Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: 6SBWiJKT4u2oa/ZaL5VEmEcTYuNMr5ew0mJekBB/l4g=
Subject key identifier: 7E:2B:A7:DE:73:7D:92:5C:7B:DC:B6:7C:83:8F:9F:10:66:09:4E:8F
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 019A71B90D3434242FF1CF0ABF5A8A298335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0B2B
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: mUE69lRw5SzDqjV5bDfWWDcSDUq0d/MfKp+qOI4tEJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0d:34:34:24:2f:f1:cf:0a:bf:5a:8a:29:83:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=7e2ba7de737d925c7bdcb67c838f9f1066094e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:ad:e4:20:6c:23:1e:98:71:91:f4:4d:60:
7e:d4:fc:e3:b6:b7:47:29:a5:6d:b3:90:a8:22:ff:
91:2a:97:d2:5c:83:c4:22:8d:2c:bd:e1:99:34:e3:
1f:c5:9f:ca:fa:8b:a3:ff:cf:f8:b2:75:9a:f6:40:
ff:f6:2b:6b:39:e9:54:10:7a:12:24:00:19:ca:90:
05:1d:80:19:58:07:ad:70:ef:73:b4:7b:2f:2f:fa:
92:e7:1b:83:1e:65:0f:36:e0:47:e0:f9:9b:0d:c4:
5c:77:a2:8b:53:5a:fc:cf:77:93:c5:35:70:62:4c:
02:09:bc:f8:28:cc:d7:77:c1:b3:70:10:be:91:a9:
ea:f5:08:fd:42:2e:2e:56:bd:61:cc:17:93:1c:d4:
6b:7e:45:24:cf:b3:21:10:7b:60:ee:27:ea:8e:be:
ce:fd:d1:ed:b2:b4:f3:cb:b1:5e:d0:57:ba:a4:24:
fd:35:6f:cb:ac:7e:e5:5d:37:5f:dd:5b:33:14:8e:
f3:2b:94:57:81:a1:c9:03:1c:3d:cd:d0:73:bd:49:
93:c2:16:d7:2f:a3:34:10:39:84:1c:9a:ff:a2:b3:
1d:32:cd:55:43:3e:0d:4a:f4:d3:c1:64:ac:4b:8c:
e9:c4:18:fc:b8:b8:d7:d5:0a:cf:a7:11:53:81:52:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2B:A7:DE:73:7D:92:5C:7B:DC:B6:7C:83:8F:9F:10:66:09:4E:8F
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ba:b6:78:e1:f2:25:52:f0:80:5d:0f:df:90:7e:2e:8c:2a:
35:18:f7:ed:26:e9:32:1b:1e:49:0c:0b:a7:bb:37:b9:aa:5a:
6f:71:1a:b9:72:52:82:62:49:51:a6:6c:2f:7a:f8:a1:a3:e3:
11:78:2d:56:b2:44:bd:5b:fb:49:1e:ac:96:33:5d:2f:79:0a:
6e:66:f3:15:7e:eb:4b:41:c4:4c:0d:19:54:43:f0:7f:51:d5:
bc:e6:45:43:c8:a2:13:e5:bf:5c:aa:3a:bd:c5:93:c3:e5:b8:
98:d2:89:41:bb:44:86:a8:a8:88:9e:5f:e1:2e:89:de:70:10:
2d:09:fc:80:0b:e3:da:e2:8c:07:05:21:4b:83:2c:b5:2d:ba:
ad:2c:93:c5:14:c5:70:8b:04:e7:44:cc:71:7b:b6:c1:ac:e3:
ff:ee:a3:04:0f:18:98:1e:04:04:6b:59:a4:4a:25:a3:11:5d:
2b:82:25:c7:3b:21:97:c3:5a:10:fb:56:e3:d0:25:cc:9c:a3:
ce:85:b7:cc:07:9a:0d:ed:73:62:81:9d:70:b9:36:96:8b:37:
37:a4:10:3f:13:fe:71:c2:7d:74:00:7e:7f:53:bf:d5:ca:29:
75:c0:2d:af:2e:a2:ec:0f:c3:c7:6f:8f:79:b5:2d:39:e8:70:
6c:55:58:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:39 2025 by rpki-client