:0a:1c:48:ef:b5:
74:83:7f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:56 2025 by rpki-client