Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
File: t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json)
Hash identifier: GfKtJB0ImzMMfbIOMK8GHnMLStSp1JC+lRyj5FZSjAM=
Subject key identifier: DC:9C:E9:2E:71:6C:21:0B:AF:08:0B:AB:C0:DE:E3:F0:B9:55:FF:4A
Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
Certificate issuer: /CN=b76cbf5927c476905feda34e1140148bf805d9b0
Certificate serial: 019A71B875756AD1BA18B297D851554EDE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: OQu8/0o/s2HZYV1Buo5ntiRhnHd0VrKG8h7fl3afLAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:75:75:6a:d1:ba:18:b2:97:d8:51:55:4e:de:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=dc9ce92e716c210baf080babc0dee3f0b955ff4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:7d:88:16:8b:dd:e1:aa:cf:70:84:f4:36:
7c:31:5b:be:ba:0f:03:f8:fd:4e:7a:75:50:22:e3:
74:1e:57:03:51:c8:f8:58:af:49:27:37:d0:ac:45:
a2:29:58:97:92:26:3d:c3:55:7d:bc:29:dc:61:fd:
05:d9:03:13:e7:c7:0a:8c:29:b0:cb:0e:9f:e5:40:
11:0e:08:6d:81:f5:46:46:81:3e:91:35:07:f9:aa:
2e:1c:3e:08:3a:35:33:64:de:1e:08:ea:c0:5a:a5:
d0:f1:e7:a1:3e:46:c7:b6:a0:51:b4:52:65:46:69:
47:84:71:46:d3:b1:cd:a4:4f:bb:dc:6d:d1:24:d7:
63:a8:28:86:6f:99:cd:3f:32:fa:fd:23:63:c1:21:
77:22:27:f6:90:7b:73:bb:5a:7d:8a:22:75:06:e8:
d3:9c:19:15:0e:b0:2d:ef:05:9e:7c:13:51:ce:d3:
50:00:a8:d8:cc:ab:4e:6c:3f:b2:8f:d4:57:06:e3:
42:d7:9e:6c:e7:12:da:a4:c9:0e:80:81:0c:d4:3b:
73:6f:a7:35:88:84:f1:49:a9:09:74:e9:1e:73:fb:
23:16:06:6b:eb:30:a5:2b:88:0e:55:8b:c1:91:d9:
e6:fd:ae:e4:45:1c:02:d5:75:3a:4f:9f:9c:53:2a:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:E9:2E:71:6C:21:0B:AF:08:0B:AB:C0:DE:E3:F0:B9:55:FF:4A
X509v3 Authority Key Identifier:
keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:26:eb:f9:67:42:59:f1:06:3b:e2:18:25:ad:62:43:b6:de:
3d:57:31:b7:bc:ea:d6:47:db:b1:9c:8a:d9:79:c7:b1:68:82:
d5:96:6b:96:f7:19:ba:92:b7:bf:af:a5:00:9c:81:be:48:1a:
b8:72:89:80:67:a6:07:5f:d1:52:78:75:82:5a:d3:26:14:2a:
42:36:0e:58:6e:21:c7:27:c0:31:bd:91:fe:d5:fd:26:1c:c3:
12:a8:a2:df:97:cf:d7:0f:9c:c5:90:b6:6d:10:26:57:08:0e:
cf:ae:0b:bf:80:dc:83:ed:e2:b3:3c:7b:bc:b4:ef:2c:95:c0:
2a:52:62:f8:06:e5:1a:58:7d:fe:c4:93:92:4d:78:35:90:c4:
a3:a4:49:93:5d:b6:1a:cb:d9:7e:1e:20:d8:f4:02:49:4f:0d:
48:2b:68:56:a7:f6:78:e3:86:6c:32:73:2d:62:09:ce:49:0e:
2c:a4:9f:8b:61:fd:ae:14:56:a9:36:49:a0:77:02:28:53:e6:
60:81:21:26:e8:bc:71:c2:89:52:73:a4:2d:ad:d0:aa:20:0d:
2a:b1:94:17:4f:ec:0f:4d:6f:a4:09:74:7b:1c:e1:db:de:25:
77:d6:91:d0:18:54:73:7d:24:af:8c:34:27:8b:d5:4f:16:fb:
20:0c:ae:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:42 2025 by rpki-client